JerryScript security vulnerabilities

JerryScript is a lightweight JavaScript engine from the Jerryscript project. A security vulnerability exists in JerryScript that stems from a failure to include assertions in ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...

CVE-2024-31741

Cross Site Scripting vulnerability in MiniCMS v.1.11 allows a remote attacker to run arbitrary code via crafted string in the URL after login...

PT-2024-25171 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript version cefd391 Description: An Assertion Failure was discovered in Jerryscript via ECMA STRING IS REF EQUALS TO ONE string p in ecma free string list. Recommendations: For Jerryscript version cefd391, at the moment, there is no...

CVE-2024-33255

Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMASTRINGISREFEQUALSTOONE stringp in ecmafreestringlist...

CVE-2024-31741

A Cross-Site Scripting (XSS) vulnerability exists in MiniCMS v.1.11 , a minimalist content management system. The root cause is the lack of effective filtering and escaping of user-supplied data, which allows a remote attacker to execute arbitrary Web script or HTML by injecting a carefully craft...

CVE-2024-33255

The Jerryscript JavaScript engine (specifically commit cfd391 ) contains an Assertion Failure vulnerability. The root cause is located in ecma_free_string_list via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p). This vulnerability can result in high availability impact. While some sources indicate t...

CVE-2023-6484 Keycloak: log injection during webauthn authentication or registration

A log injection flaw was found in Keycloak. A text string may be injected through the authentication form when using the WebAuthn authentication mode. This issue may have a minor impact to the logs integrity...

PT-2024-41050

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned. Description The issue involves a pointer overflow in STRING CAT and several stack buffer overflows. Recommendations At the moment, there is no information about a newer version that contains a fix fo...

Glibc security vulnerabilities

glibc GNU C Library is the C standard library implemented by the GNU Project. A security vulnerability exists in glibc, which stems from buffer resizing code in addgetnetgrentX that assumes that all string pointers point to the supplied buffer, which could lead to memory corruption and a service...

CVE-2024-32662 FreeRDP rdp_redirection_read_base64_wchar out of bound read

FreeRDP is a free implementation of the Remote Desktop Protocol. FreeRDP based clients prior to version 3.5.1 are vulnerable to out-of-bounds read. This occurs when WCHAR string is read with twice the size it has and converted to UTF-8, base64 decoded. The string is only used to compare against t...

CVE-2024-32662

CVE-2024-32662 — FreeRDP out-of-bounds read : Affected software is FreeRDP clients before 3.5.1. The issue occurs when a WCHAR string is read with twice its size and converted to UTF-8/base64, and the string is used to compare against the redirection server certificate. The vulnerability has a hi...

FreeRDP security vulnerabilities

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. A security vulnerability exists prior to FreeRDP version 3.5.1 that stems from the vulnerability of FreeRDP-based clients to out-of-bounds reads. This occurs when reading a WCHAR string at twice its...

OESA-2024-1487 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix another memory leak in error handling paths Memory allocated by 'vmbusallocring' at the beginning of the probe function is never freed in the...

OESA-2024-1485 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix another memory leak in error handling paths Memory allocated by 'vmbusallocring' at the beginning of the probe function is never freed in the...

OESA-2024-1486 kernel security update

The Linux Kernel, the operating system core itself. Security Fixes: In the Linux kernel, the following vulnerability has been resolved: uiohvgeneric: Fix another memory leak in error handling paths Memory allocated by 'vmbusallocring' at the beginning of the probe function is never freed in the...

FFmpeg security vulnerabilities

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A buffer overflow vulnerability exists in FFmpeg version v.n6.1-3-g466799d4f5, which can be exploited by an attacker to execute arbitrary code via the setencoderid function in the...

jdom:SAXBuilderFuzzer: Security exception in java.base/java.nio.CharBuffer.wrap

Detailed Report: https://oss-fuzz.com/testcase?key=5144927353765888 Project: jdom Fuzzing Engine: libFuzzer Fuzz Target: SAXBuilderFuzzer Job Type: libfuzzerasanjdom Platform Id: linux Crash Type: Security exception Crash Address: Crash State: java.base/java.nio.CharBuffer.wrap...

shim: Out-of-bounds read printing error messages

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...

shim: Out-of-bounds read printing error messages

A flaw was found in Shim when an error happened while creating a new ESL variable. If Shim fails to create the new variable, it tries to print an error message to the user; however, the number of parameters used by the logging function doesn't match the format string used by it, leading to a cras...

CVE-2022-24809

net-snmp provides various tools relating to the Simple Network Management Protocol. Prior to version 5.9.2, a user with read-only credentials can use a malformed OID in a GET-NEXT to the nsVacmAccessTable to cause a NULL pointer dereference. Version 5.9.2 contains a patch. Users should use strong...