rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-46385 
https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.FormDataAction#queryData. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-26T18:35:37.000Z
CVE-2021-46386 
File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-26T00:00:00.000Z
CVE-2021-46387 
ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard hijacking and session hijacking.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-01T14:04:41.000Z
CVE-2021-46389 
IIPImage High Resolution Streaming Image Server prior to commit 882925b295a80ec992063deffc2a3b0d803c3195 is affected by an integer overflow in iipsrv.fcgi through malformed HTTP query parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-07T13:33:53.000Z
CVE-2021-46390 
An access control issue in the authentication module of Lexar_F35 v1.0.34 allows attackers to access sensitive data and cause a Denial of Service (DoS). An attacker without access to securely protected data on a secure USB flash drive can bypass user authentication without having any information related to the password of the registered user. The secure USB flash drive transmits the password entered by the user to the authentication module in the drive after the user registers a password, and then the input password is compared with the registered password stored in the authentication module. Subsequently, the module returns the comparison result for the authentication decision. Therefore, an attacker can bypass password authentication by analyzing the functions that return the password verification or comparison results and manipulate the authentication result values. Accordingly, even if attackers enter an incorrect password, they can be authenticated as a legitimate user and can therefore exploit functions of the secure USB flash drive by manipulating the authentication result values.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-21T19:59:17.000Z
CVE-2021-46393 
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v10 variable is directly retrieved from the http request parameter startIp. Then v10 will be splice to stack by function sscanf without any security check,which causes stack overflow. By POSTing the page /goform/SetPptpServerCfg with proper startIp, the attacker can easily perform remote code execution with carefully crafted overflow data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T13:00:17.000Z
CVE-2021-46394 
There is a stack buffer overflow vulnerability in the formSetPPTPServer function of Tenda-AX3 router V16.03.12.10_CN. The v13 variable is directly retrieved from the http request parameter startIp. Then v13 will be splice to stack by function sscanf without any security check, which causes stack overflow. By POSTing the page /goform/SetPptpServerCfg with proper startIp, the attacker can easily perform remote code execution with carefully crafted overflow data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-04T13:05:00.000Z
CVE-2021-46398 
A Cross-Site Request Forgery vulnerability exists in Filebrowser < 2.18.0 that allows attackers to create a backdoor user with admin privilege and get access to the filesystem via a malicious HTML webpage that is sent to the victim. An admin can run commands using the FileBrowser and hence it leads to RCE.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T15:05:05.000Z
CVE-2021-46408 
Tenda AX12 v22.03.01.21 was discovered to contain a stack buffer overflow in the function sub_422CE4. This vulnerability allows attackers to cause a Denial of Service (DoS) via the strcpy parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-09T18:30:35.000Z
CVE-2021-46416 
Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-07T10:45:55.000Z
CVE-2021-46417 
Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-07T10:55:09.000Z
CVE-2021-46418 
An unauthorized file creation vulnerability in Telesquare TLR-2855KS6 via PUT method can allow creation of CGI scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-07T11:18:31.000Z
CVE-2021-46419 
An unauthorized file deletion vulnerability in Telesquare TLR-2855KS6 via DELETE method can allow deletion of system files and scripts.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-07T11:28:56.000Z
CVE-2021-46420 
Franklin Fueling Systems FFS TS-550 evo 2.23.4.8936 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T10:37:04.000Z
CVE-2021-46421 
Franklin Fueling Systems FFS T5 Series 1.8.7.7299 is affected by an unauthenticated directory traversal vulnerability, which allows an attacker to obtain sensitive information.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T10:45:50.000Z
CVE-2021-46422 
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T11:04:00.000Z
CVE-2021-46423 
Telesquare TLR-2005KSH 1.0.0 is affected by an unauthenticated file download vulnerability that allows a remote attacker to download a full configuration file.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T11:23:02.000Z
CVE-2021-46424 
Telesquare TLR-2005KSH 1.0.0 is affected by an arbitrary file deletion vulnerability that allows a remote attacker to delete any file, even system internal files, via a DELETE request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T11:34:51.000Z
CVE-2021-46426 
phpIPAM 1.4.4 allows Reflected XSS and CSRF via app/admin/subnets/find_free_section_subnets.php of the subnets functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-25T15:54:12.000Z
CVE-2021-46427 
An SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the message parameter in Master.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T18:32:35.000Z
CVE-2021-46428 
A Remote Code Execution (RCE) vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 ( and previous versions via the bot_avatar parameter in SystemSettings.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T18:39:04.000Z
CVE-2021-46433 
In fenom 2.12.1 and before, there is a way in fenom/src/Fenom/Template.php function getTemplateCode()to bypass sandbox to execute arbitrary PHP code when disable_native_funcs is true.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T10:51:16.000Z
CVE-2021-46434 
EMQ X Dashboard V3.0.0 is affected by username enumeration in the "/api /v3/auth" interface. When a user login, the application returns different results depending on whether the account is correct, that allowed an attacker to determine if a given username was valid
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-03-28T11:10:15.000Z
CVE-2021-46436 
An issue was discovered in ZZCMS 2021. There is a SQL injection vulnerability in ad_manage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T10:06:51.000Z
CVE-2021-46437 
An issue was discovered in ZZCMS 2021. There is a cross-site scripting (XSS) vulnerability in ad_manage.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-08T10:12:16.000Z
CVE-2021-46440 
Storing passwords in a recoverable format in the DOCUMENTATION plugin component of Strapi before 3.6.9 and 4.x before 4.1.5 allows an attacker to access a victim's HTTP request, get the victim's cookie, perform a base64 decode on the victim's cookie, and obtain a cleartext password, leading to getting API documentation for further API attacks.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-05-03T17:03:51.000Z
CVE-2021-46441 
In the "webupg" binary of D-Link DIR-825 G1, because of the lack of parameter verification, attackers can use "cmd" parameters to execute arbitrary system commands after obtaining authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T10:12:38.000Z
CVE-2021-46442 
In the "webupg" binary of D-Link DIR-825 G1, attackers can bypass authentication through parameters "autoupgrade.asp", and perform functions such as downloading configuration files and updating firmware without authorization.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-04-27T10:10:37.000Z
CVE-2021-46444 
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_group_edit&agID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T21:29:31.000Z
CVE-2021-46445 
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/categories.php?box_group_id.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T21:29:31.000Z
CVE-2021-46446 
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/admin.php?module=admin_access_group_edit&aagID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T21:29:33.000Z
CVE-2021-46447 
A cross-site scripting (XSS) vulnerability in H.H.G Multistore v5.1.0 and below allows attackers to execute arbitrary web scripts or HTML via a crafted payload inserted into the State parameter under the Address Book module.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T21:29:34.000Z
CVE-2021-46448 
H.H.G Multistore v5.1.0 and below was discovered to contain a SQL injection vulnerability via /admin/customers.php?page=1&cID.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-28T21:29:36.000Z
CVE-2021-46451 
An SQL Injection vulnerabilty exists in Sourcecodester Online Project Time Management System 1.0 via the pid parameter in the load_file function.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-24T19:02:49.000Z
CVE-2021-46452 
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetNetworkTomographySettings. This vulnerability allows attackers to execute arbitrary commands via the tomography_ping_address, tomography_ping_number, tomography_ping_size, tomography_ping_timeout, and tomography_ping_ttl parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:30.000Z
CVE-2021-46453 
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStaticRouteSettings. This vulnerability allows attackers to execute arbitrary commands via the staticroute_list parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:29.000Z
CVE-2021-46454 
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanApcliSettings. This vulnerability allows attackers to execute arbitrary commands via the ApCliKeyStr parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:28.000Z
CVE-2021-46455 
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetStationSettings. This vulnerability allows attackers to execute arbitrary commands via the station_access_enable parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:27.000Z
CVE-2021-46456 
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function SetWLanACLSettings. This vulnerability allows attackers to execute arbitrary commands via the wl(0).(0)_maclist parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:27.000Z
CVE-2021-46457 
D-Link device D-Link DIR-823-Pro v1.0.2 was discovered to contain a command injection vulnerability in the function ChgSambaUserSettings. This vulnerability allows attackers to execute arbitrary commands via the samba_name parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-04T01:33:26.000Z
CVE-2021-46458 
Victor CMS v1.0 was discovered to contain a SQL injection vulnerability in the component admin/posts.php?source=add_post. This vulnerability can be exploited through a crafted POST request via the post_title parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-31T15:23:15.000Z
