14949 matches found
PT-2023-23515 · Unknown · Jerryscript
Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 1a2c047 Description: An Assertion Failure was discovered in Jerryscript via the component parser parse class at jerry-core/parser/js/js-parser-expr.c. Recommendations: For Jerryscript version 3.0 commit 1a2c047,...
CVE-2023-31916
CVE-2023-31916 affects JerryScript 3.0 (commit 1a2c047). The vulnerability is an Assertion Failure in the jmem_heap_finalize function (jerry-core/jmem/jmem-heap.c). CVSS metrics in the provided records show a local attack vector with low attack complexity, no privileges required, user interaction...
CVE-2023-31920
JerryScript CVE-2023-31920 concerns an assertion failure in the vm_loop path (jerry-core/vm/vm.c) affecting JerryScript 3.0 (commit 05dbbd1). The vulnerability is local, with low attack complexity, no privileges required, but requires user interaction and results in a high availability impact (Do...
PT-2023-23584 · Wwbn · Wwbn Avideo
Name of the Vulnerable Software and Affected Versions: WWBN AVideo versions prior to 12.4 Description: A command injection issue exists in WWBN AVideo, allowing Remote Code Execution when the CloneSite Plugin is used. This issue is related to the plugin/CloneSite/cloneClient.json.php endpoint. It...
PT-2023-23521 · Unknown · Jerryscript
Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 05dbbd1 Description: An Assertion Failure was discovered in Jerryscript via the vm loop at jerry-core/vm/vm.c. Recommendations: For Jerryscript version 3.0 commit 05dbbd1, consider restricting access to the vm...
CVE-2023-31914
Jerryscript 3.0 commit 05dbbd1 was discovered to contain out-of-memory issue in malloc...
PT-2023-23517 · Unknown · Jerryscript
Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0 commit 1a2c047 Description: An Assertion Failure was discovered in Jerryscript via the jmem heap finalize function at jerry-core/jmem/jmem-heap.c. Recommendations: For Jerryscript version 3.0 commit 1a2c047, consider...
distribution catalog API endpoint can lead to OOM via malicious user input
Impact Systems that run distribution built after a specific commit running on memory-restricted environments can suffer from denial of service by a crafted malicious /v2/catalog API endpoint request. Patches Upgrade to at least 2.8.2-beta.1 if you are running v2.8.x release. If you use the code...
Design/Logic Flaw
in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...
CVE-2023-32076
in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...
CVE-2023-32076 in-toto vulnerable to Configuration Read From Local Directory
in-toto is a framework to protect supply chain integrity. The in-toto configuration is read from various directories and allows users to configure the behavior of the framework. The files are from directories following the XDG base directory specification. In versions 1.4.0 and prior, among the...
CVE-2023-31910
Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component parserparsefunctionstatement at /jerry-core/parser/js/js-parser-statm.c...
Heap overflow
Jerryscript 3.0.0commit 1a2c047 was discovered to contain a heap-buffer-overflow via the component lexercompareidentifiertochars at /jerry-core/parser/js/js-lexer.c...
Code injection
XWiki Platform is a generic wiki platform. Starting in versions 2.2-milestone-1 and prior to versions 14.4.8, 14.10.4, and 15.0-rc-1, it's possible to execute javascript with the right of any user by leading him to a special URL on the wiki targeting a page which contains an attachment. This has...
CVE-2023-31137
MaraDNS is open-source software that implements the Domain Name System DNS. In version 3.5.0024 and prior, a remotely exploitable integer underflow vulnerability in the DNS packet decompression function allows an attacker to cause a Denial of Service by triggering an abnormal program termination...
kernel: dm thin: Use last transaction's pmd->root when commit failed
A metadata handling flaw was found in the Linux kernel device-mapper thin provisioning driver. After a failed metadata commit, the in-memory root pointer could reference a mixed set of fresh and stale tree nodes. Subsequent lookups may loop or stall. A local user could use this flaw to cause the...
kernel: mlxsw: thermal: Fix out-of-bounds memory accesses
A flaw was found in the Linux kernel's Mellanox switch mlxsw thermal driver. A privileged local user could trigger a Denial of Service DoS or kernel information disclosure by configuring a cooling state value that exceeds the maximum supported limit. Because the driver fails to validate this uppe...
kernel: jbd2: add miss release buffer head in fc_do_one_pass()
A reference count leak was found in the Linux kernel's JBD2 journaling subsystem. The fcdoonepass function, used during fast commit replay, fails to release a buffer head after use. This results in a reference count leak that can prevent proper buffer memory cleanup over time...
kernel: Linux kernel ext4: Information Disclosure via uninitialized memory leak in fast-commit journal
A flaw was found in the Linux kernel. A local attacker could exploit an information disclosure vulnerability by not properly zeroing out unused space at the end of fast-commit journal blocks in the ext4 filesystem. This could lead to the leakage of uninitialized memory to disk, potentially allowi...
