Lucene search
K

10 matches found

OSV
OSV
added 2026/03/01 10:16 a.m.2 views

CVE-2026-3387

A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wrencompiler.c. Such manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to...

5.5CVSS5.2AI score
Exploits0References6
Vulnrichment
Vulnrichment
added 2026/03/01 9:32 a.m.4 views

CVE-2026-3387 wren-lang wren wren_compiler.c getByteCountForArguments null pointer dereference

A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wrencompiler.c. Such manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed to...

4.8CVSS5.4AI score0.00163EPSS
Exploits1References6
EUVD
EUVD
added 2026/03/01 8:32 a.m.4 views

EUVD-2026-9120

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wrencompiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the...

4.8CVSS5.7AI score0.00167EPSS
Exploits1References6
Vulnrichment
Vulnrichment
added 2026/03/01 8:32 a.m.5 views

CVE-2026-3385 wren-lang wren wren_compiler.c resolveLocal recursion

A vulnerability was detected in wren-lang wren up to 0.4.0. Affected is the function resolveLocal of the file src/vm/wrencompiler.c. The manipulation results in uncontrolled recursion. Attacking locally is a requirement. The exploit is now public and may be used. The project was informed of the...

4.8CVSS5.7AI score0.00167EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2026/03/01 12:0 a.m.2 views

PT-2026-22507

Name of the Vulnerable Software and Affected Versions wren-lang wren versions up to 0.4.0 Description A flaw exists in the resolveLocal function within the src/vm/wren compiler.c file. This issue leads to uncontrolled recursion. Local access is required for exploitation. The details of the issue...

5.5CVSS5.7AI score0.00167EPSS
Exploits1References12
Positive Technologies
Positive Technologies
added 2026/03/01 12:0 a.m.7 views

PT-2026-22508

A flaw has been found in wren-lang wren up to 0.4.0. Affected by this vulnerability is the function emitOp of the file src/vm/wren compiler.c. This manipulation causes out-of-bounds read. It is possible to launch the attack on the local host. The exploit has been published and may be used. The...

4.8CVSS5.5AI score0.0017EPSS
Exploits1References7
Positive Technologies
Positive Technologies
added 2026/03/01 12:0 a.m.4 views

PT-2026-22509

A vulnerability has been found in wren-lang wren up to 0.4.0. Affected by this issue is the function getByteCountForArguments of the file src/vm/wren compiler.c. Such manipulation leads to null pointer dereference. Local access is required to approach this attack. The exploit has been disclosed t...

4.8CVSS5.4AI score0.00163EPSS
Exploits1References7
CNNVD
CNNVD
added 2026/02/20 12:0 a.m.4 views

wren 缓冲区错误漏洞

Wren is a concurrent scripting language developed by Wren OpenSource. Versions of Wren 0.4.0 and earlier contained a buffer error vulnerability, which stemmed from an out-of-bounds read in the peekChar function found in the src/vm/wrencompiler.c file...

7.1CVSS5.9AI score0.00124EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/02/20 12:0 a.m.6 views

PT-2026-21304

Name of the Vulnerable Software and Affected Versions wren-lang wren versions prior to 0.4.0 Description A flaw exists in wren-lang wren that allows for an out-of-bounds read. This issue is related to the peekChar function within the src/vm/wren compiler.c file, specifically in the Source File...

7.1CVSS5.8AI score0.00124EPSS
Exploits0References10
RedHat Linux
RedHat Linux
added 2016/05/02 12:36 p.m.6 views

chromium-browser: information leak in v8

The JSGenericLowering class in compiler/js-generic-lowering.cc in Google V8, as used in Google Chrome before 50.0.2661.94, mishandles comparison operators, which allows remote attackers to obtain sensitive information via crafted JavaScript code...

6.5CVSS7.4AI score0.0181EPSS
Exploits0References5
Rows per page
Query Builder