CVE漏洞

OStack程序员社区-中国程序员成长平台 › 门户 › 漏洞›CVE漏洞

RSS

CVE-2021-46340

There is an Assertion 'context_p-stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p-stack_top_uint8 == SCAN_STACK_CATCH_STATEMENT' failed at /parser/js/js-scanner.c(scanner_scan_statemen ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：28 | 回复：0
CVE-2021-46342

There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at /jerry-core/ecma/base/ecma-helpers.c in JerryScript 3.0.0.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：33 | 回复：0
CVE-2021-46343

There is an Assertion 'context_p-token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：32 | 回复：0
CVE-2021-46344

There is an Assertion 'flags PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in JerryScript 3.0.0.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：23 | 回复：0
CVE-2021-46345

There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：33 | 回复：0
CVE-2021-46346

There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_disp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：36 | 回复：0
CVE-2021-46347

There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：29 | 回复：0
CVE-2021-46348

There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma/base/ecma-literal-storage.c in JerryScript 3.0.0.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：35 | 回复：0
CVE-2021-46349

There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed at /jerry-core/ecma/operations/ecma-objects.c in JerryScript 3.0.0.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：32 | 回复：0
CVE-2021-46350

There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in JerryScript 3.0.0.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：62 | 回复：0
CVE-2021-46351

There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/builtin-objects/ecma-builtin-date-prototype.c(ecma_builtin_date_prototype_disp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：33 | 回复：0
CVE-2022-22888

Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objects.c.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：24 | 回复：0
CVE-2022-22890

There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_REG' failed at /jerry-core/parser/js/js-scanner-util.c in Jerryscript 3.0.0. ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：38 | 回复：0
CVE-2022-22891

Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in /jerry-core/ecma/base/ecma-gc.c.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：17 | 回复：0
CVE-2022-22892

There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) || ecma_is_value_number (value) || ecma_is_value_string (value) || ecma_is_val ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：18 | 回复：0
CVE-2022-22893

Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：31 | 回复：0
CVE-2022-22894

Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcache.c.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：27 | 回复：0
CVE-2022-22895

Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-core/ecma/base/ecma-helpers-conversion.c.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：23 | 回复：0
CVE-2022-22928

MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：53 | 回复：0
CVE-2022-22929

MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：29 | 回复：0
CVE-2022-22930

A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：34 | 回复：0
CVE-2022-23314

MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：26 | 回复：0
CVE-2022-23315

MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：18 | 回复：0
CVE-2022-0326

NULL Pointer Dereference in Homebrew mruby prior to 3.2.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：17 | 回复：0
CVE-2022-21933

ASUS VivoMini/Mini PC device has an improper input validation vulnerability. A local attacker with system privilege can use system management interrupt (SMI) to modify memory, resulting in arbitrary c ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：30 | 回复：0
CVE-2022-0329

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. Reason: This CVE has been rejected as it was incorrectly assigned. All references and descriptions in this candidate have been removed to prevent acciden ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：37 | 回复：0
CVE-2022-0318

Heap-based Buffer Overflow in vim/vim prior to 8.2.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：32 | 回复：0
CVE-2020-19858

Platinum Upnp SDK through 1.2.0 has a directory traversal vulnerability. The attack could remote attack victim by sending http://ip:port/../privacy.avi URL to compromise a victim's privacy.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：36 | 回复：0
CVE-2020-19860

When ldns version 1.7.1 verifies a zone file, the ldns_rr_new_frm_str_internal function has a heap out of bounds read vulnerability. An attacker can leak information on the heap by constructing a zone ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：32 | 回复：0
CVE-2022-0319

Out-of-bounds Read in vim/vim prior to 8.2.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：33 | 回复：0
CVE-2020-19861

When a zone file in ldns 1.7.1 is parsed, the function ldns_nsec3_salt_data is too trusted for the length value obtained from the zone file. When the memcpy is copied, the 0xfe - ldns_rdf_size(salt_rd ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：24 | 回复：0
CVE-2021-35003

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link Archer C90 1.0.6 Build 20200114 rel.73164(5553) routers. Authentication is not required to exp ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：31 | 回复：0
CVE-2021-35004

This vulnerability allows remote attackers to execute arbitrary code on affected installations of TP-Link TL-WA1201 1.0.1 Build 20200709 rel.66244(5553) wireless access points. Authentication is not r ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：34 | 回复：0
CVE-2021-40855

The EU Technical Specifications for Digital COVID Certificates before 1.1 mishandle certificate governance. A non-production public key certificate could have been used in production.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：31 | 回复：0
CVE-2021-46198

An SQL Injection vulnerability exists in Sourceodester Courier Management System 1.0 via the email parameter in /cms/ajax.php app.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：40 | 回复：0
CVE-2021-46200

An SQL Injection vulnerability exists in Sourcecodester Simple Music Clour Community System 1.0 via the email parameter in /music/ajax.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：45 | 回复：0
CVE-2021-46201

An SQL Injection vulnerability exists in Sourcecodester Online Resort Management System 1.0 via the id parameterv in /orms/ node.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：39 | 回复：0
CVE-2021-46307

An SQL Injection vulnerability exists in Projectworlds Online Examination System 1.0 via the eid parameter in account.php.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：19 | 回复：0
CVE-2022-23220

USBView 2.1 before 2.2 allows some local users (e.g., ones logged in via SSH) to execute arbitrary code as root because certain Polkit settings (e.g., allow_any=yes) for pkexec disable the authenticat ...……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：19 | 回复：0
CVE-2021-46308

An SQL Injection vulnerability exists in Sourcecodester Online Railway Reservation Sysytem 1.0 via the sid parameter.……

作者：菜鸟教程小白 | 时间：2022-2-5 13:06 | 阅读：19 | 回复：0