Vulnerability index

Browse CVEs

53 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Jsish HIGH 7.8
CVE-2021-46482

Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c.

Patch available
Fix from $1,950 2022-01-25
Jsish HIGH 7.8
CVE-2021-46483

Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c.

Patch available
Fix from $1,950 2022-01-25
Jsish MEDIUM 5.5
CVE-2021-46481

Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c.

Patch available
Fix from $1,600 2022-01-25
Jsish MEDIUM 5.5
CVE-2021-46474

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability can lead to a Denial of Service…

Patch available
Fix from $1,600 2022-01-25
Jsish MEDIUM 5.5
CVE-2021-46475

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Ser…

Patch available
Fix from $1,600 2022-01-25
Jsish MEDIUM 5.5
CVE-2021-46477

Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of S…

Patch available
Fix from $1,600 2022-01-25
Jsish MEDIUM 5.5
CVE-2021-46478

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service …

Patch available
Fix from $1,600 2022-01-25
Jsish MEDIUM 5.5
CVE-2021-46480

Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Serv…

Patch available
Fix from $1,600 2022-01-25
Jsish CRITICAL 9.8
CVE-2020-22873

Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code.

Fix: 3.0.7+
Fix from $2,300 2021-07-13
Jsish CRITICAL 9.8
CVE-2020-22874

Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code.

Fix: 3.0.8+
Fix from $2,300 2021-07-13
Jsish CRITICAL 9.8
CVE-2020-22875

Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code.

Fix: 3.0.6+
Fix from $2,300 2021-07-13
Jsish HIGH 7.5
CVE-2020-22907

Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted …

Fix: 3.0.18+
Fix from $1,950 2021-07-13
Jsish HIGH 7.5
CVE-2019-1010172

Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of service. The component is: function jsiValueGetString…

Mitigation only
Fix from $1,950 2019-07-25
Jsish CRITICAL 9.8
CVE-2019-1010177

Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function…

No fix yet
Fix from $2,300 2019-07-24
Jsish HIGH 7.5
CVE-2019-1010173

Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function Jsi_ValueArrayIndex (jsiValue.c…

Patch available
Fix from $1,950 2019-07-23
Jsish HIGH 7.5
CVE-2019-1010169

Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexer_getchar (jsiLexer.c:9). Th…

Patch available
Fix from $1,950 2019-07-23
Jsish HIGH 7.5
CVE-2019-1010170

Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_ObjFree (jsiObj.c:230). The atta…

Patch available
Fix from $1,950 2019-07-23
Jsish HIGH 7.5
CVE-2019-1010171

Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.…

Patch available
Fix from $1,950 2019-07-23
Jsish MEDIUM 5.5
CVE-2019-1010162

jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict (j…

Patch available
Fix from $1,600 2019-07-23
Jsish MEDIUM 6.5
CVE-2018-1000661

jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmen…

Mitigation only
Fix from $1,600 2018-09-06
Jsish MEDIUM 6.5
CVE-2018-1000663

jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmenta…

Patch available
Fix from $1,600 2018-09-06
Jsish MEDIUM 6.5
CVE-2018-1000668

jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Cras…

Patch available
Fix from $1,600 2018-09-06
Jsish MEDIUM 6.5
CVE-2018-1000655

Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in …

No fix yet
Fix from $1,600 2018-08-20