67 matches found
EUVD-2021-33167
Malicious code in bioql PyPI...
EUVD-2021-33177
Malicious code in bioql PyPI...
EUVD-2021-33170
Malicious code in bioql PyPI...
EUVD-2021-33178
Malicious code in bioql PyPI...
EUVD-2021-33156
Malicious code in bioql PyPI...
CVE-2024-24189
Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...
CVE-2021-46491
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiCommandPkgOpts at src/jsiCmds.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46505
Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x8664-linux-gnu/libasan.so.4+0x5b1e5...
CVE-2021-46487
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x8664-linux-gnu/libc.so.6+0x18e506. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46489
Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiDecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2020-22873
Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code...
CVE-2020-23258
An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...
CVE-2019-1010169
Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexergetchar jsiLexer.c:9. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...
CVE-2019-1010170
Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function JsiObjFree jsiObj.c:230. The attack vector is: executing crafted javascript code. The fixed version is: 2.4.78...
CVE-2018-1000663
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...
CVE-2018-1000668
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsiObjArrayLookup jsiObj.c:274 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to ha...
CVE-2019-1010177
Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function JsiRegExpNew jsi/jsiRegexp.c:39. The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d...
Jsish Resource Management Error Vulnerability
Jsish is a small JavaScript parser written in C with a built-in database. A resource management error vulnerability exists in Jsish version v3.5.0, which stems from a post-release reuse of SplitChar in /src/jsiUtils.c. The vulnerability is caused by the presence of an error in SplitChar...