CVE-2021-46459 
Victor CMS v1.0 was discovered to contain multiple SQL injection vulnerabilities in the component admin/users.php?source=add_user. These vulnerabilities can be exploited through a crafted POST request via the user_name, user_firstname,user_lastname, or user_email parameters.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-31T18:38:22.000Z
CVE-2021-46461 
njs through 0.7.0, used in NGINX, was discovered to contain an out-of-bounds array access via njs_vmcode_typeof in /src/njs_vmcode.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T21:47:17.000Z
CVE-2021-46462 
njs through 0.7.1, used in NGINX, was discovered to contain a segmentation violation via njs_object_set_prototype in /src/njs_object.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T21:47:18.000Z
CVE-2021-46463 
njs through 0.7.1, used in NGINX, was discovered to contain a control flow hijack caused by a Type Confusion vulnerability in njs_promise_perform_then().
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-02-14T21:47:24.000Z
CVE-2021-46474 
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiEvalCodeSub in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-25T00:23:57.000Z
CVE-2021-46475 
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsi_ArraySliceCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-25T00:24:02.000Z
CVE-2021-46477 
Jsish v3.5.0 was discovered to contain a heap buffer overflow via RegExp_constructor in src/jsiRegexp.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-25T00:24:01.000Z
CVE-2021-46478 
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiClearStack in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-25T00:24:03.000Z
CVE-2021-46480 
Jsish v3.5.0 was discovered to contain a heap buffer overflow via jsiValueObjDelete in src/jsiEval.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-25T00:24:06.000Z
CVE-2021-46481 
Jsish v3.5.0 was discovered to contain a memory leak via linenoise at src/linenoise.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-25T00:24:07.000Z
CVE-2021-46482 
Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-25T00:24:07.000Z
CVE-2021-46483 
Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-25T00:24:09.000Z
CVE-2021-46484 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_IncrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:20:59.000Z
CVE-2021-46485 
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_ValueIsNumber at src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:20:59.000Z
CVE-2021-46486 
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsi_ArraySpliceCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:00.000Z
CVE-2021-46487 
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x18e506. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:01.000Z
CVE-2021-46488 
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via jsi_ArrayConcatCmd at src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:01.000Z
CVE-2021-46489 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_DecrRefCount in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:03.000Z
CVE-2021-46490 
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src/jsiNumber.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:04.000Z
CVE-2021-46491 
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_CommandPkgOpts at src/jsiCmds.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:04.000Z
CVE-2021-46492 
Jsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_FunctionInvoke at src/jsiFunc.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:05.000Z
CVE-2021-46494 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueLookupBase in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:08.000Z
CVE-2021-46495 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:08.000Z
CVE-2021-46496 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_ObjFree in src/jsiObj.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:09.000Z
CVE-2021-46497 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_UserObjDelete in src/jsiUserObj.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:10.000Z
CVE-2021-46498 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_wswebsocketObjFree in src/jsiWebSocket.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:11.000Z
CVE-2021-46499 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueCopyMove in src/jsiValue.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:12.000Z
CVE-2021-46500 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ArgTypeCheck in src/jsiFunc.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:12.000Z
CVE-2021-46501 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:13.000Z
CVE-2021-46502 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5166d. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:14.000Z
CVE-2021-46503 
Jsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x79732. This vulnerability can lead to a Denial of Service (DoS).
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:15.000Z
CVE-2021-46504 
There is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:15.000Z
CVE-2021-46505 
Jsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x5b1e5.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:16.000Z
CVE-2021-46506 
There is an Assertion 'v->d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2022-01-27T20:21:17.000Z