CVE-2024-24189

Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...

Jsish Resource Management Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database. A resource management error vulnerability exists in Jsish version v3.5.0, which stems from a post-release reuse of SplitChar in /src/jsiUtils.c. The vulnerability is caused by the presence of an error in SplitChar...

Jsish Buffer Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database. A buffer error vulnerability exists in Jsish version v3.5.0, which stems from the component IterGetKeysCallback in /jsish/src/jsiValue.c containing a heap buffer overflow...

CVE-2024-24186

Jsish v3.5.0 is affected by a stack overflow in the IterGetKeysCallback path (file /jsish/src/jsiValue.c). The issue is documented across multiple sources with a CRITICAL impact (CVSS: 9.8) and a network attack vector, no user interaction required. Technical details consistently point to the Iter...

CVE-2024-24189

Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

CVE-2020-23258

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

CVE-2020-23259

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

CVE-2020-23259

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

Design/Logic Flaw

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

Design/Logic Flaw

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

Design/Logic Flaw

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

CVE-2020-23258

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v.3.0.11 and earlier versions, which stems from a vulnerability that allows an attacker to cause a denial of service via the StringReplaceCmd function...

CVE-2020-23259

CVE-2020-23259 affects the Jsish project, specifically versions up to and including 3.0.11. The issue is a denial-of-service vulnerability caused by the Jsi_Strlen function in src/jsiChar.c. The connected documents do not provide a concrete exploit vector, impact details beyond DoS, or any availa...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

CVE-2020-23258

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

PT-2023-11643 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish version 3.0.11 Description: An issue in Jsish allows a remote attacker to cause a denial of service via the Jsi ValueIsNumber function in the ./src/jsiValue.c file. Recommendations: For Jsish version 3.0.11, as a temporary workaround,...