Lucene search
+L

1522 matches found

Mend
Mend
•added 2024/04/26 12:00 a.m.•2 views

CVE-2024-33259

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scannerseek at jerry-core/parser/js/js-scanner-util.c...

6.8CVSS0.00275EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2024/04/26 12:00 a.m.•48 views

CVE-2024-33255

Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...

7.2AI score0.00274EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/26 12:00 a.m.•77 views

CVE-2024-33255

The Jerryscript JavaScript engine (specifically commit cfd391 ) contains an Assertion Failure vulnerability. The root cause is located in ecma_free_string_list via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p). This vulnerability can result in high availability impact. While some sources indicate t...

6.2CVSS7.2AI score0.00274EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•4 views

CVE-2024-33255: Reachable Assertion

Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...

6.2CVSS5.7AI score0.00274EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/26 12:00 a.m.•14 views

PT-2024-25171 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version cefd391 Description: An Assertion Failure was discovered in Jerryscript via ECMA STRING IS REF EQUALS TO ONE string p in ecma free string list. Recommendations: For Jerryscript version cefd391, at the moment, there is no...

6.2CVSS7AI score0.00274EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/04/26 12:00 a.m.•15 views

PT-2024-25172 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version ff9ff8f Description: A segmentation violation was discovered in Jerryscript via the vm loop component at jerry-core/vm/vm.c. Recommendations: For Jerryscript version ff9ff8f, consider avoiding the use of the vm loop...

7.1CVSS7AI score0.003EPSS
SaveExploits1References7
Mend
Mend
•added 2024/04/26 12:00 a.m.•3 views

CVE-2024-33255

Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...

6.9CVSS0.00274EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•5 views

CVE-2024-33259: Uncontrolled Resource Consumption

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scannerseek at jerry-core/parser/js/js-scanner-util.c...

5.5CVSS5.7AI score0.00275EPSS
SaveExploits1References2
Mend
Mend
•added 2024/04/26 12:00 a.m.•2 views

CVE-2024-33260

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parserparseclass at jerry-core/parser/js/js-parser-expr.c...

5.1CVSS0.00224EPSS
SaveExploits1References3
Mend
Mend
•added 2024/04/26 12:00 a.m.•2 views

CVE-2024-33258

Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vmloop at jerry-core/vm/vm.c...

8.4CVSS0.003EPSS
SaveExploits1References4
CVE
CVE
•added 2024/04/26 12:00 a.m.•81 views

CVE-2024-33259

The Jerryscript JavaScript engine (specifically commit cfd391 ) is vulnerable to a segmentation violation within the scanner_seek component located at jerry-core/parser/js/js-scanner-util.c. This flaw is associated with CWE-400 (Uncontrolled Resource Consumption). The impact is characterized as H...

5.5CVSS7.2AI score0.00275EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/04/26 12:00 a.m.•21 views

CVE-2024-33260

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parserparseclass at jerry-core/parser/js/js-parser-expr.c...

5.1CVSS7.2AI score
SaveExploits0References3
CVE
CVE
•added 2024/04/26 12:00 a.m.•84 views

CVE-2024-33258

The Jerryscript JavaScript engine (specifically commit ff9ff8f ) contains a segmentation violation vulnerability within the vm_loop component located at jerry-core/vm/vm.c. This flaw can lead to significant impacts, including high confidentiality and integrity risks. While no specific patch versi...

7.1CVSS7.2AI score0.003EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2024/03/28 11:15 p.m.•40 views

CVE-2024-29489

Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...

5.5CVSS6.6AI score0.0034EPSS
SaveExploits1References4
OSV
OSV
•added 2024/03/28 11:15 p.m.•65 views

UBUNTU-CVE-2024-29489

Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...

5.5CVSS5.8AI score0.0034EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
•added 2024/03/28 12:00 a.m.•15 views

PT-2024-22923

Name of the Vulnerable Software and Affected Versions Jerryscript version 2.4.0 Description The issue is related to a SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in the ecma get object type function. Recommendations For Jerryscript version 2.4.0, at the moment, there is no information...

5.5CVSS5.5AI score0.0034EPSS
SaveExploits1References12
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/28 12:00 a.m.•2 views

CVE-2024-29489: NULL Pointer Dereference

Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...

5.5CVSS5.7AI score0.0034EPSS
SaveExploits1References2
Debian CVE
Debian CVE
•added 2024/03/28 12:00 a.m.•91 views

CVE-2024-29489

Removed by vendor...

5.5CVSS5.6AI score0.0034EPSS
SaveExploits1
OSV
OSV
•added 2024/03/28 12:00 a.m.•30 views

CVE-2024-29489

Jerryscript 2.4.0 has SEGV at ./jerry-core/ecma/base/ecma-helpers.c:238:58 in ecmagetobjecttype...

5.5CVSS6.9AI score
SaveExploits0References6
CVE
CVE
•added 2024/03/28 12:00 a.m.•82 views

CVE-2024-29489

Jerryscript version 2.4.0 is affected by a segmentation error (SEGV) located in the ecma_get_object_type function within the file ./jerry-core/ecma/base/ecma-helpers.c:238:58. This vulnerability is associated with a NULL Pointer Dereference (CWE-476). While the impact on availability is rated as ...

5.5CVSS6.8AI score0.0034EPSS
SaveExploits1References4Affected Software1
Rows per page
Query Builder