Lucene search
+L

7040 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•9 views

CVE-2021-46344: Reachable Assertion

There is an Assertion 'flags & PARSERPATTERNHASRESTELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

5.5CVSS5.7AI score0.00621EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•3 views

PT-2022-15718

Name of the Vulnerable Software and Affected Versions Jerryscript version 3.0.0 Description The issue is related to an assertion failure in the js-scanner-util.c file of Jerryscript. The assertion arguments type != SCANNER ARGUMENTS PRESENT && arguments type != SCANNER ARGUMENTS PRESENT NO REG...

5.5CVSS0.0077EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•6 views

CVE-2022-22890: Reachable Assertion

There is an Assertion 'argumentstype != SCANNERARGUMENTSPRESENT && argumentstype != SCANNERARGUMENTSPRESENTNOREG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0...

5.5CVSS5.7AI score0.0077EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•4 views

PT-2022-12657

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in JerryScript due to a failed check for the 'flags & PARSER PATTERN HAS REST ELEMENT' condition at the /jerry-core/parser/js/js-parser-expr.c location. Recommendations For...

5.5CVSS0.00621EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•8 views

PT-2022-8658

Name of the Vulnerable Software and Affected Versions ChakraCore version 1.12.0.0-beta Description The issue is related to an assertion failure in the Js::DebugContext::RundownSourcesAndReparse function, specifically when comparing pFuncBody-GetYieldRegister and oldYieldRegister. Recommendations...

7.5CVSS0.02373EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•3 views

PT-2022-12650

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in the parser parse class body function at /parser/js/js-parser-expr.c in JerryScript. The assertion opts & PARSER CLASS LITERAL CTOR PRESENT failed...

5.5CVSS0.00644EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•6 views

PT-2022-12656

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in JerryScript due to the condition 'context p-token.type == LEXER LITERAL' not being met. This issue is located in the file /jerry-core/parser/js/js-parser-expr.c...

5.5CVSS0.00621EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•11 views

CVE-2020-23315: Undefined Security Weakness

There is an ASSERTION pFuncBody-GetYieldRegister == oldYieldRegister failed in Js::DebugContext::RundownSourcesAndReparse in ChakraCore version 1.12.0.0-beta...

7.5CVSS5.7AI score0.02373EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•3 views

PT-2022-12651

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description The issue is related to an assertion failure in JerryScript. Specifically, the assertion 'page p != NULL' fails at the parser list get function in the js-parser-mem.c file. Recommendations For JerryScript...

5.5CVSS0.00644EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
•added 2022/01/20 12:00 a.m.•5 views

PT-2022-12654

Name of the Vulnerable Software and Affected Versions JerryScript version 3.0.0 Description An assertion failure occurs in the scanner scan statement end function at /parser/js/js-scanner.c due to an invalid state. This issue is related to the scanning of statement endings in the JavaScript parse...

5.5CVSS0.00621EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•8 views

CVE-2021-46340: Reachable Assertion

There is an Assertion 'contextp-stacktopuint8 == SCANSTACKTRYSTATEMENT || contextp-stacktopuint8 == SCANSTACKCATCHSTATEMENT' failed at /parser/js/js-scanner.cscannerscanstatementend in JerryScript 3.0.0...

5.5CVSS5.7AI score0.00621EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•9 views

CVE-2021-46343: Reachable Assertion

There is an Assertion 'contextp-token.type == LEXERLITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0...

5.5CVSS5.7AI score0.00621EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/01/20 12:00 a.m.•5 views

CVE-2021-46336: Reachable Assertion

There is an Assertion 'opts & PARSERCLASSLITERALCTORPRESENT' failed at /parser/js/js-parser-expr.cparserparseclassbody in JerryScript 3.0.0...

5.5CVSS5.7AI score0.00644EPSS
SaveExploits1References2
Prion
Prion
•added 2022/01/14 9:15 p.m.•34 views

Design/Logic Flaw

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

5CVSS7.5AI score0.01159EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
•added 2022/01/14 9:15 p.m.•45 views

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

7.5CVSS7.1AI score0.01159EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/01/14 8:05 p.m.•49 views

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

7.7AI score0.01159EPSS
SaveExploits1References1
CVE
CVE
•added 2022/01/14 8:05 p.m.•78 views

CVE-2021-46170

CVE-2021-46170 describes a Use-After-Free in JerryScript’s lexer_compare_identifier_to_string (js-lexer.c) from commit a6ab5e9. The vulnerability is reported across multiple feeds (NVD, OSV, CNVD, UBuntu OSV, Debian, etc.). Affected component is the JerryScript JavaScript engine; root cause is a ...

7.5CVSS7.4AI score0.01159EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/01/14 8:05 p.m.•3 views

CVE-2021-46170

An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexercompareidentifiertostring in js-lexer.c file...

8.7CVSS0.01159EPSS
SaveExploits1References3
Debian CVE
Debian CVE
•added 2022/01/14 8:05 p.m.•74 views

CVE-2021-46170

Removed by vendor...

7.5CVSS7.6AI score0.01159EPSS
SaveExploits1
Positive Technologies
Positive Technologies
•added 2022/01/14 12:00 a.m.•2 views

PT-2022-12602

Name of the Vulnerable Software and Affected Versions JerryScript version a6ab5e9 Description An issue was discovered in the js-lexer.c file, specifically in the lexer compare identifier to string function, where there is a Use-After-Free. Recommendations For JerryScript version a6ab5e9, consider...

7.5CVSS0.01159EPSS
SaveExploits1References7
Rows per page
Query Builder