4628 matches found
CVE-2022-22791 SYNEL - eharmony Authenticated Blind & Stored XSS
SYNEL - eharmony Authenticated Blind & Stored XSS. Inject JS code into the "comments" field could lead to potential stealing of cookies, loading of HTML tags and JS code onto the system...
CVE-2022-22791
The CVE-2022-22791 entry relates to Synel eharmony, describing an authenticated blind and stored cross-site scripting (XSS) vulnerability in the comments field. The root cause is injection of JavaScript through the comments field, with the potential impact noted as cookie theft and the embedding ...
Mageia: Security Advisory (MGASA-2015-0115)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
nodejs-json-schema: Prototype pollution vulnerability
The json-schema Node.JS library was vulnerable to prototype pollution during the validation of a JSON object. An attacker, able to provide a specially crafted JSON file for validation, could use this flaw to modify the behavior of the node program, to, for example, execute arbitrary code...
JerryScript /js-parser-mem.c Denial of Service Vulnerability
JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial-of-service vulnerability in version 3.0.0, which stems from an assertion failure in /parser/js/js-parser-mem.c. An attacker could use this vulnerability to launch a denial of service...
CVE-2021-23518 Prototype Pollution
The package cached-path-relative before 1.1.0 are vulnerable to Prototype Pollution via the cache variable that is set as instead of Object.createnull in the cachedPathRelative function, which allows access to the parent prototype properties when the object is used to create the cached relative...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Enterprise Logging bug fix and security update (5.2.6)
An update is now available for OpenShift Logging 5.2.6 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in t...
CVE-2022-22890
There is an Assertion 'argumentstype != SCANNERARGUMENTSPRESENT && argumentstype != SCANNERARGUMENTSPRESENTNOREG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0...
CVE-2021-46337
There is an Assertion 'pagep != NULL' failed at /parser/js/js-parser-mem.cparserlistget in JerryScript 3.0.0...
CVE-2021-46340
There is an Assertion 'contextp-stacktopuint8 == SCANSTACKTRYSTATEMENT || contextp-stacktopuint8 == SCANSTACKCATCHSTATEMENT' failed at /parser/js/js-scanner.cscannerscanstatementend in JerryScript 3.0.0...
CVE-2020-23315
There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...
Design/Logic Flaw
There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...
Moderate: Red Hat Security Advisory: Red Hat OpenShift Enterprise Logging bug fix and security update (5.3.3)
An update is now available for OpenShift Logging 5.3.3 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in t...
CVE-2020-23315
There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...
CVE-2021-46343
CVE-2021-46343 affects JerryScript 3.0.0. The vulnerability is a denial-of-service caused by an assertion failure: Failure: assertion 'context_p->token.type == LEXER_LITERAL' in /jerry-core/parser/js/js-parser-expr.c. Impact: reported as DoS; no further exploit/vector details are provided in t...
JerryScript 安全漏洞
JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in JerryScript 3.0.0, which stems from an assertion in /jerry-core/parser/js/js-parser-expr.c flags & PARSERPATTERNHASRESTELEMENT fails. No details of the vulnerability are currently provided...
Design/Logic Flaw
An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...
CVE-2021-46170
An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...
