Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
580-Directory-Traversal.html - http://packetstormsecurity.com/files/166671/Franklin-Fueling-Systems-Colibri-Controller-Module-1.8.19.8580-Local-File-Inclusion.html
CVE ID: CVE-2021-46418 State: PUBLISHED Published: 2022-04-07T11:18:31 Last Updated: 2024-08-04T05:02:11.801Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1avIfk1MZNmNQYePE1_n4irC24daxCeBA - http://packetstormsecurity.com/files/166674/Telesquare-TLR-2855KS6-Arbitrary-File-Creation.html
CVE ID: CVE-2021-46419 State: PUBLISHED Published: 2022-04-07T11:28:56 Last Updated: 2024-08-04T05:02:11.698Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1TWw3Oy0wZImSHK_hj-tKkbn9sFgqqySp - http://packetstormsecurity.com/files/166675/Telesquare-TLR-2855KS6-Arbitrary-File-Deletion.html
CVE ID: CVE-2021-46420 State: PUBLISHED Published: 2022-04-27T10:37:04 Last Updated: 2024-08-04T05:02:11.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/1ubNqP3c_AheIPgdVsF6SZuLNDu4uRDuf/view?usp=sharing
CVE ID: CVE-2021-46421 State: PUBLISHED Published: 2022-04-27T10:45:50 Last Updated: 2024-08-04T05:02:11.609Z Vendors: n/a Products: n/a Problem Types: n/a Description: Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/file/d/17y764rRfgab2EhYMEqCIYh__5sOTigqe/view?usp=sharing
CVE ID: CVE-2021-46422 State: PUBLISHED Published: 2022-04-27T11:04:00 Last Updated: 2024-08-04T05:02:11.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1YJlVlb4SlTEGONzIjiMwd2P7ucP_Pm7T?usp=sharing - http://packetstormsecurity.com/files/167201/SDT-CW3B1-1.1.0-Command-Injection.html - http://packetstormsecurity.com/files/167387/Telesquare-SDT-CW3B1-1.1.0-Command-Injection.html
CVE ID: CVE-2021-46423 State: PUBLISHED Published: 2022-04-27T11:23:02 Last Updated: 2024-08-04T05:02:11.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that allows a remote attacker to download a full configuration file. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1iY4QqzZLdYgwD0LYc74M4Gm2wSC6Be1u?usp=sharing
CVE ID: CVE-2021-46424 State: PUBLISHED Published: 2022-04-27T11:34:51 Last Updated: 2024-08-04T05:02:11.797Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request. Additional Analyst Notes: - CVE Program Container: References: - https://drive.google.com/drive/folders/1_e3eJ8fzhCWnCkoRpbLoyQecuKkPR4OD?usp=sharing - http://packetstormsecurity.com/files/167127/TLR-2005KSH-Arbitrary-File-Delete.html
CVE ID: CVE-2021-46426 State: PUBLISHED Published: 2022-03-25T15:54:12 Last Updated: 2024-08-04T05:02:11.522Z Vendors: n/a Products: n/a Problem Types: n/a Description: phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality. Additional Analyst Notes: - CVE Program Container: References: - https://www.tempest.com.br - https://github.com/phpipam - https://github.com/phpipam/phpipam/commit/6c1f72816d6ac634e9c174057e008717d959f351 - http://seclists.org/fulldisclosure/2022/May/43 - http://packetstormsecurity.com/files/167227/PHPIPAM-1.4.4-Cross-Site-Request-Forgery-Cross-Site-Scripting.html
CVE ID: CVE-2021-46427 State: PUBLISHED Published: 2022-01-27T18:32:35 Last Updated: 2024-08-04T05:02:11.583Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50673 - https://cxsecurity.com/issue/WLB-2022010092 - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Simple%20ChatBot - https://www.nu11secur1ty.com/2022/01/cve-2021-46427-sql-injection-bypass.html
CVE ID: CVE-2021-46428 State: PUBLISHED Published: 2022-01-27T18:39:04 Last Updated: 2024-08-04T05:02:11.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 ( and previous versions via the bot_avatar parameter in SystemSettings.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/50672 - https://cxsecurity.com/issue/WLB-2022010093
CVE ID: CVE-2021-46433 State: PUBLISHED Published: 2022-03-28T10:51:16 Last Updated: 2024-08-04T05:02:11.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCode()to bypass sandbox to execute arbitrary PHP code when disable_native_funcs is true. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/fenom-template/fenom/issues/331
CVE ID: CVE-2021-46434 State: PUBLISHED Published: 2022-03-28T11:10:15 Last Updated: 2024-08-04T05:02:11.689Z Vendors: n/a Products: n/a Problem Types: n/a Description: EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid Additional Analyst Notes: - CVE Program Container: References: - https://github.com/emqx/emqx/issues/6791
CVE ID: CVE-2021-46436 State: PUBLISHED Published: 2022-04-08T10:06:51 Last Updated: 2024-08-04T05:02:11.612Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in ad_manage.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xunyang1/ZZCMS/issues/1
CVE ID: CVE-2021-46437 State: PUBLISHED Published: 2022-04-08T10:12:16 Last Updated: 2024-08-04T05:02:11.627Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in ZZCMS 2021. There is a cross-site scripting (XSS) vulnerability in ad_manage.php. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/xunyang1/ZZCMS/issues/2
CVE ID: CVE-2021-46439 State: REJECTED Published: 2022-03-31T21:45:58 Last Updated: 2022-04-03T22:27:46 Description: No description available.
