4245 matches found
CVE-2021-46477: Out-of-bounds Write
Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46481: Missing Release of Memory after Effective Lifetime
Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...
PT-2022-12723
Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via jsi ArraySliceCmd in src/jsiArray.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, consider disabling the jsi ArraySliceCm...
PT-2022-12729
Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via the BooleanConstructor at src/jsiBool.c. Recommendations For Jsish version 3.5.0, at the moment, there is no information about a newer version that contains a f...
PT-2022-12724
Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via the RegExp constructor in src/jsiRegexp.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, as a temporary workaround, consid...
Jsish 缓冲区错误漏洞
Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiArraySliceCmd in src/jsiArray.c...
CVE-2021-46480: Out-of-bounds Write
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46483: Out-of-bounds Write
Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c...
CVE-2021-46482: Out-of-bounds Write
Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c...
PT-2022-12728
Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via the NumberConstructor at src/jsiNumber.c. Recommendations For Jsish version 3.5.0, consider restricting access to the NumberConstructor function until a patch i...
PT-2022-12727
Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A memory leak was discovered in Jsish via linenoise at src/linenoise.c. Recommendations For Jsish version 3.5.0, consider restricting access to the linenoise functionality at src/linenoise.c to minimize the risk...
CVE-2021-46475: Out-of-bounds Write
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-25074
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue...
CVE-2021-25074: URL Redirection to Untrusted Site
The WebP Converter for Media WordPress plugin before 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue...
Debian: Security Advisory (DLA-2885-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2022-9630
Name of the Vulnerable Software and Affected Versions WebP Converter for Media WordPress plugin versions prior to 4.0.3 Description The issue arises from a file named passthru.php that fails to validate the src parameter before redirecting the user to it, resulting in an Open Redirect issue...
[SECURITY] [DLA 2885-1] qtsvg-opensource-src security update
----------------------------------------------------------------------- Debian LTS Advisory DLA-2885-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta January 17, 2022 https://wiki.debian.org/LTS -...
CVE-2021-46243: NULL Pointer Dereference
An untrusted pointer dereference vulnerability exists in HDF5 v1.13.1-1 via the function H5Odtypedecodehelper at hdf5/src/H5Odtype.c. This vulnerability can lead to a Denial of Service DoS...
