JerryScript Code Issues Vulnerabilities

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 2.3.0, which originated from a vulnerability that allows a local attacker to cause a denial of service DoS via ecma-helpers.c. The vulnerability is caused by the use...

CVE-2020-24187

An issue was discovered in ecma-helpers.c in jerryscript version 2.3.0, allows local attackers to cause a denial of service DoS Null Pointer Dereference...

CLSA-2023-1691606742 openssh: Fix of CVE-2023-38408

CVE-2023-38408: checks libraries before dlopen and separate ssh-pkcs11-helpers for each p11 module...

CLSA-2023-1691606104 openssh: Fix of CVE-2023-38408

CVE-2023-38408: checks libraries before dlopen and separate ssh-pkcs11-helpers for each p11 module...

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +333 more potentially affected by CVE-2023-4033 via mlflow (>=0.8.2 <=2.5.0)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-4033 Source advisory: OSV:PYSEC-2023-280...

PT-2023-25802 · Microsoft · Chakracore

Name of the Vulnerable Software and Affected Versions: ChakraCore version cbb9b Description: A segmentation violation was discovered in ChakraCore via the function Js::ProfilingHelpers::ProfiledNewScArray. Recommendations: For ChakraCore version cbb9b, consider disabling the...

ChakraCore 资源管理错误漏洞

ChakraCore is a chakra-core open source JavaScript engine with C API. ChakraCore has a security vulnerability that stems from the inclusion of a segmentation violation in the function Js::ProfilingHelpers::ProfiledNewScArray...

Malicious code in @zola-helpers/client (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ee698d441406b57b08f773d9f7c97565c0d839bc65054354c7ab8f4556b4293a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in kobi--front-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5177d79e84b460a9e6e01e3f7ec740846cab3ff8094ccf7fa38232683498d45c The OpenSSF Package Analysis project identified 'kobi--front-helpers' @ 1.15.0 npm as malicious. It is considered malicious because: - The packa...

MAL-2023-1222 Malicious code in kobi--front-helpers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5177d79e84b460a9e6e01e3f7ec740846cab3ff8094ccf7fa38232683498d45c The OpenSSF Package Analysis project identified 'kobi--front-helpers' @ 1.15.0 npm as malicious. It is considered malicious because: - The packa...

SUSE-SU-2023:2059-1 Security update for rubygem-actionview-5_1

This update for rubygem-actionview-51 fixes the following issues: - CVE-2022-27777: Fixed possible cross-site scripting vulnerability in Action View tag helpers bsc1199060. - CVE-2020-15169: Fixed cross-site scripting in translation helpers bsc1176421. - CVE-2020-8167: Fixed CSRF vulnerability in...

CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

UBUNTU-CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

JerryScript 资源管理错误漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript version 1a2c047, which stems from a component of /base/ecma-helpers.c containing a segmentation violation...

CVE-2023-30406

Jerryscript commit 1a2c047 was discovered to contain a segmentation violation via the component ecmafindnamedproperty at /base/ecma-helpers.c...

PT-2023-22677 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version 1a2c047 Description: A segmentation violation was discovered in Jerryscript via the component ecma find named property at /base/ecma-helpers.c. Recommendations: For Jerryscript version 1a2c047, consider avoiding the use of...

[SECURITY] Fedora 37 Update: rubygem-actionview-7.0.4.3-1.fc37

Simple, battle-tested conventions and helpers for building web pages...

a2 (>=0.1.0 <=0.3.17), abnativ (>=1.1.0 <=1.2.9) +318 more potentially affected by CVE-2023-1177 via mlflow (>=0.8.2 <=2.22.5)

mlflow PYPI version =0.8.2, =0.1.0, =1.1.0, =0.0.5, =0.1.0, =0.1.0, =1.7.0, =1.7.0, =1.8.0, =1.7.0, =1.7.0, =0.1.1, =0.1.5 - anovos =1.1.0 and more Source cves: CVE-2023-1177 Source advisory: OSV:GHSA-XG73-94FP-G449...

Malicious Package

Overview ufo-helpers is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

USN-5807-2 libxpm vulnerabilities

USN-5807-1 fixed vulnerabilities in libXpm. This update provides the corresponding updates for Ubuntu 16.04 ESM. Original advisory details: Martin Ettl discovered that libXpm incorrectly handled certain XPM files. If a user or automated system were tricked into opening a specially crafted XPM fil...