CVE-2021-46475

The CVE-2021-46475 entry concerns Jsish v3.5.0, where a heap buffer overflow is triggered by jsi_ArraySliceCmd in src/jsiArray.c, leading to Denial of Service (DoS). Multiple connected documents corroborate the vulnerability description (heap overflow in Jsish 3.5.0 via jsi_ArraySliceCmd, DoS); h...

CVE-2021-46477

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46477

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46474

CVE-2021-46474 affects Jsish v3.5.0 and is caused by a heap-based buffer overflow in jsiEvalCodeSub (src/jsiEval.c), which can lead to a Denial of Service. Sources across NVD/CNVD/CVELIST describe the issue consistently, with DoS impact; no exploit details are provided in the connected documents....

CVE-2021-46477: Out-of-bounds Write

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExpconstructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12723

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via jsi ArraySliceCmd in src/jsiArray.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, consider disabling the jsi ArraySliceCm...

PT-2022-12729

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via the BooleanConstructor at src/jsiBool.c. Recommendations For Jsish version 3.5.0, at the moment, there is no information about a newer version that contains a f...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiArraySliceCmd in src/jsiArray.c...

CVE-2021-46480: Out-of-bounds Write

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

PT-2022-12728

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via the NumberConstructor at src/jsiNumber.c. Recommendations For Jsish version 3.5.0, consider restricting access to the NumberConstructor function until a patch i...

CVE-2021-46483: Out-of-bounds Write

Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c...

CVE-2021-46482: Out-of-bounds Write

Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c...

CVE-2021-46475: Out-of-bounds Write

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46481: Missing Release of Memory after Effective Lifetime

Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c...

PT-2022-12724

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A heap buffer overflow was discovered in Jsish via the RegExp constructor in src/jsiRegexp.c, which can lead to a Denial of Service DoS. Recommendations For Jsish version 3.5.0, as a temporary workaround, consid...

PT-2022-12727

Name of the Vulnerable Software and Affected Versions Jsish version 3.5.0 Description A memory leak was discovered in Jsish via linenoise at src/linenoise.c. Recommendations For Jsish version 3.5.0, consider restricting access to the linenoise functionality at src/linenoise.c to minimize the risk...

CVE-2021-25074

The WebP Converter for Media WordPress plugin before 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue...

CVE-2021-25074: URL Redirection to Untrusted Site

The WebP Converter for Media WordPress plugin before 4.0.3 contains a file passthru.php which does not validate the src parameter before redirecting the user to it, leading to an Open Redirect issue...

PT-2022-9630

Name of the Vulnerable Software and Affected Versions WebP Converter for Media WordPress plugin versions prior to 4.0.3 Description The issue arises from a file named passthru.php that fails to validate the src parameter before redirecting the user to it, resulting in an Open Redirect issue...

Debian: Security Advisory (DLA-2885-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...