CVE ID: CVE-2021-46440 State: PUBLISHED Published: 2022-05-03T17:03:51 Last Updated: 2024-08-04T05:02:11.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim's HTTP request, get the victim's cookie, perform a base64 decode on the victim's cookie, and obtain a cleartext password, leading to getting API documentation for further API attacks. Additional Analyst Notes: - CVE Program Container: References: - https://strapi.io/ - https://hub.docker.com/r/strapi/strapi - http://packetstormsecurity.com/files/166915/Strapi-3.6.8-P
https://strapi.io/ - https://hub.docker.com/r/strapi/strapi - http://packetstormsecurity.com/files/166915/Strapi-3.6.8-Password-Disclosure-Insecure-Handling.html - https://github.com/strapi/strapi/pull/12246
CVE ID: CVE-2021-46441 State: PUBLISHED Published: 2022-04-27T10:12:38 Last Updated: 2024-08-04T05:02:11.786Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/tgp-top/D-Link-DIR-825
CVE ID: CVE-2021-46442 State: PUBLISHED Published: 2022-04-27T10:10:37 Last Updated: 2024-08-04T05:10:33.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/tgp-top/D-Link-DIR-825
CVE ID: CVE-2021-46443 State: REJECTED Published: 2022-04-01T10:51:38 Last Updated: 2022-04-03T22:23:08 Description: No description available.
CVE ID: CVE-2021-46444 State: PUBLISHED Published: 2022-01-28T21:29:31 Last Updated: 2024-08-04T05:10:33.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_group_edit&agID. Additional Analyst Notes: - CVE Program Container: References: - https://www.hhg-multistore.com/ - https://github.com/blockomat2100/PoCs/blob/main/hhg_multistore/exploit_hhg_multistore.md
CVE ID: CVE-2021-46445 State: PUBLISHED Published: 2022-01-28T21:29:31 Last Updated: 2024-08-04T05:10:33.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?box_group_id. Additional Analyst Notes: - CVE Program Container: References: - https://www.hhg-multistore.com/ - https://github.com/blockomat2100/PoCs/blob/main/hhg_multistore/exploit_hhg_multistore.md
CVE ID: CVE-2021-46446 State: PUBLISHED Published: 2022-01-28T21:29:33 Last Updated: 2024-08-04T05:10:33.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_access_group_edit&aagID. Additional Analyst Notes: - CVE Program Container: References: - https://www.hhg-multistore.com/ - https://github.com/blockomat2100/PoCs/blob/main/hhg_multistore/exploit_hhg_multistore.md
CVE ID: CVE-2021-46447 State: PUBLISHED Published: 2022-01-28T21:29:34 Last Updated: 2024-08-04T05:10:33.827Z Vendors: n/a Products: n/a Problem Types: n/a Description: A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module. Additional Analyst Notes: - CVE Program Container: References: - https://www.hhg-multistore.com/ - https://github.com/blockomat2100/PoCs/blob/main/hhg_multistore/exploit_hhg_multistore.md
CVE ID: CVE-2021-46448 State: PUBLISHED Published: 2022-01-28T21:29:36 Last Updated: 2024-08-04T05:10:33.906Z Vendors: n/a Products: n/a Problem Types: n/a Description: H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID. Additional Analyst Notes: - CVE Program Container: References: - https://www.hhg-multistore.com/ - https://github.com/blockomat2100/PoCs/blob/main/hhg_multistore/exploit_hhg_multistore.md
CVE ID: CVE-2021-46451 State: PUBLISHED Published: 2022-01-24T19:02:49 Last Updated: 2024-08-04T05:10:33.667Z Vendors: n/a Products: n/a Problem Types: n/a Description: An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the load_file function. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Online-Project-Time-Management
CVE ID: CVE-2021-46452 State: PUBLISHED Published: 2022-02-04T01:33:30 Last Updated: 2024-08-04T05:10:33.677Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout, and tomography_ping_ttl parameters. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_27/27.md -
es: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_27/27.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285
CVE ID: CVE-2021-46453 State: PUBLISHED Published: 2022-02-04T01:33:29 Last Updated: 2024-08-04T05:10:33.660Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings. This vulnerability allows attackers to execute arbitrary commands via the staticroute_list parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_25/25.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285
CVE ID: CVE-2021-46454 State: PUBLISHED Published: 2022-02-04T01:33:28 Last Updated: 2024-08-04T05:10:33.848Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings. This vulnerability allows attackers to execute arbitrary commands via the ApCliKeyStr parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_24/24.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285
CVE ID: CVE-2021-46455 State: PUBLISHED Published: 2022-02-04T01:33:27 Last Updated: 2024-08-04T05:10:33.847Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the station_access_enable parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_22/22.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285
