CVE-2023-31568

The CVE-2023-31568 entry concerns PoDoFo v0.10.0, where a heap-based buffer overflow occurs in PoDoFo::PdfEncryptRC4::PdfEncryptRC4. This affects the PoDoFo library (C++) and can allow an attacker to run arbitrary code in the context of an affected application, as indicated by multiple sources (e...

CVE-2023-31567

CVE-2023-31567 affects PoDoFo v0.10.0. The vulnerability is a heap buffer overflow in PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3, with potential arbitrary code execution per CNVD-2023-39431. Multiple advisories reference this CVE; Gentoo GLSA 202405-33 recommends upgrading to >= 0.10.1. Nessus e...

CVE-2023-31907

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scannerliteraliscreated at /jerry-core/parser/js/js-scanner-util.c...

CVE-2023-31910

Removed by vendor...

CVE-2023-31908

Removed by vendor...

CVE-2023-31906

Jerryscript 3.0.0commit 1a2c047 was discovered to contain a heap-buffer-overflow via the component lexercompareidentifiertochars at /jerry-core/parser/js/js-lexer.c...

CVE-2023-31910

Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component parserparsefunctionstatement at /jerry-core/parser/js/js-parser-statm.c...

CVE-2023-31908

CVE-2023-31908 affects JerryScript 3.0 (commit 05dbbd1) and involves a heap-buffer-overflow in ecma_builtin_typedarray_prototype_sort. The vulnerability is categorized as HIGH severity (CVSS 3.1: AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). Impact is primarily confidentiality, integrity, and availabilit...

CVE-2023-31910

Jerryscript 3.0 commit 05dbbd1 was discovered to contain a heap-buffer-overflow via the component parserparsefunctionstatement at /jerry-core/parser/js/js-parser-statm.c...

CVE-2023-31910

CVE-2023-31910 : JerryScript 3.0 contains a heap-buffer-overflow in the parser: parser_parse_function_statement (jerry-core/parser/js/js-parser-statm.c). The issue is described across multiple feeds as a vulnerability in JerryScript 3.0 with high impact (CVSS 3.1: HIGH, LOCAL access, user interac...

Siemens SCALANCE LPE9403 Heap Buffer Overflow Vulnerability

Siemens SCALANCE LPE9403 is the local processing driver. A heap buffer overflow vulnerability exists in the Siemens SCALANCE LPE9403, which can be exploited by an attacker to cause a denial of service...

PT-2023-23511 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0.0 Description: A heap-buffer-overflow issue was discovered in Jerryscript via the component scanner literal is created at /jerry-core/parser/js/js-scanner-util.c. Recommendations: For Jerryscript version 3.0.0, conside...

CVE-2023-31907

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via the component scannerliteraliscreated at /jerry-core/parser/js/js-scanner-util.c...

PT-2023-23510 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 3.0.0commit 1a2c047 Description: A heap-buffer-overflow issue was discovered in the lexer compare identifier to chars component at /jerry-core/parser/js/js-lexer.c. This issue affects the lexer functionality of the softwar...

CVE-2023-31907

CVE-2023-31907 affects JerryScript up to at least 3.0.0, with a heap-buffer-overflow in the scanner_literal_is_created path of jerry-core/parser/js/js-scanner-util.c. The vulnerability is described consistently across sources as a heap overflow originating from that component, implying potential ...

CVE-2023-31567

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3...

CVE-2023-31567

Podofo v0.10.0 was discovered to contain a heap buffer overflow via the component PoDoFo::PdfEncryptAESV3::PdfEncryptAESV3...

CVE-2023-31906

Removed by vendor...

CVE-2023-31907

Removed by vendor...

CVE-2023-31906

Jerryscript 3.0.0commit 1a2c047 was discovered to contain a heap-buffer-overflow via the component lexercompareidentifiertochars at /jerry-core/parser/js/js-lexer.c...