CVEs published in January 2022
2,262 vulnerabilities, 204 critical, 13 exploited.
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src...7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src...7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c.7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src...7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs...7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux...7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src...7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src...7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src...7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src...7.8 High
- cesanta mjsThere is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_stack_size at mjs/src...5.5 Medium
- cesanta mjsThere is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len' failed at src/mjs_exec.c in...5.5 Medium
- cesanta mjsThere is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjs_mk_string at mjs...7.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_apply at src/mjs_exec...5.5 Medium
- cesanta mjsThere is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.5.5 Medium
- cesanta mjsThere is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc...5.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c.7.8 High
- cesanta mjsThere is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0.5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a stack overflow via Jsi_LogMsg at src/jsiUtils.c.5.5 Medium
- jsishThere is an Assertion 'v->d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0.5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a stack overflow via /usr/lib/x86_64-linux-gnu/libasan.so...5.5 Medium
- jsishThere is an Assertion 'vp != resPtr' failed at jsiEval.c in Jsish v3.5.0.5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via /usr/lib/x86_64-linux-gnu...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via SortSubCmd in src/jsiArray.c....5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ArgTypeCheck in src/jsiFunc...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueCopyMove in src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_wswebsocketObjFree in src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_UserObjDelete in src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_ObjFree in src/jsiObj.c....5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via DeleteTreeValue in src/jsiObj.c....5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via jsi_ValueLookupBase in src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_FunctionInvoke at src/jsiFunc...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_CommandPkgOpts at src/jsiCmds...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a SEGV vulnerability via NumberConstructor at src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_DecrRefCount in src/jsiValue...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a SEGV vulnerability via jsi_ArrayConcatCmd at src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a SEGV vulnerability via jsi_ArraySpliceCmd at src...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a SEGV vulnerability via Jsi_ValueIsNumber at src/jsiValue...5.5 Medium
- jsishJsish v3.5.0 was discovered to contain a heap-use-after-free via Jsi_IncrRefCount in src/jsiValue...5.5 Medium
- simple chatbot application project chatbot applicationA Remote Code Execution (RCE) vulnerability exists in Sourcecodester Simple Chatbot Application 1...9.8 Critical
- simple chatbot application project chatbot applicationAn SQL Injection vulnerability exists in Sourcecodester Simple Chatbot Application 1.0 via the...9.8 Critical
- solanalabs rbpfInteger overflow in solana_rbpf7.5 High
- cskaza cszcmsThere is a front-end sql injection vulnerability in cszcms 1.2.9 via cszcms/controllers/Member...9.8 Critical
- dolphinphpDolphinphp v1.5.0 contains a remote code execution vulnerability in /application/common.php...8.8 High
- zabbixZabbix 4.0 LTS, 4.2, 4.4, and 5.0 LTS is vulnerable to Remote Code Execution (RCE). Any user with...7.2 High
- Show moreLoading…