20 January 2022

72 results · Feed

• Critical 9.8
  CVE-2022-22930 EPSS 24%

  RCE in Mingsoft MCMS

  A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload.

  net.mingsoft:ms-mcms Maven
  Jan 20, 2022
• Critical 9.8
  CVE-2022-23315

  Arbitrary file upload in Mingsoft MCMS

  MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do.

  net.mingsoft:ms-mcms Maven
  Jan 20, 2022
• Unscored —
  CVE-2022-23314

  MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do.

  Jan 20, 2022
• Critical 9.8
  CVE-2022-22929

  Arbitrary File Upload in Mingsoft MCMS

  MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file.

  net.mingsoft:ms-mcms Maven
  Jan 20, 2022
• Unscored —
  CVE-2022-22928

  MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary c…

  Jan 20, 2022
• Unscored —
  CVE-2022-22895

  Jerryscript 3.0.0 was discovered to contain a heap-buffer-overflow via ecma_utf8_string_to_number_by_radix in /jerry-co…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2022-22894

  Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_lcache_lookup in /jerry-core/ecma/base/ecma-lcach…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2022-22893

  Jerryscript 3.0.0 was discovered to contain a stack overflow via vm_loop.lto_priv.304 in /jerry-core/vm/vm.c.

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2022-22892

  There is an Assertion 'ecma_is_value_undefined (value) || ecma_is_value_null (value) || ecma_is_value_boolean (value) |…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2022-22891

  Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in /jerry-core/ecma/base/ec…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2022-22890

  There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_RE…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2022-22888

  Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objec…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2020-23315

  There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAnd…

  Jan 20, 2022
• Unscored —
  CVE-2021-46351

  There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/built…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46350

  There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46349

  There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed at /jerry-core/ecma/o…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46348

  There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma/base/ecma-literal-storag…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46347

  There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma/operations/ecma-objec…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46346

  There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/built…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46344

  There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in Jer…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46345

  There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46343

  There is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in Jerr…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46340

  There is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p->stack_top_uint8 == SCAN_STA…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46342

  There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at /jerry-c…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46339

  There is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma-helpers-string.c(ecma_ne…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46338

  There is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c(ecma_get_lex_env_type) in…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46337

  There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46334

  Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.

  Jan 20, 2022
• Unscored —
  CVE-2021-46336

  There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_cla…

  iotjs Ubuntu
  Jan 20, 2022
• Unscored —
  CVE-2021-46335

  Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasIns…

  Jan 20, 2022
• Unscored —
  CVE-2021-46333

  Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.

  Jan 20, 2022
• Unscored —
  CVE-2021-46332

  Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.

  Jan 20, 2022
• Unscored —
  CVE-2021-46331

  Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.

  Jan 20, 2022
• Unscored —
  CVE-2021-46330

  Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_proto…

  Jan 20, 2022
• Unscored —
  CVE-2021-46328

  Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.

  Jan 20, 2022
• Unscored —
  CVE-2021-46327

  Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.

  Jan 20, 2022
• Unscored —
  CVE-2021-46329

  Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.

  Jan 20, 2022
• Unscored —
  CVE-2021-46326

  Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.

  Jan 20, 2022
• Unscored —
  CVE-2021-46325

  Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.

  Jan 20, 2022
• Unscored —
  CVE-2021-46324

  Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.

  Jan 20, 2022