Browse CVEs

HIGH 7.8 CVE-2021-46482 Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c. Jsish Patch available Fix from $1,9502022-01-25 HIGH 7.8 CVE-2021-46483 Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c. Jsish Patch available Fix from $1,9502022-01-25 MEDIUM 5.5 CVE-2021-46481 Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c. Jsish Patch available Fix from $1,6002022-01-25 MEDIUM 5.5 CVE-2021-46474 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability can lead to a Denial of Service… Jsish Patch available Fix from $1,6002022-01-25 MEDIUM 5.5 CVE-2021-46475 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Ser… Jsish Patch available Fix from $1,6002022-01-25 MEDIUM 5.5 CVE-2021-46477 Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of S… Jsish Patch available Fix from $1,6002022-01-25 MEDIUM 5.5 CVE-2021-46478 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service … Jsish Patch available Fix from $1,6002022-01-25 MEDIUM 5.5 CVE-2021-46480 Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Serv… Jsish Patch available Fix from $1,6002022-01-25 CRITICAL 9.8 CVE-2020-22873 Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code. Jsish 3.0.7+ Fix from $2,3002021-07-13 CRITICAL 9.8 CVE-2020-22874 Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code. Jsish 3.0.8+ Fix from $2,3002021-07-13 CRITICAL 9.8 CVE-2020-22875 Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code. Jsish 3.0.6+ Fix from $2,3002021-07-13 HIGH 7.5 CVE-2020-22907 Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted … Jsish 3.0.18+ Fix from $1,9502021-07-13 HIGH 7.5 CVE-2019-1010172 Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption. The impact is: denial of service. The component is: function jsiValueGetString… Jsish Mitigation only Fix from $1,9502019-07-25 CRITICAL 9.8 CVE-2019-1010177 Jsish 2.4.70 2.047 is affected by: Use After Free. The impact is: denial of service and possibly arbitrary code execution. The component is: function… Jsish No fix yet Fix from $2,3002019-07-24 HIGH 7.5 CVE-2019-1010173 Jsish 2.4.84 2.0484 is affected by: Reachable Assertion. The impact is: denial of service. The component is: function Jsi_ValueArrayIndex (jsiValue.c… Jsish Patch available Fix from $1,9502019-07-23 HIGH 7.5 CVE-2019-1010169 Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read. The impact is: denial of service. The component is: function lexer_getchar (jsiLexer.c:9). Th… Jsish Patch available Fix from $1,9502019-07-23 HIGH 7.5 CVE-2019-1010170 Jsish 2.4.77 2.0477 is affected by: Use After Free. The impact is: denial of service. The component is: function Jsi_ObjFree (jsiObj.c:230). The atta… Jsish Patch available Fix from $1,9502019-07-23 HIGH 7.5 CVE-2019-1010171 Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference. The impact is: denial of service. The component is: function jsi_DumpFunctions (jsiEval.… Jsish Patch available Fix from $1,9502019-07-23 MEDIUM 5.5 CVE-2019-1010162 jsish 2.4.74 2.0474 is affected by: CWE-476: NULL Pointer Dereference. The impact is: denial of service. The component is: function Jsi_StrcmpDict (j… Jsish Patch available Fix from $1,6002019-07-23 MEDIUM 6.5 CVE-2018-1000661 jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmen… Jsish Mitigation only Fix from $1,6002018-09-06 MEDIUM 6.5 CVE-2018-1000663 jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmenta… Jsish Patch available Fix from $1,6002018-09-06 MEDIUM 6.5 CVE-2018-1000668 jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Cras… Jsish Patch available Fix from $1,6002018-09-06 MEDIUM 6.5 CVE-2018-1000655 Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in … Jsish No fix yet Fix from $1,6002018-08-20