EUVD-2021-33154

Malicious code in bioql PyPI...

Jsish jsiClearStack Denial of Service Vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages. An attacker can cause a denial of service DoS via jsiClearStack in src/jsiEval.c...

Jsish jsiValueObjDelete Denial of Service Vulnerability

Jsish is a small JavaScript parser with a built-in database written in C. A denial of service vulnerability exists in Jsish v3.5.0, which stems from a failure to properly handle incoming error messages and could lead to a denial of service DoS via a jsiValueObjDelete in src/jsiEval.c...

CVE-2021-46478

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

Heap overflow

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

Heap overflow

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46480

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...

CVE-2021-46478

Jsish v3.5.0 contains a heap buffer overflow caused by the function jsiClearStack in src/jsiEval.c, leading to Denial of Service (DoS). The vulnerability is documented across multiple sources (NVD CVE-2021-46478 and CNVD/CVE records) and is characterized by a DoS condition without confirmed remot...

CVE-2021-46474

CVE-2021-46474 affects Jsish v3.5.0 and is caused by a heap-based buffer overflow in jsiEvalCodeSub (src/jsiEval.c), which can lead to a Denial of Service. Sources across NVD/CNVD/CVELIST describe the issue consistently, with DoS impact; no exploit details are provided in the connected documents....

CVE-2021-46480: Out-of-bounds Write

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service DoS...