Priority HIGH 82
A type confusion in jsish 2.0 allows incorrect control flow during execution of the OP_NEXT opcode.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00528 · Published 2025-12-29 · No fix listed CWE-843
Priority HIGH 82
Jsish v3.5.0 (commit 42c694c) was discovered to contain a stack-overflow via the component IterGetKeysCallback at /jsish/src/jsiValue.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00879 · Published 2024-02-07 · No fix listed CWE-787
Priority HIGH 76
Jsish v3.5.0 (commit 42c694c) was discovered to contain a use-after-free via the SplitChar at ./src/jsiUtils.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00686 · Published 2024-02-07 · No fix listed CWE-416
Priority HIGH 72
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the Jsi_Strlen function in the src/jsiChar.c file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00766 · Published 2023-04-04 · No fix listed CWE-476
Priority MEDIUM 50
Jsish v3.5.0 was discovered to contain a heap-buffer-overflow in ./src/jsiUtils.c.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.008 · Published 2024-02-07 · No fix listed CWE-787
Priority MEDIUM 48
Integer overflow vulnerability in function Jsi_ObjSetLength in jsish before 3.0.6, allows remote attackers to execute arbitrary code.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03257 · Published 2021-07-13 · No fix listed CWE-190
Priority MEDIUM 48
Integer overflow vulnerability in function Jsi_ObjArraySizer in jsish before 3.0.8, allows remote attackers to execute arbitrary code.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03257 · Published 2021-07-13 · No fix listed CWE-190
Priority MEDIUM 47
Buffer overflow vulnerability in function NumberToPrecisionCmd in jsish before 3.0.7, allows remote attackers to execute arbitrary code.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02331 · Published 2021-07-13 · No fix listed CWE-120
Priority MEDIUM 46
Jsish 2.4.70 2.047 is affected by: Use After Free.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02145 · Published 2019-07-24 · No fix listed CWE-416
Priority MEDIUM 40
An issue found in Jsish v.3.0.11 and before allows an attacker to cause a denial of service via the StringReplaceCmd function in the src/jsiChar.c file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00766 · Published 2023-04-04 · No fix listed CWE-787
Priority LOW 36
Jsish v3.5.0 was discovered to contain a heap buffer overflow via BooleanConstructor at src/jsiBool.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0084 · Published 2022-01-25 · No fix listed CWE-787
Priority LOW 36
Jsish v3.5.0 was discovered to contain a heap buffer overflow via NumberConstructor at src/jsiNumber.c.
CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.0084 · Published 2022-01-25 · No fix listed CWE-787
Priority LOW 36
Stack overflow vulnerability in function jsi_evalcode_sub in jsish before 3.0.18, allows remote attackers to cause a Denial of Service via a crafted value to the execute parameter.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01572 · Published 2021-07-13 · No fix listed CWE-787
Priority LOW 36
Jsish 2.4.84 2.0484 is affected by: Uncontrolled Resource Consumption.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01321 · Published 2019-07-25 · No fix listed CWE-400
Priority LOW 36
Jsish 2.4.77 2.0477 is affected by: Out-of-bounds Read.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.0139 · Published 2019-07-23 · No fix listed CWE-125
Priority LOW 35
An issue found in Jsish v.3.0.11 allows a remote attacker to cause a denial of service via the Jsi_ValueIsNumber function in ./src/jsiValue.c file.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00999 · Published 2023-04-04 · No fix listed CWE-787
Priority LOW 35
Jsish 2.4.84 2.0484 is affected by: Reachable Assertion.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01109 · Published 2019-07-23 · No fix listed CWE-617
Priority LOW 35
Jsish 2.4.83 2.0483 is affected by: Nullpointer dereference.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01109 · Published 2019-07-23 · No fix listed CWE-476
Priority LOW 35
Jsish 2.4.77 2.0477 is affected by: Use After Free.
CVSS 3.0HIGH 7.5· Network · No auth · No interaction · EPSS 0.01109 · Published 2019-07-23 · No fix listed CWE-416
Priority LOW 31
Jsish version 2.4.65 contains a CWE-476: NULL Pointer Dereference vulnerability in Function jsi_ValueCopyMove from jsiValue.c:240 that can result in Crash due to segmentation fault.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00891 · Published 2018-08-20 · No fix listed CWE-476
Priority LOW 30
jsish version 2.4.70 2.047 contains a CWE-125: Out-of-bounds Read vulnerability in function jsi_ObjArrayLookup (jsiObj.c:274) that can result in Crash due to segmentation fault.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00856 · Published 2018-09-06 · No fix listed CWE-125
Priority LOW 30
jsish version 2.4.70 2.047 contains a Buffer Overflow vulnerability in function _jsi_evalcode from jsiEval.c that can result in Crash due to segmentation fault.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00852 · Published 2018-09-06 · No fix listed CWE-119
Priority LOW 30
jsish version 2.4.67 contains a CWE-476: NULL Pointer Dereference vulnerability in Jsi_LogMsg (jsiUtils.c:196) that can result in Crash due to segmentation fault.
CVSS 3.0MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.00856 · Published 2018-09-06 · No fix listed CWE-476
Priority LOW 26
Jsish v3.5.0 was discovered to contain a stack overflow via Jsi_LogMsg at src/jsiUtils.c.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00607 · Published 2022-01-27 · No fix listed CWE-674
Priority LOW 26
There is an Assertion 'v->d.lval != v' failed at src/jsiValue.c in Jsish v3.5.0.
CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00607 · Published 2022-01-27 · No fix listed CWE-617
Load more
THREATIST.IORead the docs