489 matches found
CVE-2018-1000663
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function jsievalcode from jsiEval.c that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code...
CVE-2018-1000668
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsiObjArrayLookup jsiObj.c:274 that can result in Crash due to segmentation fault. This attack appear to be exploitable via The victim must execute crafted javascript code. This vulnerability appears to ha...
CVE-2019-1010177
Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function JsiRegExpNew jsi/jsiRegexp.c:39. The attack vector is: executing crafted javascript code. The fixed version is: after commit 48a66c798d...
CVE-2024-24188
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c...
CVE-2024-24186
Jsish v3.5.0 commit 42c694c was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c...
CVE-2024-24188
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c...
CVE-2024-24189
Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...
CVE-2024-24186
Jsish v3.5.0 commit 42c694c was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c...
CVE-2024-24189
Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...
Design/Logic Flaw
Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...
Stack overflow
Jsish v3.5.0 commit 42c694c was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c...
Heap overflow
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c...
PT-2024-20310 · Jsish · Jsish
Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A use-after-free issue was discovered in Jsish via the SplitChar at ./src/jsiUtils.c. Recommendations: For Jsish version 3.5.0, at the moment, there is no information about a newer version that contains a fix...
CVE-2024-24186
Jsish v3.5.0 commit 42c694c was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c...
CVE-2024-24188
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c...
PT-2024-20308 · Jsish · Jsish
Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A stack-overflow issue was discovered in Jsish via the IterGetKeysCallback component at /jsish/src/jsiValue.c. Recommendations: For Jsish version 3.5.0, consider disabling the IterGetKeysCallback component as ...
CVE-2024-24188
CVE-2024-24188 affects Jsish v3.5.0, with a heap-buffer-overflow in ./src/jsiUtils.c . Documented impact: high for confidentiality, integrity, and availability; CVSS v3.1 base score 9.8. Exploitation details are not provided in the supplied documents, and there is no remediation/version fix infor...
CVE-2024-24189: Use After Free
Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...
CVE-2024-24189
CVE-2024-24189 – Jsish 3.5.0 suffers a use-after-free in SplitChar (src/jsiUtils.c). Root cause: faulty handling in SplitChar leading to use-after-free. Impact is severe per CVSS: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (base 9.8, CRITICAL). Connected sources confirm the issue but do not provide a pu...