4329 matches found
The vulnerability of the tftp_input() function in the src/tftp.c component of the TCP-IP Libslirp emulator allows a hacker to gain access to confidential data.
The vulnerability of the tftpinput function in the src/tftp.c component of the TCP-IP Libslirp emulator relates to access to an uninitialized pointer. Exploiting this vulnerability could allow an attacker to gain access to confidential data...
Cross-site Scripting (XSS)
Overview markdown-to-jsx is a lightweight, customizable React markdown component. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the src property due to improper input sanitization. An attacker can execute arbitrary code by injecting a malicious iframe element in...
CVE-2024-25197: NULL Pointer Dereference
Open Robotics Robotic Operating Sytstem 2 ROS2 and Nav2 humble versions were discovered to contain a NULL pointer dereference via the isCurrent function at /src/layeredcostmap.cpp...
Medium: jtidy
Issue Overview: An issue was discovered jtidy thru r938 allows attackers to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies. CVE-2023-34623 Affected Packages: jtidy Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Vis...
CVE-2024-25201
Espruino 2v20 commit fcc9ba4 was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c...
Stack overflow
Espruino 2v20 commit fcc9ba4 was discovered to contain a Stack Overflow via the jspeFactorFunctionCall at src/jsparse.c...
Out-of-bounds
Espruino 2v20 commit fcc9ba4 was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c...
Heap overflow
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c...
CVE-2024-24188
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c...
CVE-2024-25200
CVE-2024-25200 affects Espruino 2v20 (commit fcc9ba4). The vulnerability is a Stack Overflow via the jspeFactorFunctionCall in src/jsparse.c. Documented impact is high (availability), with network attack vector and no privileges required. No remediation details are provided in the supplied source...
CVE-2024-25201
The CVE-2024-25201 entry concerns Espruino 2v20 (commit fcc9ba4) with an Out-of-bounds Read in the jsvStringIteratorPrintfCallback function located at src/jsvar.c. Public sources in the dataset (NVD, Red Hat, CVE lists, CNNVD, etc.) consistently describe a read past array bounds in this component...
CVE-2024-25200
Espruino 2v20 commit fcc9ba4 was discovered to contain a Stack Overflow via the jspeFactorFunctionCall at src/jsparse.c...
CVE-2024-24189: Use After Free
Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...
CVE-2024-24186
Jsish v3.5.0 commit 42c694c was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c...
CVE-2024-24189
Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...
PT-2024-20813
Name of the Vulnerable Software and Affected Versions Espruino version 2v20 commit fcc9ba4 Description A Stack Overflow issue was discovered in Espruino via the jspeFactorFunctionCall at src/jsparse.c. Recommendations For Espruino version 2v20 commit fcc9ba4, consider disabling the...
CVE-2024-25201: Out-of-bounds Read
Espruino 2v20 commit fcc9ba4 was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c...
CVE-2024-24188: Out-of-bounds Write
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c...