Lucene search
+L

5620 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/26 12:00 a.m.•10 views

CVE-2021-33439: Integer Overflow or Wraparound

An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is Integer overflow in gccompactstrings in mjs.c...

5.5CVSS6AI score0.00311EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/07/26 12:00 a.m.•5 views

PT-2022-10239

Name of the Vulnerable Software and Affected Versions mjs affected versions not specified Description A stack buffer overflow issue was discovered in the mjs execute function in mjs.c, affecting the mJS restricted JavaScript engine, specifically ES6 JavaScript version 6. Recommendations At the...

5.5CVSS0.00338EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•21 views

Cesanta MJS code issue vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

5.5CVSS5.8AI score0.00311EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•20 views

Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

5.5CVSS6AI score0.00338EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•18 views

Cesanta MJS code issue vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

5.5CVSS5.8AI score0.00311EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•19 views

Cesanta MJS code issue vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

5.5CVSS5.8AI score0.00311EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•19 views

Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

5.5CVSS6AI score0.00338EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•17 views

Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

5.5CVSS6AI score0.00338EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•19 views

Cesanta MJS security vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

5.5CVSS5.8AI score0.00311EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2022/07/26 12:00 a.m.•18 views

Cesanta MJS code issue vulnerabilities

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A security vulnerability exists in Cesanta MJS mJS: Restricted JavaScript engine...

5.5CVSS5.8AI score0.00311EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/07/25 2:15 p.m.•20 views

CVE-2022-1232

Type confusion in V8 in Google Chrome prior to 100.0.4896.75 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7.1AI score0.17058EPSS
SaveExploits2References4
osv_ubuntu
osv_ubuntu
•added 2022/07/23 12:15 a.m.•16 views

UBUNTU-CVE-2022-1134

Type confusion in V8 in Google Chrome prior to 100.0.4896.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS7AI score0.01856EPSS
SaveExploits1References2
osv_ubuntu
osv_ubuntu
•added 2022/07/23 12:15 a.m.•13 views

UBUNTU-CVE-2022-1096

Type confusion in V8 in Google Chrome prior to 99.0.4844.84 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...

8.8CVSS8.7AI score0.24726EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2022/07/22 12:00 a.m.•17 views

Google Chrome V8 Engine Use-After-Free

The vulnerability of the JavaScript script handler in Google Chrome’s V8 engine is related to type mixing errors. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

7.5CVSS8.1AI score0.01458EPSS
SaveExploits0References10Affected Software6
CNNVD
CNNVD
•added 2022/07/20 12:00 a.m.•23 views

Google Chrome Resource Management Error Vulnerability

Google Chrome is a web browser from Google, Inc. and V8 is one of the open source JavaScript engines. Google Chrome suffers from a resource management error vulnerability, there is no information about this vulnerability yet, please stay tuned to CNNVD or vendor announcements...

8.8CVSS7.7AI score0.18839EPSS
SaveExploits0References14
attackerkb
attackerkb
•added 2022/07/18 9:15 p.m.•21 views

CVE-2022-34032

Nginx NJS v0.7.5 was discovered to contain a segmentation violation in the function njsvalueownenumerate at src/njsvalue.c...

7.5CVSS5.9AI score0.00916EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/18 12:00 a.m.•19 views

Nginx security vulnerabilities

Nginx is a lightweight web server/reverse proxy server and email IMAP/POP3 proxy server from Nginx, Inc. njs is one of the scripting language components that supports extended NGINX functionality. A security vulnerability exists in Nginx NJS 0.7.5, which stems from a segmentation violation in...

7.5CVSS7.2AI score0.00916EPSS
SaveExploits1References2
BDU FSTEC
BDU FSTEC
•added 2022/07/06 12:00 a.m.•20 views

njs interpreter Heap Buffer Overflow DoS

The vulnerability of the njsarrayprototypesort function in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to cause a service failure...

7.8CVSS6.4AI score0.00391EPSS
SaveExploits1References5Affected Software1
ThreatPost
ThreatPost
•added 2022/07/05 11:54 a.m.•167 views

Google Patches Actively Exploited Chrome Bug

While people were celebrating the Fourth of July holiday in the United States, Google quietly rolled out a stable channel update for Chrome to patch an actively exploited zero-day vulnerability, the fourth such flaw the vendor has had to patch in its browser product so far this year. Chrome 103...

8.8CVSS8.1AI score0.70833EPSS
SaveExploits4References11
CNNVD
CNNVD
•added 2022/07/04 12:00 a.m.•19 views

Google Chrome security vulnerabilities

Google Chrome is a web browser from Google, Inc. and V8 is an open source JavaScript engine. A security vulnerability exists in Google Chrome that stems from type obfuscation in V8...

8.8CVSS7.1AI score0.01458EPSS
SaveExploits0References15
Rows per page
Query Builder