Lucene search
+L

7519 matches found

Github Security Blog
Github Security Blog
added 2022/07/14 12:0 a.m.37 views

vm2 before 3.6.11 vulnerable to sandbox escape

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

8.3CVSS3.3AI score0.01263EPSS
SaveExploits1References7Affected Software1
NVD
NVD
added 2022/07/13 9:15 p.m.38 views

CVE-2022-32117

Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryxprintunhandledexception in /util/print.c...

7.8CVSS0.00329EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2022/07/13 9:15 p.m.47 views

CVE-2022-32117

Jerryscript v2.4.0 was discovered to contain a stack buffer overflow via the function jerryxprintunhandledexception in /util/print.c...

7.8CVSS7.3AI score0.00329EPSS
SaveExploits1References1
OSV
OSV
added 2022/07/13 9:15 a.m.21 views

CVE-2019-10761

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

8.3CVSS8.5AI score
SaveExploits0References3
NVD
NVD
added 2022/07/13 9:15 a.m.36 views

CVE-2019-10761

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

8.3CVSS0.01263EPSS
SaveExploits1References3
Prion
Prion
added 2022/07/13 9:15 a.m.23 views

Code injection

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

7.5CVSS8.4AI score0.01263EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2022/07/13 8:20 a.m.27 views

CVE-2019-10761 Sandbox Bypass

This affects the package vm2 before 3.6.11. It is possible to trigger a RangeError exception from the host rather than the "sandboxed" context by reaching the stack call limit with an infinite recursion. The returned object is then used to reference the mainModule property of the host code runnin...

8.3CVSS8.5AI score0.01263EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2022/07/13 12:0 a.m.5 views

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version v2.4.0, which originates from a stack buffer overflow via the function jerryxprintunhandledexception in /util/print.c. The vulnerability is caused by the function...

7.8CVSS7.6AI score0.00329EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
added 2022/07/12 10:15 p.m.37 views

Valinor error messages leading to potential data exfiltration before v0.12.0

php registerConstructorMoney::class, 'fromString' -mapper; try vardump$mapper-mapFoo::class, 'a' = 'HAHA', 'b' = '100 EUR', 'c' = 'USD 100' ; catch MappingError $e $messages = new NodeTraverserfunction Node $node foreach $node-messages as $message vardump '$message', $message-path, $message-body ...

9.1CVSS9.1AI score0.01413EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2022/07/12 10:15 p.m.55 views

GHSA-5PGM-3J3G-2RC7 Valinor error messages leading to potential data exfiltration before v0.12.0

php registerConstructorMoney::class, 'fromString' -mapper; try vardump$mapper-mapFoo::class, 'a' = 'HAHA', 'b' = '100 EUR', 'c' = 'USD 100' ; catch MappingError $e $messages = new NodeTraverserfunction Node $node foreach $node-messages as $message vardump '$message', $message-path, $message-body ...

7.5CVSS8.6AI score0.01413EPSS
SaveExploits1References4
UbuntuCve
UbuntuCve
added 2022/07/11 8:15 p.m.30 views

CVE-2022-31140

Valinor is a PHP library that helps to map any input into a strongly-typed value object structure. Prior to version 0.12.0, Valinor can use ThrowablegetMessage when it should not have permission to do so. This is a problem with cases such as an SQL exception showing an SQL snippet, a database...

9.1CVSS7.2AI score0.01413EPSS
SaveExploits1References3
BDU FSTEC
BDU FSTEC
added 2022/07/08 12:0 a.m.10 views

The vulnerabilities of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 station modules allow a intruder to cause service failures.

The vulnerability of the microprogramming software for the Desigo DXR2, PXC3, PXC4, and PXC5 stations is related to an exception handling error. Exploiting this vulnerability could allow a perpetrator to cause service failures by installing a key derived from PBKDF2...

6.8CVSS6.5AI score0.00822EPSS
SaveExploits0References2Affected Software4
BDU FSTEC
BDU FSTEC
added 2022/07/06 12:0 a.m.8 views

The vulnerability of the BACnet protocol implementation in the micro-programming software for Desigo DXR2, PXC3, PXC4, and PXC5 modules allows a intruder to trigger a service failure.

The vulnerability of the BACnet protocol implementation in the micro-programming software for Desigo DXR2, PXC3, PXC4, and PXC5 modules is related to an exception handling error. Exploiting this vulnerability can allow attackers to cause service failures...

7.8CVSS7.2AI score0.00894EPSS
SaveExploits0References2Affected Software4
CNVD
CNVD
added 2022/07/01 12:0 a.m.32 views

Huawei MindSpore Community numeric error vulnerability

Huawei MindSpore Community is an open source deep learning framework from Huawei China.A numerical error vulnerability exists in versions prior to Huawei MindSpore Community 1.3.0, which stems from the fact that when performing the initialization operation of the Split operator, if a dimension in...

7.5CVSS0.9AI score0.0085EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2022/06/30 12:0 a.m.5 views

PT-2022-22329 · Jenkins · Jenkins Testng Results Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins TestNG Results Plugin versions 554.va4a552116332 and earlier Description: The issue is related to a cross-site scripting XSS vulnerability. It occurs when the Jenkins TestNG Results Plugin renders unescaped test descriptions and...

8CVSS5.2AI score0.00571EPSS
SaveExploits0References7
NVD
NVD
added 2022/06/27 5:15 p.m.15 views

CVE-2021-33654

When performing the initialization operation of the Split operator, if a dimension in the input shape is 0, it will cause a division by 0 exception...

7.5CVSS0.0085EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/27 5:15 p.m.12 views

CVE-2021-33651

When performing the analytical operation of the DepthwiseConv2D operator, if the attribute depthmultiplier is 0, it will cause a division by 0 exception...

7.5CVSS0.0085EPSS
SaveExploits0References1
NVD
NVD
added 2022/06/27 5:15 p.m.15 views

CVE-2021-33653

When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter blockshape element, it will cause a division by 0 exception...

7.5CVSS0.0085EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/27 5:15 p.m.18 views

CVE-2021-33652

When the Reduce operator run operation is executed, if there is a value of 0 in the parameter axissizes element, it will cause a division by 0 exception...

7.5CVSS6.8AI score
SaveExploits0References1
OSV
OSV
added 2022/06/27 5:15 p.m.19 views

CVE-2021-33653

When performing the derivation shape operation of the SpaceToBatch operator, if there is a value of 0 in the parameter blockshape element, it will cause a division by 0 exception...

7.5CVSS6.8AI score
SaveExploits0References1
Rows per page
Query Builder