Fedora: Security Advisory for zziplib (FEDORA-2022-737e44718a)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for zziplib (FEDORA-2022-8109b472a3)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

MCMS has SQL injection vulnerability (CNVD-2022-17364)

MCMS is a lightweight open source content management system developed on java.MCMS is vulnerable to SQL injection, which can be exploited by attackers to obtain sensitive database information...

[SECURITY] Fedora 35 Update: dotnet6.0-6.0.101-3.fc35

.NET is a fast, lightweight and modular platform for creating cross platform applications that work on Linux, macOS and Windows. It particularly focuses on creating console applications, web applications and micro-services. .NET contains a runtime conforming to .NET Standards a set of framework...

Gitea Input Validation Error Vulnerability

Gitea is a lightweight Go-based git service developed by the Gitea community. Gitea is vulnerable to an input validation error that stems from the product's failure to determine that a request originated from a trusted user, which could be exploited to send an unintended request to the server...

Gitea Cross-Site Scripting Vulnerability (CNVD-2022-11525)

A cross-site scripting vulnerability exists in Gitea, a Go-based lightweight git service developed by the Gitea community. The vulnerability stems from a mirror setting in the product wiki/issue link that does not effectively handle special characters in the input data. An attacker could execute...

log4j: Remote code execution in Log4j 1.x when application is configured to use JMSAppender

A flaw was found in the Java logging library Apache Log4j in version 1.x. JMSAppender in Log4j 1.x is vulnerable to deserialization of untrusted data. This allows a remote attacker to execute code on the server if the deployed application is configured to use JMSAppender and to the attacker's JND...

Jerryscript ecma-get-put-value.c Denial of Service Vulnerability

JerryScript is JerryScript Jerryscript project a lightweight JavaScript engine . A denial of service vulnerability exists in Jerryscript version 3.0.0, which originates from an assertion in /jerry-core/ecma/operations/ecma-get-put-value.c, and can be exploited by an attacker to trigger a denial o...

Jerryscript jmem-heap.c Denial of Service Vulnerability

JerryScript is a lightweight JavaScript engine JerryScript project . A denial of service vulnerability exists in Jerryscript version 3.0.0, which originates from an assertion at /jerry-core/jmem/jmem-heap.c, and can be exploited by an attacker to trigger a denial of service...

JerryScript has an unspecified vulnerability (CNVD-2022-07240)

JerryScript, a lightweight JavaScript engine from the JerryScript project, is vulnerable in JerryScript 3.0.0, which originates in /base/ecma-helpers.cecmagetlexenvtype An assertion ecmaislexicalenvironment objectp fails at /base/ecma-helpers.c ecmagetlexenvtype. No detailed vulnerability details...

JerryScript has an unspecified vulnerability (CNVD-2022-07241)

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a security vulnerability in JerryScript 3.0.0, which originates in /parser/js/js-parser-expr.cparserparseclassbody. classbody has a failed assertion opts & PARSERCLASSLITERALCTORPRESENT. No detailed vulnerability detai...

JerryScript has an unspecified vulnerability (CNVD-2022-07247)

JerryScript is a lightweight JavaScript engine from the JerryScript Jerryscript project. a security vulnerability exists in JerryScript version 3.0.0, which stems from a SEGV vulnerability in /jerry-core/ecma/base/ecma-gc.c. An attacker could exploit this vulnerability to cause a denial of servic...

JerryScript has an unspecified vulnerability (CNVD-2022-07245)

JerryScript is a lightweight JavaScript engine for the JerryScript Jerryscript project. version 3.0.0 of JerryScript has a security vulnerability, there are no details of the vulnerability provided...

Jerryscript has an unspecified vulnerability (CNVD-2022-07249)

JerryScript is a lightweight JavaScript engine from the JerryScript Jerryscript project. version 3.0.0 of Jerryscript has a security vulnerability that stems from the existence of an assertion failure in ecma-helpers-value. No detailed vulnerability details are available...

JerryScript lit-strings.c denial-of-service vulnerability

JerryScript is a lightweight JavaScript engine from the JerryScript project.JerryScript has a denial-of-service vulnerability in version 3.0.0, which stems from an assertion failure in /jerry-core/lit/lit-strings.c. An attacker could use this vulnerability to launch a denial of service...

Jerryscript stack buffer overflow vulnerability

JerryScript is a lightweight JavaScript engine from the JerryScript project. jerryscript has a stack buffer overflow vulnerability in version 3.0.0, which stems from vmloop.ltopriv.304 in /jerry-core/vm/vm.c when handling untrusted input with a boundary error. An attacker could exploit this...

JerryScript ecma-literal-storage.c denial of service vulnerability

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-literal-storage.c. case, an attacker could use this vulnerability to launch a denial of service...

JerryScript ecma-helpers-value.c denial-of-service vulnerability

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-helpers-value.c , an attacker could use this vulnerability to launch a denial of service...

JerryScript ecma-objects.c denial of service vulnerability

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/operations/ecma-objects.c , an attacker could use this vulnerability to launch a denial of service...

JerryScript ecma-helpers.c denial of service vulnerability

JerryScript, a lightweight JavaScript engine from the JerryScript project, has a denial-of-service vulnerability in version 3.0.0, which stems from a failed assertion in /jerry-core/ecma/base/ecma-helpers.c. An attacker could exploit this vulnerability to launch a denial of service...