642 matches found
Apache HTTP Server XSS Vulnerability (Sep 2012) - Linux
Apache HTTP Server is prone to a cross-site scripting XSS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fre...
Apache HTTP Server DoS Vulnerability (Jul 2013) - Linux
Apache HTTP Server is prone to a denial of service DoS vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Apache HTTP Server Multiple Vulnerabilities (Sep 2014) - Linux
Apache HTTP Server is prone to multiple vulnerabilities. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
Cross site scripting
A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser...
CVE-2021-39486
A Stored XSS via Malicious File Upload exists in Gila CMS version 2.2.0. An attacker can use this to steal cookies, passwords or to run arbitrary code on a victim's browser...
CVE-2021-24667
A stored cross-site scripting vulnerability has been discovered in : Simply Gallery Blocks with Lightbox Version – 2.2.0 & below. The vulnerability exists in the Lightbox functionality where a user with low privileges is allowed to execute arbitrary script code within the context of the...
ILM OpenEXR 代码问题漏洞
ILM OpenEXR is an image file format for High Dynamic Range HDR images from Industrial Light and Magic ILM. ILM OpenEXR suffers from a code issue vulnerability that stems from a flaw in the product's Imf25::Header::operator. The vulnerability can be exploited to execute malicious code. The followi...
FluidSynth: Remote code execution
Background FluidSynth is a real-time synthesizer based on the Soundfont 2 specifications. Description FluidSynth contains a use-after-free in sfloader/fluidsffile.c which occurs when parsing Soundfile 2 files. Impact A remote attacker could entice a user to open a specially crafted Soundfont 2 fi...
JerryScript Stack Overflow Vulnerability
JerryScript is a lightweight JavaScript engine . A stack overflow vulnerability exists in ecmaregexpmatch in ecma-regexp-object.c:535 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this time...
Unspecified vulnerability in JerryScript (CNVD-2021-42985)
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsefunctionstatement in js-parser-statm.c:733 in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
Unspecified Vulnerability in JerryScript (CNVD-2021-42994)
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsetrystatementend in js-parser-statm.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
Unspecified Vulnerability in JerryScript (CNVD-2021-42989)
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in the parserparseobjectinitializer in /home/JerryScript/jerry-core/parser/js/js-parser-expr.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
Unspecified Vulnerability in JerryScript (CNVD-2021-42996)
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript version 2.2.0 in js-parser.c:2185 in parserparsesource. No details of the vulnerability are provided at this time...
Unspecified Vulnerability in JerryScript (CNVD-2021-42991)
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parserparsefunctionarguments in /home/JerryScript/jerry-core/parser/js/js-parser.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
JerryScript heap buffer overflow vulnerability (CNVD-2021-43001)
JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in jmempoolscollectempty in jmem-poolman.c:165 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this time...
UBUNTU-CVE-2020-23310
There is an Assertion 'contextp-nextscannerinfop-type == SCANNERTYPEFUNCTION' failed at js-parser-statm.c:733 in parserparsefunctionstatement in JerryScript 2.2.0...
JerryScript 缓冲区错误漏洞
JerryScript is a lightweight JavaScript engine . A heap buffer overflow vulnerability exists in reparsecharescape in re-parser.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
JerryScript 缓冲区错误漏洞
JerryScript is a lightweight JavaScript engine . A stack overflow vulnerability exists in ecmaregexpmatch in ecma-regexp-object.c:535 in JerryScript version 2.2.0. No detailed vulnerability details are provided at this time...
JerryScript 安全漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in parseremitcbcbackwardbranch in /home/JerryScript/jerry-core/parser/js/js-parser-util.c in JerryScript version 2.2.0. No details of the vulnerability are provided at this time...
JerryScript 代码问题漏洞
JerryScript is a lightweight JavaScript engine . A security vulnerability exists in JerryScript version 2.2.0 in js-parser.c:2185 in parserparsesource. No details of the vulnerability are provided at this time...