Lucene search
K

1246 matches found

NVD
NVD
added 2018/05/24 8:29 p.m.10 views

CVE-2018-11419

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function via a RegExp"\u0" payload, related to reparsecharclass in parser/regexp/re-parser.c...

9.8CVSS9.5AI score0.00376EPSS
Exploits1References1
OSV
OSV
added 2018/05/24 8:29 p.m.11 views

CVE-2018-11419

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function via a RegExp"\u0" payload, related to reparsecharclass in parser/regexp/re-parser.c...

9.8CVSS9.6AI score
Exploits0References1
Cvelist
Cvelist
added 2018/05/24 8:0 p.m.15 views

CVE-2018-11419

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function via a RegExp"\u0" payload, related to reparsecharclass in parser/regexp/re-parser.c...

9.5AI score0.00376EPSS
Exploits1References1
CVE
CVE
added 2018/05/24 8:0 p.m.49 views

CVE-2018-11419

CVE-2018-11419 affects JerryScript 1.0, with a heap-based buffer over-read in lit_read_code_unit_from_hex triggered by a RegExp("[\u0") payload and related to re_parse_char_class in parser/regexp/re-parser.c. The vulnerability details are documented across multiple sources in the connected set an...

9.8CVSS9.3AI score0.00376EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2018/05/24 8:0 p.m.12 views

CVE-2018-11418

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromutf8 function via a RegExp"\u0020" payload, related to reparsecharclass in parser/regexp/re-parser.c...

9.5AI score0.00376EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2018/05/24 8:0 p.m.25 views

CVE-2018-11418

Removed by vendor...

9.8CVSS9.4AI score0.00376EPSS
Exploits1
CVE
CVE
added 2018/05/24 8:0 p.m.50 views

CVE-2018-11418

CVE-2018-11418 affects JerryScript 1.0. There is a heap-based buffer over-read in the function lit_read_code_unit_from_utf8, triggered by a RegExp("[\u0020") payload and related to re_parse_char_class in parser/regexp/re-parser.c. The issue is described across multiple sources as a vulnerability ...

9.8CVSS9.3AI score0.00376EPSS
Exploits1References1Affected Software1
Debian CVE
Debian CVE
added 2018/05/24 8:0 p.m.18 views

CVE-2018-11419

Removed by vendor...

9.8CVSS9.4AI score0.00376EPSS
Exploits1
CNVD
CNVD
added 2018/03/05 12:0 a.m.2 views

JerryScript Buffer Overflow Vulnerability

JerryScript is a lightweight JavaScript engine . The 'litreadcodeunitfromhex' function in the file lit/lit-char-helpers.c in JerryScript has a heap buffer out-of-bounds read. An attacker could exploit this vulnerability to cause a buffer overflow...

9.8CVSS7.2AI score0.00327EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2018/03/01 10:29 p.m.17 views

CVE-2017-18212

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function in lit/lit-char-helpers.c via a RegExp"\x0"; payload...

9.8CVSS7.2AI score0.00327EPSS
Exploits0References2
OSV
OSV
added 2018/03/01 10:29 p.m.18 views

CVE-2017-18212

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function in lit/lit-char-helpers.c via a RegExp"\x0"; payload...

9.8CVSS9.7AI score
Exploits0References1
OSV
OSV
added 2018/03/01 10:29 p.m.0 views

UBUNTU-CVE-2017-18212

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function in lit/lit-char-helpers.c via a RegExp"\x0"; payload...

9.8CVSS7.5AI score0.00327EPSS
Exploits0References3
Prion
Prion
added 2018/03/01 10:29 p.m.14 views

Heap overflow

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function in lit/lit-char-helpers.c via a RegExp"\x0"; payload...

7.5CVSS9.4AI score0.00327EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2018/03/01 10:29 p.m.16 views

CVE-2017-18212

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function in lit/lit-char-helpers.c via a RegExp"\x0"; payload...

9.8CVSS9.6AI score0.00327EPSS
Exploits0References1
Cvelist
Cvelist
added 2018/03/01 9:0 p.m.18 views

CVE-2017-18212

An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the litreadcodeunitfromhex function in lit/lit-char-helpers.c via a RegExp"\x0"; payload...

9.6AI score0.00327EPSS
Exploits0References1
CVE
CVE
added 2018/03/01 9:0 p.m.52 views

CVE-2017-18212

CVE-2017-18212 affects JerryScript 1.0 and involves a heap-based buffer over-read in the function lit_read_code_unit_from_hex (file: lit/lit-char-helpers.c) triggered via the payload pattern RegExp("[\x0"). The issue is documented across multiple sources and is rated high/critical (NVD CVSS v3 ba...

9.8CVSS9.4AI score0.00327EPSS
Exploits0References1Affected Software1
CNVD
CNVD
added 2017/09/27 12:0 a.m.1 views

JerryScript Denial of Service Vulnerability (CNVD-2017-34839)

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript version 1.0. A remote attacker can exploit this vulnerability with a specially crafted .js file to cause a denial of service jmemheapallocblockinternal heap memory corruption or possibly execute...

7.8CVSS7.6AI score0.00567EPSS
Exploits1References1
OSV
OSV
added 2017/09/26 6:29 p.m.0 views

UBUNTU-CVE-2017-14749

JerryScript 1.0 allows remote attackers to cause a denial of service jmemheapallocblockinternal heap memory corruption or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data...

7.8CVSS7.5AI score0.00567EPSS
Exploits1References3
OSV
OSV
added 2017/09/26 6:29 p.m.15 views

CVE-2017-14749

JerryScript 1.0 allows remote attackers to cause a denial of service jmemheapallocblockinternal heap memory corruption or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data...

7.8CVSS8.5AI score
Exploits0References1
UbuntuCve
UbuntuCve
added 2017/09/26 6:29 p.m.26 views

CVE-2017-14749

JerryScript 1.0 allows remote attackers to cause a denial of service jmemheapallocblockinternal heap memory corruption or possibly execute arbitrary code via a crafted .js file, because unrecognized \ characters cause incorrect 0x00 characters in bytecode.literal data...

7.8CVSS7.2AI score0.00567EPSS
Exploits1References2
Rows per page
Query Builder