435 matches found
CVE-2021-46492
CVE-2021-46492 affects Jsish v3.5.0. A SEGV vulnerability occurs via Jsi_FunctionInvoke in src/jsiFunc.c, enabling Denial of Service. Multiple connected entries reiterate the DoS impact for Jsish 3.5.0; no exploits, vectors, or fixes are detailed in the provided documents. Exploitation details ar...
CVE-2021-46491
CVE-2021-46491 affects Jsish v3.5.0 and describes a SEGV vulnerability triggered via Jsi_CommandPkgOpts in src/jsiCmds.c, leading to DoS. Multiple connected sources corroborate the vulnerability details. The available documents do not provide remediation steps or confirmed exploit details. If tru...
CVE-2021-46491
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiCommandPkgOpts at src/jsiCmds.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46490
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46490
CVE-2021-46490 affects Jsish v3.5.0, with a SEGV vulnerability triggered via NumberConstructor in src/jsiNumber.c. This defect can lead to a Denial of Service (DoS). The connected documents consistently describe the issue as a runtime crash caused by number handling in Jsish, but do not provide m...
CVE-2021-46489
Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiDecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46489
CVE-2021-46489 affects Jsish v3.5.0. The root cause is a heap-use-after-free in Jsi_DecrRefCount (src/jsiValue.c) that leads to a Denial of Service. The connected documents consistently describe DoS as the impact; exploitation details and exact remediation/patch versions are not provided in the s...
CVE-2021-46487
The CVE-2021-46487 entry concerns Jsish v3.5.0, which harbors a SEGV vulnerability triggered via /lib/x86_64-linux-gnu/libc.so.6+0x18e506 that can lead to a Denial of Service (DoS). The connected sources confirm the affected product, version, and underlying cause. No remediation steps or exploit ...
CVE-2021-46487
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x8664-linux-gnu/libc.so.6+0x18e506. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46488
Jsish v3.5.0 contains a SEGV vulnerability exploitable through jsi_ArrayConcatCmd in src/jsiArray.c, leading to Denial of Service. Affected software: Jsish 3.5.0. Root cause: array concatenation path causes segmentation fault; impact: availability impact (DO S) as per CVSS metrics. No remediation...
CVE-2021-46488
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46486
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46486
CVE-2021-46486 affects Jsish v3.5.0. A SEGV vulnerability is triggered via jsi_ArraySpliceCmd in src/jsiArray.c, causing a Denial of Service. Public references in the provided documents confirm the vulnerable component and function, with no explicit exploit details or in-the-wild exploit status d...
CVE-2021-46485
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46484
Summary: Jsish v3.5.0 contains a heap-use-after-free vulnerability triggered by Jsi_IncrRefCount in src/jsiValue.c, which can lead to a Denial of Service (DoS). Affected component: Jsish 3.5.0 (C codebase). Root cause: Heap-use-after-free flaw in the reference counting logic (Jsi_IncrRefCount) as...
CVE-2021-46484
Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiIncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46485
CVE-2021-46485 affects Jsish 3.5.0, with a SEGV vulnerability triggered by Jsi_ValueIsNumber in src/jsiValue.c that can cause Denial of Service. The connected records confirm the vulnerable component and the impact but do not specify a fixed version or patch. No exploitation details are provided ...
Jsish boolean buffer overflow vulnerability
Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...
Jsish 资源管理错误漏洞
Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish v3.5.0, which could lead to a denial of service DoS...
Jsish NumberConstructor Denial of Service Vulnerability
Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which is caused by a failure to properly handle incoming error messages and could lead to a denial of service DoS via the NumberConstructor in src/jsiNumber.c...