1316 matches found
CVE-2021-46344
CVE-2021-46344 affects JerryScript 3.0.0. The issue is described as an assertion failure: 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' in /jerry-core/parser/js/js-parser-expr.c. The connected documents confirm the same core problem but do not provide additional technical details such as broader affe...
CVE-2021-46340
Summary of the CVE-2021-46340 issue : The vulnerability affects JerryScript 3.0.0, arising from an assertion in /parser/js/js-scanner.c(scanner_scan_statement_end). The code path fails when context_p->stack_top_uint8 is not equal to SCAN_STACK_TRY_STATEMENT or SCAN_STACK_CATCH_STATEMENT, indic...
CVE-2021-46338
CVE-2021-46338 relates to JerryScript 3.0.0. The documented root cause is an assertion failure: ecma_is_lexical_environment(object_p) at ecma_get_lex_env_type in /base/ecma-helpers.c. Consequence described is an assertion failure in JerryScript 3.0.0. The connected documents do not provide a spec...
JerryScript 安全漏洞
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/operations/ecma-objects.c , an attacker could use this vulnerability to launch a denial of service...
JerryScript 安全漏洞
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-helpers.c. An attacker could exploit this vulnerability to launch a denial of service...
JerryScript 安全漏洞
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-literal-storage.c. case, an attacker could use this vulnerability to launch a denial of service...
CVE-2021-43436
MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...
CVE-2021-43436
MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...
CVE-2021-43436
MartDevelopers Inc iResturant v1.0 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed...
Information Disclosure
@replit/crosis is vulnerable to information disclosure. The vulnerability exists due to the exposure of sensitive information, multiple communication failed attempts to Replit, allowing an attacker to access the previous URL and retrieve the same destination without permission...
Business Logic Errors in silverstripe/silverstripe-framework
Description SilverStripe Framework is vulnerable to Business Logic Errors in the Failed login count since that value can be a negative number. Proof of Concept 1.After login, go to Security page under the path /admin/security/ 2.Click on any member record 3.In the member edit form, enter a negati...
CVE-2021-46045
GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service context-dependent...
CVE-2021-46045
GPAC 1.0.1 is affected by: Abort failed. The impact is: cause a denial of service context-dependent...
CVE-2021-36409
There is an Assertion scalinglistpredmatrixiddelta==1' failed at sps.cc:925 in libde265 v1.0.8 when decoding file, which allows attackers to cause a Denial of Service DoS by running the application with a crafted file or possibly have unspecified other impact...
“Failed to resolve team (ID: , name: ): Organization (ID: ) which the team (ID: ) belongs to not found” when performing Microsoft Teams backup
Update:January 2024 There have been several reported instances where, under specific circumstances, the issue discussed in this article has occurred while running Veeam Backup for Microsoft 365 6.x. All customers are encouraged to upgrade to the latest version of Veeam Backup for Microsoft 365 at...
GSD-2021-1002551 drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again
drm/amd/amdkfd: Fix kernel panic when reset failed and been triggered again This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.7 by commit...
Failed transfer with low level call could be overlooked
Handle harleythedog Vulnerability details Impact There are several places where low level call is used within the contract. In particular, in SavingsAccount.sol, the external withdraw function has the to argument, which is eventually used in this code in transfer: bool success, = to.callvalue:...
Matkt Hyperledger Besu 安全漏洞
Matkt Hyperledger Besu is an open source application from Matkt. It is used to run, maintain, debug and monitor nodes in the Ethernet network. A security vulnerability exists in Besu starting in version 21.10.0, which stems from changes in the software implementation of the SHL, SHR, and SAR...
Oracle Linux 8 : bind (ELSA-2021-4384)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2021-4384 advisory. 32:9.11.26-6 - Use random entropy to generate unique TKEY identifiers 1980916 32:9.11.26-5 - Fix possible assertion failure iscrefcountcurrent == 0 in freerbtdb...