CVE-2024-24189

Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...

CVE-2024-24188: Out-of-bounds Write

Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c...

Jsish Buffer Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database. A buffer error vulnerability exists in Jsish version v3.5.0, which stems from a heap buffer overflow contained in /src/jsiUtils.c. The vulnerability is caused by the inclusion of a heap buffer overflow...

PT-2024-20309 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A heap-buffer-overflow issue was discovered in Jsish. The issue is located in ./src/jsiUtils.c. Recommendations: For Jsish version 3.5.0, at the moment, there is no information about a newer version that...

CVE-2024-24186: Out-of-bounds Write

Jsish v3.5.0 commit 42c694c was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c...

CVE-2024-24186

Jsish v3.5.0 is affected by a stack overflow in the IterGetKeysCallback path (file /jsish/src/jsiValue.c). The issue is documented across multiple sources with a CRITICAL impact (CVSS: 9.8) and a network attack vector, no user interaction required. Technical details consistently point to the Iter...

CVE-2024-24189

Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...

Jsish Buffer Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database. A buffer error vulnerability exists in Jsish version v3.5.0, which stems from the component IterGetKeysCallback in /jsish/src/jsiValue.c containing a heap buffer overflow...

Jsish Resource Management Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database. A resource management error vulnerability exists in Jsish version v3.5.0, which stems from a post-release reuse of SplitChar in /src/jsiUtils.c. The vulnerability is caused by the presence of an error in SplitChar...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

CVE-2020-23258

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

CVE-2020-23259

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

CVE-2020-23259

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

Design/Logic Flaw

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

Design/Logic Flaw

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

Design/Logic Flaw

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

CVE-2020-23258

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...