CVE-2021-39554

Removed by vendor...

libslax 代码问题漏洞

libslax is an open-source implementation of the SLAX language. libslax is vulnerable to a code problem caused by a null pointer dereference in the function slaxLexer in slaxLexer .c, which can be exploited to cause a denial of service...

libslax 缓冲区错误漏洞

libslax is an open source implementation of the SLAX language. libslax suffers from a buffer overflow vulnerability that stems from slaxLexer in slaxLexer .c, which has a stack-based buffer overflow. No detailed vulnerability details are currently available...

The vulnerability in the `lexer_parse_number` function of the `js-lexer.c` component of the JavaScript engine for Internet of Things applications, JerryScript, and the IoT.js platform, related to buffer overflows, allows attackers to access sensitive data, compromise its integrity, and cause service failures.

The vulnerability of the lexerparsenumber function in the js-lexer.c component of the JavaScript engine for the Internet of Things, JerryScript, and the IoT.js platform, is related to buffer overflow attacks. Exploiting this vulnerability could allow an attacker to gain access to confidential dat...

Data races in lexer

lexer is a plugin based lexical reader.Affected versions of this crate implements Sync for ReaderResult with the trait bound T: Send, E: Send. Since matching on the public enum ReaderResult provides access to &T & &E, allowing data race to a non-Sync type T or E. This can result in a memory...

GHSA-F997-8GXG-R354 Data races in lexer

lexer is a plugin based lexical reader.Affected versions of this crate implements Sync for ReaderResult with the trait bound T: Send, E: Send. Since matching on the public enum ReaderResult provides access to &T & &E, allowing data race to a non-Sync type T or E. This can result in a memory...

alkyne (=0.1.0), dioxus-core (=0.1.2) +7 more potentially affected by CVE-2020-36456 via toolshed (>=0.4.0 <=0.8.1)

toolshed CARGO version =0.4.0, =0.1.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - vip-712 =0.1.1 Source cves: CVE-2020-36456 Source advisory: OSV:GHSA-2R6Q-6C8C-G762...

python-pygments: Infinite loop in SML lexer may lead to DoS

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML SML source file, as demonstrated by input that only contains the "exception" keyword...

OSV-2021-1149 Heap-buffer-overflow in JS::Lexer::consume

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=37294 Crash type: Heap-buffer-overflow READ 1 Crash state: JS::Lexer::consume JS::Lexer::next JS::Parser::consume...

CVE-2020-36458

An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult, there is an implementation of Sync with a trait bound of T: Send, E: Send...

CVE-2020-36458

An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult, there is an implementation of Sync with a trait bound of T: Send, E: Send...

Design/Logic Flaw

An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult, there is an implementation of Sync with a trait bound of T: Send, E: Send...

CVE-2020-36458

An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult, there is an implementation of Sync with a trait bound of T: Send, E: Send...

CVE-2020-36458

The CVE-2020-36458 issue concerns the Rust lexer crate, where ReaderResult has a Sync implementation bounded by T: Send, E: Send. This mis-bounding can allow a non-Sync T or E to be accessed across threads via &T or &E, creating a potential data race and memory corruption. Affected component: lex...

CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

Authentication flaw

There is an Assertion in 'contextp-token.type == LEXERRIGHTBRACE || contextp-token.type == LEXERASSIGN || contextp-token.type == LEXERCOMMA' in parserparseobjectinitializer in JerryScript 2.2.0...

CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

UBUNTU-CVE-2021-26195

An issue was discovered in JerryScript 2.4.0. There is a heap-buffer-overflow in lexerparsenumber in js-lexer.c file...

JerryScript 缓冲区错误漏洞

JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript 2.4.0, which stems from a heap buffer overflow in lexerparsenumber in the js-lexer.c file. No details of the vulnerability are provided at this time...

An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source file as demonstrated by input that only contains the "exception" keyword.

...