642 matches found
JerryScript 代码问题漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsefunctionstatement in js-parser-statm.c:733 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
JerryScript 缓冲区错误漏洞
JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in jmempoolscollectempty in jmem-poolman.c:165 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this time...
JerryScript 安全漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in the parserparseobjectinitializer in /home/JerryScript/jerry-core/parser/js/js-parser-expr.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
JerryScript 缓冲区错误漏洞
JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in litreadcodeunitfromutf8 in lit-strings.c:431 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
JerryScript 安全漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsetrystatementend in js-parser-statm.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
JerryScript 代码问题漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsestatements in js-parser-statm.c:2756 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
CVE-2021-20026
A vulnerability in the SonicWall NSM On-Prem product allows an authenticated attacker to perform OS command injection using a crafted HTTP request. This vulnerability affects NSM On-Prem 2.2.0-R10 and earlier versions...
CVE-2020-10072
Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges CWE-280. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc...
CVE-2020-10066
Incorrect Error Handling in Bluetooth HCI core. Zephyr versions = v1.14.2, = v2.2.0 contain NULL Pointer Dereference CWE-476. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-gc66-xfrc-24qr...
CVE-2020-10069
Zephyr Bluetooth unchecked packet data results in denial of service. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Parameters CWE-233. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-f6vh-7v4x-8fjp...
Input validation
Improper Handling of Insufficient Permissions or Privileges in zephyr. Zephyr versions = v1.14.2, = v2.2.0 contain Improper Handling of Insufficient Permissions or Privileges CWE-280. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-vf79-hqwm-w4xc...
Zephyr 缓冲区错误漏洞
Zephyr is an open source, small, scalable real-time operating system. A security vulnerability exists in Zephyr versions ＞= v1.14.2 and ＞= v2.2.0, which stems from a lack of size checking in Bluetooth HCI on SPI. No details of the vulnerability are available at this time...
Zephyr 安全漏洞
Zephyr is a small real-time operating system for connected, resource-constrained embedded devices. A security vulnerability exists in Zephyr versions = v1.14.2 and = v2.2.0. The vulnerability stems from improper input validation. An attacker could exploit the vulnerability to cause a denial of...
CVE-2021-29433
Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability i...
Input validation
Sydent is a reference Matrix identity server. In Sydent versions 2.2.0 and prior, sissing input validation of some parameters on the endpoints used to confirm third-party identifiers could cause excessive use of disk space and memory leading to resource exhaustion. A patch for the vulnerability i...
DEBIAN-CVE-2020-28595
An out-of-bounds write vulnerability exists in the Obj.cpp loadobj functionality of Prusa Research PrusaSlicer 2.2.0 and Master commit 4b040b856. A specially crafted obj file can lead to code execution. An attacker can provide a malicious file to trigger this vulnerability...
Red Hat Undertow Environmental Issues Vulnerabilities
Red Hat Undertow is a Java-based embedded web server from Red Hat USA and is the default web server for Wildfly Java Application Server. Red Hat Undertow is vulnerable to an environmental issue. The following products and versions are affected: Undertow versions prior to 2.2.0, Undertow versions...
Debian DLA-2491-1 : openexr security update
Two issues were discovered in openexr, a set of tools to manipulate OpenEXR image files, often in the computer-graphics industry for visual effects and animation. For Debian 9 'Stretch', these problems has been fixed in version 2.2.0-11+deb9u2. We recommend that you upgrade your openexr packages...
CVE-2020-28272
Prototype pollution vulnerability in 'keyget' versions 1.0.0 through 2.2.0 allows attacker to cause a denial of service and may lead to remote code execution...
Authentication flaw
Apache Kylin 2.0.0, 2.1.0, 2.2.0, 2.3.0, 2.3.1, 2.3.2, 2.4.0, 2.4.1, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 3.0.0-alpha, 3.0.0-alpha2, 3.0.0-beta, 3.0.0, 3.0.1, 3.0.2, 3.1.0, 4.0.0-alpha has one restful api which exposed Kylin's configuration information without any...