Lucene search
K

47 matches found

CNNVD
CNNVD
added 2022/01/27 12:0 a.m.2 views

Jsish 安全漏洞

Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v3.5.0 that could lead to a Denial of Service DoS...

5.5CVSS5.8AI score0.00138EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/27 12:0 a.m.1 views

Jsish 安全漏洞

Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v3.5.0 that could lead to a Denial of Service DoS...

5.5CVSS5.8AI score0.00138EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/27 12:0 a.m.1 views

Jsish 资源管理错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish v3.5.0, which could lead to a denial of service DoS...

5.5CVSS5.6AI score0.00138EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/27 12:0 a.m.1 views

Jsish 安全漏洞

Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v3.5.0 that could lead to a Denial of Service DoS...

5.5CVSS5.8AI score0.00138EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/27 12:0 a.m.1 views

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish v3.5.0, which could lead to a denial of service DoS...

5.5CVSS5.6AI score0.00146EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/27 12:0 a.m.1 views

Jsish 安全漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish v3.5.0, which could lead to a denial of service DoS...

5.5CVSS5.6AI score0.00138EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/27 12:0 a.m.1 views

Jsish 安全漏洞

Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v3.5.0 that could lead to a Denial of Service DoS...

5.5CVSS5.8AI score0.00138EPSS
Exploits1References2
CNVD
CNVD
added 2022/01/27 12:0 a.m.17 views

Jsish jsi_ArraySliceCmd Denial of Service Vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiArraySliceCmd in src/jsiArray.c...

5.5CVSS2.6AI score0.00193EPSS
Exploits1References1
CNVD
CNVD
added 2022/01/27 12:0 a.m.17 views

Jsish boolean buffer overflow vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

7.8CVSS1.8AI score0.00213EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/01/27 12:0 a.m.1 views

Jsish 资源管理错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish v3.5.0, which could lead to a denial of service DoS...

5.5CVSS5.6AI score0.00138EPSS
Exploits1References2
CNVD
CNVD
added 2022/01/27 12:0 a.m.14 views

Jsish linenoise buffer overflow vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

5.5CVSS1.7AI score0.00165EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/01/27 12:0 a.m.1 views

Jsish 安全漏洞

Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish v3.5.0, which could lead to a denial of service DoS...

5.5CVSS5.6AI score0.00138EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/25 12:0 a.m.1 views

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

7.8CVSS6.2AI score0.00213EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/01/25 12:0 a.m.1 views

Jsish 安全漏洞

Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...

5.5CVSS6.2AI score0.00165EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/01/20 12:0 a.m.3 views

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial of service vulnerability in version 3.0.0, which stems from an assertion failure in /jerry-core/parser/js/js-parser-expr.c. An attacker could use this vulnerability to launch a denial of service...

5.5CVSS5.6AI score0.00138EPSS
Exploits1References2
OSV
OSV
added 2021/06/10 11:15 p.m.2 views

UBUNTU-CVE-2020-23308

There is an Assertion 'contextp-stacktopuint8 == LEXEREXPRESSIONSTART' at js-parser-expr.c:3565 in parserparseexpression in JerryScript 2.2.0...

7.5CVSS5.8AI score0.00274EPSS
Exploits1References3
Prion
Prion
added 2021/06/10 11:15 p.m.17 views

Session fixation

There is an Assertion 'contextp-nextscannerinfop-type == SCANNERTYPEFUNCTION' failed at js-parser-statm.c:733 in parserparsefunctionstatement in JerryScript 2.2.0...

5CVSS7.5AI score0.00274EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2021/06/10 10:13 p.m.12 views

CVE-2020-23312

There is an Assertion 'context.statusflags & PARSERSCANNINGSUCCESSFUL' failed at js-parser.c:2185 in parserparsesource in JerryScript 2.2.0...

7.5AI score0.00303EPSS
Exploits1References1
Veracode
Veracode
added 2020/09/21 6:34 a.m.30 views

Authorization Bypass

firefox is vulnerable to authorization bypass. The vulnerability exists in the JavaScript parser, where a cast of an integer to a narrower type can result in data read from outside the buffer being parsed...

8.2CVSS3.5AI score0.00579EPSS
Exploits1References4Affected Software2
OSV
OSV
added 2018/06/11 9:29 p.m.1 views

CVE-2017-7813

Inside the JavaScript parser, a cast of an integer to a narrower type can result in data read from outside the buffer being parsed. This usually results in a non-exploitable crash, but can leak a limited amount of information from memory if it matches JavaScript identifier syntax. This...

8.2CVSS7.5AI score0.00579EPSS
Exploits1References4
Rows per page
Query Builder