CVE ID: CVE-2021-46456 State: PUBLISHED Published: 2022-02-04T01:33:27 Last Updated: 2024-08-04T05:10:33.903Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allows attackers to execute arbitrary commands via the wl(0).(0)_maclist parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_26/26.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285
CVE ID: CVE-2021-46457 State: PUBLISHED Published: 2022-02-04T01:33:26 Last Updated: 2024-08-04T05:10:33.887Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings. This vulnerability allows attackers to execute arbitrary commands via the samba_name parameter. Additional Analyst Notes: - CVE Program Container: References: - https://www.dlink.com/en/security-bulletin/ - https://github.com/pjqwudi/my_vuln/blob/main/D-link/vuln_23/23.md - https://supportannouncement.us.dlink.com/announcement/publication.aspx?name=SAP10285
CVE ID: CVE-2021-46458 State: PUBLISHED Published: 2022-01-31T15:23:15 Last Updated: 2024-08-04T05:10:33.852Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victor CMS v1.0 was discovered to contain a SQL injection vulnerability in the component admin/posts.php?source=add_post. This vulnerability can be exploited through a crafted POST request via the post_title parameter. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Nguyen-Trung-Kien/CVE - https://github.com/Nguyen-Trung-Kien/CVE/blob/main/CVE-2021-46458/CVE-2021-46458.pdf
CVE ID: CVE-2021-46459 State: PUBLISHED Published: 2022-01-31T18:38:22 Last Updated: 2024-08-04T05:10:35.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilities can be exploited through a crafted POST request via the user_name, user_firstname,user_lastname, or user_email parameters. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/Nguyen-Trung-Kien/CVE - https://github.com/Nguyen-Trung-Kien/CVE/tree/main/CVE-2021-46459
CVE ID: CVE-2021-46461 State: PUBLISHED Published: 2022-02-14T21:47:17 Last Updated: 2024-08-04T05:10:34.924Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/450 - https://github.com/nginx/njs/commit/d457c9545e7e71ebb5c0479eb16b9d33175855e2 - https://security.netapp.com/advisory/ntap-20220303-0007/
CVE ID: CVE-2021-46462 State: PUBLISHED Published: 2022-02-14T21:47:18 Last Updated: 2024-08-04T05:10:35.002Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njs_object_set_prototype in /src/njs_object.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/449 - https://github.com/nginx/njs/commit/39e8fa1b7db1680654527f8fa0e9ee93b334ecba - https://security.netapp.com/advisory/ntap-20220303-0007/
CVE ID: CVE-2021-46463 State: PUBLISHED Published: 2022-02-14T21:47:24 Last Updated: 2024-08-04T05:10:33.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise_perform_then(). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/nginx/njs/issues/447 - https://github.com/nginx/njs/commit/6a40a85ff239497c6458c7dbef18f6a2736fe992 - https://security.netapp.com/advisory/ntap-20220303-0007/
CVE ID: CVE-2021-46474 State: PUBLISHED Published: 2022-01-25T00:23:57 Last Updated: 2024-08-04T05:10:33.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/57
CVE ID: CVE-2021-46475 State: PUBLISHED Published: 2022-01-25T00:24:02 Last Updated: 2024-08-04T05:10:33.918Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/64
CVE ID: CVE-2021-46477 State: PUBLISHED Published: 2022-01-25T00:24:01 Last Updated: 2024-08-04T05:10:35.313Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/63
CVE ID: CVE-2021-46478 State: PUBLISHED Published: 2022-01-25T00:24:03 Last Updated: 2024-08-04T05:10:34.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/60
CVE ID: CVE-2021-46480 State: PUBLISHED Published: 2022-01-25T00:24:06 Last Updated: 2024-08-04T05:10:33.888Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/61
CVE ID: CVE-2021-46481 State: PUBLISHED Published: 2022-01-25T00:24:07 Last Updated: 2024-08-04T05:10:35.008Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/55
CVE ID: CVE-2021-46482 State: PUBLISHED Published: 2022-01-25T00:24:07 Last Updated: 2024-08-04T05:10:34.998Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/66
CVE ID: CVE-2021-46483 State: PUBLISHED Published: 2022-01-25T00:24:09 Last Updated: 2024-08-04T05:10:34.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/62
CVE ID: CVE-2021-46484 State: PUBLISHED Published: 2022-01-27T20:20:59 Last Updated: 2024-08-04T05:10:33.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_IncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/73
CVE ID: CVE-2021-46485 State: PUBLISHED Published: 2022-01-27T20:20:59 Last Updated: 2024-08-04T05:10:34.994Z Vendors: n/a Products: n/a Problem Types: n/a Description: Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_ValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/pcmacdon/jsish/issues/70