Lucene search
+L

1364 matches found

CVE
CVE
•added 2024/04/26 12:00 a.m.•77 views

CVE-2024-33259

The Jerryscript JavaScript engine (specifically commit cfd391 ) is vulnerable to a segmentation violation within the scanner_seek component located at jerry-core/parser/js/js-scanner-util.c. This flaw is associated with CWE-400 (Uncontrolled Resource Consumption). The impact is characterized as H...

5.5CVSS7.2AI score0.00275EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•18 views

Jerryscript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in Jerryscript, which stems from a component Scannerseek in jerry-core/parser/js/js-scanner-util.c contains a segmentation violation...

5.5CVSS6.8AI score0.00275EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/04/26 12:00 a.m.•23 views

CVE-2024-33259

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scannerseek at jerry-core/parser/js/js-scanner-util.c...

7.3AI score0.00275EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•3 views

CVE-2024-33260: Improper Access Control

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component parserparseclass at jerry-core/parser/js/js-parser-expr.c...

5.1CVSS5.7AI score0.00224EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/04/26 12:00 a.m.•46 views

CVE-2024-33255

Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...

7.2AI score0.00274EPSS
SaveExploits1References1
CVE
CVE
•added 2024/04/26 12:00 a.m.•82 views

CVE-2024-33258

The Jerryscript JavaScript engine (specifically commit ff9ff8f ) contains a segmentation violation vulnerability within the vm_loop component located at jerry-core/vm/vm.c. This flaw can lead to significant impacts, including high confidentiality and integrity risks. While no specific patch versi...

7.1CVSS7.2AI score0.003EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/04/26 12:00 a.m.•36 views

CVE-2024-33259

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scannerseek at jerry-core/parser/js/js-scanner-util.c...

5.5CVSS7.2AI score
SaveExploits0References3
OSV
OSV
•added 2024/04/26 12:00 a.m.•22 views

CVE-2024-33255

Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...

6.2CVSS7.2AI score
SaveExploits0References3
Debian CVE
Debian CVE
•added 2024/04/26 12:00 a.m.•26 views

CVE-2024-33260

Removed by vendor...

5.1CVSS5.5AI score0.00224EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2024/04/26 12:00 a.m.•12 views

PT-2024-25171 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version cefd391 Description: An Assertion Failure was discovered in Jerryscript via ECMA STRING IS REF EQUALS TO ONE string p in ecma free string list. Recommendations: For Jerryscript version cefd391, at the moment, there is no...

6.2CVSS7AI score0.00274EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2024/04/26 12:00 a.m.•27 views

PT-2024-25175 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version cefd391 Description: A segmentation violation was discovered in Jerryscript via the parser parse class component at jerry-core/parser/js/js-parser-expr.c. Recommendations: For Jerryscript version cefd391, consider...

5.1CVSS6.9AI score0.00224EPSS
SaveExploits1References7
CVE
CVE
•added 2024/04/26 12:00 a.m.•82 views

CVE-2024-33260

Jerryscript version cfd391 is vulnerable to a segmentation violation within the parser_parse_class component, specifically located at jerry-core/parser/js/js-parser-expr.c. This vulnerability can lead to application instability or crashes. No specific patch version is currently identified in the ...

5.1CVSS7.2AI score0.00224EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•1 views

CVE-2024-33255: Reachable Assertion

Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...

6.2CVSS5.7AI score0.00274EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•16 views

JerryScript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript that stems from a failure to include assertions in ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...

6.2CVSS6.8AI score0.00274EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/26 12:00 a.m.•4 views

CVE-2024-33259: Uncontrolled Resource Consumption

Jerryscript commit cefd391 was discovered to contain a segmentation violation via the component scannerseek at jerry-core/parser/js/js-scanner-util.c...

5.5CVSS5.7AI score0.00275EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/04/26 12:00 a.m.•17 views

CVE-2024-33258

Jerryscript commit ff9ff8f was discovered to contain a segmentation violation via the component vmloop at jerry-core/vm/vm.c...

7.3AI score0.003EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2024/04/26 12:00 a.m.•104 views

CVE-2024-33259

Removed by vendor...

5.5CVSS5.6AI score0.00275EPSS
SaveExploits1
Debian CVE
Debian CVE
•added 2024/04/26 12:00 a.m.•79 views

CVE-2024-33258

Removed by vendor...

7.1CVSS6.9AI score0.003EPSS
SaveExploits1
CNNVD
CNNVD
•added 2024/04/26 12:00 a.m.•13 views

Jerryscript 安全漏洞

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in Jerryscript that stems from a component vmloop of jerry-core/vm/vm.c that contains a segmentation violation...

7.1CVSS6.8AI score0.003EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/26 12:00 a.m.•13 views

PT-2024-25172 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version ff9ff8f Description: A segmentation violation was discovered in Jerryscript via the vm loop component at jerry-core/vm/vm.c. Recommendations: For Jerryscript version ff9ff8f, consider avoiding the use of the vm loop...

7.1CVSS7AI score0.003EPSS
SaveExploits1References7
Rows per page
Query Builder