1559 matches found
Jerryscript has an unspecified vulnerability (CNVD-2022-07249)
JerryScript is a lightweight JavaScript engine from the JerryScript Jerryscript project. version 3.0.0 of Jerryscript has a security vulnerability that stems from the existence of an assertion failure in ecma-helpers-value. No detailed vulnerability details are available...
Jerryscript stack buffer overflow vulnerability
JerryScript is a lightweight JavaScript engine from the JerryScript project. jerryscript has a stack buffer overflow vulnerability in version 3.0.0, which stems from vmloop.ltopriv.304 in /jerry-core/vm/vm.c when handling untrusted input with a boundary error. An attacker could exploit this...
JerryScript lit-strings.c denial-of-service vulnerability
JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial-of-service vulnerability in version 3.0.0, which stems from an assertion failure in /jerry-core/lit/lit-strings.c. An attacker could use this vulnerability to launch a denial of service...
JerryScript ecma-literal-storage.c denial of service vulnerability
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-literal-storage.c. case, an attacker could use this vulnerability to launch a denial of service...
JerryScript ecma-helpers-value.c denial-of-service vulnerability
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-helpers-value.c , an attacker could use this vulnerability to launch a denial of service...
JerryScript ecma-objects.c denial of service vulnerability
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/operations/ecma-objects.c , an attacker could use this vulnerability to launch a denial of service...
JerryScript ecma-helpers.c denial of service vulnerability
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-helpers.c. An attacker could exploit this vulnerability to launch a denial of service...
JerryScript ecma-helpers-string.c Denial of Service Vulnerability
JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /base/ecma-helpers-string.c. An attacker could use this vulnerability to launch a denial of service...
Oracle WebLogic Server Input Validation Error Vulnerability (CNVD-2022-05875)
Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...
[SECURITY] Fedora 35 Update: nodejs-16.13.2-1.fc35
Node.js is a platform built on Chrome's JavaScript runtime for easily building fast, scalable network applications. Node.js uses an event-driven, non-blocking I/O model that makes it lightweight and efficient, perfect for data-intensive real-time applications that run across distributed devices...
Oracle WebLogic Server Input Validation Error Vulnerability (CNVD-2022-05874)
Oracle WebLogic Server is an application services middleware from Oracle for cloud and traditional environments that provides a modern, lightweight development platform that supports full lifecycle management of applications from development to production and simplifies application deployment and...
January 18, 2022—KB5010791 (OS Build 17763.2458) Out-of-band
None None...
January 17, 2022—KB5010790 (OS Build 14393.4889) Out-of-band
None None...
Teedy cross-site scripting vulnerability (CNVD-2022-08344)
Teedy is a French open source, lightweight document management system for individuals and businesses. Teedy suffers from a cross-site scripting vulnerability that stems from the fact that in Teedy, versions v1.5 through v1.9 are susceptible to attacks that store cross-site scripting XSS in the na...
[SECURITY] Fedora 34 Update: mbedtls-2.16.12-1.fc34
Mbed TLS is a light-weight open source cryptographic and SSL/TLS library written in C. Mbed TLS makes it easy for developers to include cryptographic and SSL/TLS capabilities in their embedded applications with as little hassle as possible. FOSS License Exception:...
H2database代码问题漏洞
H2 database is an embeddable Rdbms written in Java . A code issue vulnerability exists in H2 database, which stems from the H2 database's getConnection method taking the driver's class name and the database's URL as parameters, which can be exploited by an attacker to pass the name of the JNDI...
mruby null pointer dereference vulnerability
mruby is a lightweight implementation of the Ruby language. A null pointer dereference vulnerability exists in mruby, which can be exploited by an attacker to cause segmentation errors and application crashes...
Log4j “Log4Shell” RCE explained (CVE-2021-44228)
Hello everyone! I decided to make a separate episode about Log4Shell. Of course, there have already been many reviews of this vulnerability. But I do it primarily for myself. It seems to me that serious problems with Log4j and similar libraries will be with us for a long time. Therefore, it would...
PT-2021-7034 · Microsoft · Windows
Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Lightweight Directory Access Protocol LDAP in Microsoft Windows, specifically due to insufficient input validation. This allows a remote...
