Lucene search
+L

3 matches found

CVE
CVE
•added 2021/07/13 2:43 p.m.•66 views

CVE-2020-22875

Jsish CVE-2020-22875 is a vulnerability in the Jsi_ObjSetLength function where an integer overflow in that function allows remote code execution. Affected is jsish versions before 3.0.6 (NVD) and variants cited as vulnerable before 3.0.8 (CNVD). The root cause is improper boundary checks in Jsi_O...

9.8CVSS9.8AI score0.03257EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2021/07/13 12:00 a.m.•16 views

Jsish input validation vulnerability

Jsish is a small JavaScript parser written in C with a built-in database.Jsish has a buffer overflow vulnerability in versions prior to 3.0.8, which stems from the failure of the product's JsiObjSetLength function to restrict integer data boundaries, allowing an attacker to execute arbitrary code...

9.8CVSS6.6AI score0.03257EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/07/13 12:00 a.m.•4 views

PT-2021-10805

Name of the Vulnerable Software and Affected Versions jsish versions prior to 3.0.6 Description The issue is related to an integer overflow vulnerability in the Jsi ObjSetLength function. This vulnerability allows remote attackers to execute arbitrary code. Recommendations For versions prior to...

9.8CVSS0.03257EPSS
SaveExploits1References5
Rows per page
Query Builder