13849 matches found
KLA12428 DoS vulnerability in Oracle Java and GraalVM
Denial of service vulnerability was found in Oracle Java and GraalVM. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Oracle Critical Patch Update Advisory – January 2022 Related products Oracle-Java-JRE-1.7.x Oracle-Java-JRE-1.8.x CVE list...
KLA12427 DoS vulnerability in Oracle Java and GraalVM
Denial of service vulnerability was found in Oracle Java and GraalVM. Malicious users can exploit this vulnerability to cause denial of service. Original advisories Oracle Critical Patch Update Advisory – January 2022 Related products Oracle-Java-JRE-1.7.x Oracle-Java-JRE-1.8.x CVE list...
in mruby/mruby
Description There is a NULL Pointer Dereference in ivfree src/variable.c:232:20. This bug has been found on mruby lastest commit hash 31fa3304049fc406a201a72293cce140f0557dca on Ubuntu 20.04 for x8664/amd64. Proof of Concept 6.times3.times%until-break b= 0,m:0 s=0 Steps to reproduce 1- Clone repo...
GHSA-7MHC-PRGV-R3Q4 Access of Resource Using Incompatible Type in Hermes
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error,...
Access of Resource Using Incompatible Type in Hermes
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error,...
CVE-2021-24044
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error,...
CVE-2021-24044
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error,...
Type confusion
By passing invalid javascript code where await and yield were called upon non-async and non-generator getter/setter functions, Hermes would invoke generator functions and error out on invalid await/yield positions. This could result in segmentation fault as a consequence of type confusion error,...
Facebook Hermes 安全漏洞
Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native apps to improve the performance of mobile client apps, but not server-side infrastructures such as browsers & Node.js. A security vulnerability exists in Facebook Hermes, which...
CVE-2021-45769
A NULL pointer dereference in AcseConnectionparseMessage at src/mms/isoacse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash...
CVE-2021-46021
An Use-After-Free vulnerability in recrecorddestroy at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash...
CVE-2021-45769
A NULL pointer dereference in AcseConnectionparseMessage at src/mms/isoacse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash...
CVE-2021-46022
An Use-After-Free vulnerability in recmsetelemdestroy at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash...
CVE-2021-46022
An Use-After-Free vulnerability in recmsetelemdestroy at rec-mset.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash...
DEBIAN-CVE-2021-46021
An Use-After-Free vulnerability in recrecorddestroy at rec-record.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash...
CVE-2021-46019
An untrusted pointer dereference in recdbdestroy at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash...
DEBIAN-CVE-2021-46019
An untrusted pointer dereference in recdbdestroy at rec-db.c of GNU Recutils v1.8.90 can lead to a segmentation fault or application crash...
CVE-2021-45769
A NULL pointer dereference in AcseConnectionparseMessage at src/mms/isoacse/acse.c of libiec61850 v1.5.0 can lead to a segmentation fault or application crash...