PT-2024-20308 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A stack-overflow issue was discovered in Jsish via the IterGetKeysCallback component at /jsish/src/jsiValue.c. Recommendations: For Jsish version 3.5.0, consider disabling the IterGetKeysCallback component as ...

PT-2024-20310 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A use-after-free issue was discovered in Jsish via the SplitChar at ./src/jsiUtils.c. Recommendations: For Jsish version 3.5.0, at the moment, there is no information about a newer version that contains a fix...

Jsish Buffer Error Vulnerability

Jsish is a small JavaScript parser written in C with a built-in database. A buffer error vulnerability exists in Jsish version v3.5.0, which stems from a heap buffer overflow contained in /src/jsiUtils.c. The vulnerability is caused by the inclusion of a heap buffer overflow...

CVE-2024-24189

Jsish v3.5.0 commit 42c694c was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c...

CVE-2024-24188

CVE-2024-24188 affects Jsish v3.5.0, with a heap-buffer-overflow in ./src/jsiUtils.c . Documented impact: high for confidentiality, integrity, and availability; CVSS v3.1 base score 9.8. Exploitation details are not provided in the supplied documents, and there is no remediation/version fix infor...

CVE-2020-23259

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

CVE-2020-23258

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

CVE-2020-23259

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

CVE-2020-23260

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

Design/Logic Flaw

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

Design/Logic Flaw

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

Design/Logic Flaw

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file...

CVE-2020-23259

An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the JsiStrlen function in the src/jsiChar.c file...

CVE-2020-23258

An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the JsiValueIsNumber function in ./src/jsiValue.c file...

PT-2023-11645 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish versions 3.0.11 and earlier Description: An issue in Jsish allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file. Recommendations: For versions 3.0.11 and earlier, consider disabling...

Jsish 代码问题漏洞

Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v.3.0.11 and earlier versions, which stems from a vulnerability that allows an attacker to cause a denial of service via the JsiStrlen function...

CVE-2020-23259

CVE-2020-23259 affects the Jsish project, specifically versions up to and including 3.0.11. The issue is a denial-of-service vulnerability caused by the Jsi_Strlen function in src/jsiChar.c. The connected documents do not provide a concrete exploit vector, impact details beyond DoS, or any availa...

PT-2023-11643 · Jsish · Jsish

Name of the Vulnerable Software and Affected Versions: Jsish version 3.0.11 Description: An issue in Jsish allows a remote attacker to cause a denial of service via the Jsi ValueIsNumber function in the ./src/jsiValue.c file. Recommendations: For Jsish version 3.0.11, as a temporary workaround,...

Jsish 缓冲区错误漏洞

Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v.3.0.11 and earlier versions, which stems from a vulnerability that allows an attacker to cause a denial of service via the StringReplaceCmd function...