489 matches found
CVE-2021-46486
CVE-2021-46486 affects Jsish v3.5.0. A SEGV vulnerability is triggered via jsi_ArraySpliceCmd in src/jsiArray.c, causing a Denial of Service. Public references in the provided documents confirm the vulnerable component and function, with no explicit exploit details or in-the-wild exploit status d...
CVE-2021-46484
Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiIncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46485
CVE-2021-46485 affects Jsish 3.5.0, with a SEGV vulnerability triggered by Jsi_ValueIsNumber in src/jsiValue.c that can cause Denial of Service. The connected records confirm the vulnerable component and the impact but do not specify a fixed version or patch. No exploitation details are provided ...
CVE-2021-46484
Summary: Jsish v3.5.0 contains a heap-use-after-free vulnerability triggered by Jsi_IncrRefCount in src/jsiValue.c, which can lead to a Denial of Service (DoS). Affected component: Jsish 3.5.0 (C codebase). Root cause: Heap-use-after-free flaw in the reference counting logic (Jsi_IncrRefCount) as...
CVE-2021-46485
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
Jsish 安全漏洞
Jsish is a small JavaScript parser written in C with a built-in database. A security vulnerability exists in Jsish v3.5.0 that could lead to a Denial of Service DoS...
CVE-2021-46484: Use After Free
Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiIncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46503: Use After Free
Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x8664-linux-gnu/libasan.so.4+0x79732. This vulnerability can lead to a Denial of Service DoS...
Jsish 资源管理错误漏洞
Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish v3.5.0, which could lead to a denial of service DoS...
CVE-2021-46492: Undefined Security Weakness
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiFunctionInvoke at src/jsiFunc.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46498: Use After Free
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsiwswebsocketObjFree in src/jsiWebSocket.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46489: Use After Free
Jsish v3.5.0 was discovered to contain a heap-use-after-free via JsiDecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...
Jsish 资源管理错误漏洞
Jsish is a small JavaScript parser with a built-in database written in C. A security vulnerability exists in Jsish v3.5.0, which could lead to a denial of service DoS...
PT-2022-12750 · Jsish · Jsish
Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A stack overflow issue was discovered in Jsish. The issue occurs via the /usr/lib/x86 64-linux-gnu/libasan.so.4+0x5b1e5 library. No information is available about the estimated number of potentially affected...
PT-2022-12752 · Jsish · Jsish
Name of the Vulnerable Software and Affected Versions: Jsish version 3.5.0 Description: A stack overflow issue was discovered in Jsish via the Jsi LogMsg function at src/jsiUtils.c. Recommendations: For Jsish version 3.5.0, consider disabling the Jsi LogMsg function as a temporary workaround unti...
CVE-2021-46505: Uncontrolled Recursion
Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x8664-linux-gnu/libasan.so.4+0x5b1e5...
CVE-2021-46486: Undefined Security Weakness
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsiArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service DoS...
Jsish boolean buffer overflow vulnerability
Jsish is a small JavaScript parser with a built-in database written in C. Jsish is vulnerable to a buffer overflow vulnerability that originates when a networked system or product performs an operation on memory without properly validating data boundaries, resulting in an incorrect read or write...
CVE-2021-46485: Undefined Security Weakness
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via JsiValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service DoS...