Lucene search
+L

4261 matches found

Positive Technologies
Positive Technologies
•added 2022/01/27 12:00 a.m.•4 views

PT-2022-12792

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via parse cval type at src/mjs ffi.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider disabling the parse...

5.5CVSS0.00614EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2022/01/27 12:00 a.m.•3 views

PT-2022-12753

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description An assertion failure occurs at src/mjs bcode.c in Cesanta MJS. The issue is related to the condition i parts cnt, which suggests a potential out-of-bounds access or incorrect indexing. Recommendations For...

5.5CVSS0.00614EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/27 12:00 a.m.•9 views

CVE-2021-46488: Undefined Security Weakness

Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

5.5CVSS6AI score0.00607EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/01/27 12:00 a.m.•4 views

PT-2022-12751

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description An assertion failure occurred in Jsish at src/jsiValue.c, specifically with the condition v-d.lval != v. Recommendations For Jsish version 3.5.0, at the moment, there is no information about a newer version that...

5.5CVSS0.00607EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/27 12:00 a.m.•6 views

CVE-2021-46506: Reachable Assertion

There is an Assertion 'v-d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0...

5.5CVSS6AI score0.00607EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/27 12:00 a.m.•5 views

PT-2022-12778

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to a SEGV vulnerability via getprop builtin foreign at src/mjs exec.c, which can lead to a Denial of Service DoS. Recommendations For Cesanta MJS version 2.20.0, consider disabling th...

5.5CVSS0.00614EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/27 12:00 a.m.•5 views

CVE-2021-46534: Undefined Security Weakness

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getpropbuiltinforeign at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...

5.5CVSS6AI score0.00614EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/27 12:00 a.m.•8 views

CVE-2021-46513: Buffer Copy without Checking Size of Input

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjsmkstring at mjs/src/mjsstring.c...

7.8CVSS7.6AI score0.00739EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/27 12:00 a.m.•3 views

PT-2022-12738

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description The issue is related to a SEGV vulnerability via Jsi FunctionInvoke at src/jsiFunc.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, consider disabling the Jsi FunctionInvoke...

5.5CVSS0.00565EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/01/27 12:00 a.m.•3 views

PT-2022-12768

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A heap buffer overflow issue was discovered in Cesanta MJS via the to json or debug function at mjs/src/mjs json.c. This issue can be exploited, potentially leading to unintended consequences...

7.8CVSS0.0073EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/01/27 12:00 a.m.•5 views

PT-2022-12769

Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A heap buffer overflow issue was discovered in Cesanta MJS via the snquote function at mjs/src/mjs json.c. Recommendations For version 2.20.0, consider updating to a newer version that contains a fix for...

7.8CVSS0.00739EPSS
SaveExploits1References3
NVD
NVD
•added 2022/01/25 1:15 a.m.•36 views

CVE-2021-46482

Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c...

7.8CVSS0.0084EPSS
SaveExploits1References1
NVD
NVD
•added 2022/01/25 1:15 a.m.•32 views

CVE-2021-46483

Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c...

7.8CVSS0.0084EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2022/01/25 1:15 a.m.•11 views

CVE-2021-46478

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

5.5CVSS6.2AI score0.00692EPSS
SaveExploits1References2
NVD
NVD
•added 2022/01/25 1:15 a.m.•31 views

CVE-2021-46478

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

5.5CVSS0.00692EPSS
SaveExploits1References1
Prion
Prion
•added 2022/01/25 1:15 a.m.•27 views

Heap overflow

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

4.3CVSS5.8AI score0.00692EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/01/25 1:15 a.m.•24 views

Heap overflow

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

4.3CVSS5.8AI score0.00692EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/01/25 1:15 a.m.•34 views

Heap overflow

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

4.3CVSS5.8AI score0.00692EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/01/25 1:15 a.m.•33 views

Memory corruption

Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...

4.3CVSS5.5AI score0.00717EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2022/01/25 1:15 a.m.•29 views

Heap overflow

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...

4.3CVSS5.8AI score0.00692EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder