31 matches found
CVE-2021-31240
An issue found in libming v.0.4.8 allows a local attacker to execute arbitrary code via the parseSWFIMPORTASSETS function in the parser.c file...
JerryScript 安全漏洞
JerryScript is a lightweight JavaScript engine from the JerryScript Jerryscript project. JerryScript has a security vulnerability that stems from an assertion failure in /js/js-parser.c in JerryScript commit a6ab5e9...
UBUNTU-CVE-2020-23308
There is an Assertion 'contextp-stacktopuint8 == LEXEREXPRESSIONSTART' at js-parser-expr.c:3565 in parserparseexpression in JerryScript 2.2.0...
PT-2020-6421 · Cflow +2 · Cflow +2
Name of the Vulnerable Software and Affected Versions: cflow version 1.6 Description: The issue is related to a Use-after-Free vulnerability in the call function at src/parser.c, which could cause a denial of service via the pointer variable caller-callee. This vulnerability may allow an attacker...
GNU cflow Buffer Overflow Vulnerability
GNU cflow is a flowchart generator from the GNU Project that reads C source files and generates externally referenced flowcharts. A buffer overflow vulnerability exists in the 'nexttoken' function of the parser.c file in GNU cflow 1.6 and earlier versions, which can be exploited by an attacker to...
DEBIAN-CVE-2019-16165
GNU cflow through 1.6 has a use-after-free in the reference function in parser.c...
The vulnerabilities of the functions xmlParserEntityCheck and xmlParseAttValueComplex in the libxml2 library allow a hacker to trigger a service failure.
The vulnerabilities of the xmlParserEntityCheck and xmlParseAttValueComplex functions in the parser.c file of the libxml2 library are caused by errors in tracking the depth of recursion. Exploiting these vulnerabilities can allow an attacker, operating remotely, to cause a service failure using a...
Netwide Assembler Buffer Out-of-Bounds Read Vulnerability
Netwide Assembler NASM is a Linux-based assembler that creates binaries and writes bootloaders. A buffer out-of-bounds read vulnerability exists in the 'parseline' function of the asm/parser.c file in NASM version 2.13.02rc2, for which there is currently no detailed vulnerability description...
CVE-2017-16615
An exploitable vulnerability exists in the YAML parsing functionality in the parseyamlquery method in parser.py in MLAlchemy before 0.2.2. When processing YAML-Based queries for data, a YAML parser can execute arbitrary Python commands resulting in command execution because load is used where...
DokuWiki /inc/parser/xhtml.php file cross-site scripting vulnerability
DokuWiki is a PHP-based Wiki engine. A cross-site scripting vulnerability exists in the DokuWiki /inc/parser/xhtml.php file, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive information or hijack user...