Skip to content
OpenAdvisories

Archive

January 2022

Vulnerabilities first published in this month (UTC), newest first.

← December 2021 2022 / January February 2022 →
  1. 110
  2. 22
  3. 3104
  4. 456
  5. 535
  6. 658
  7. 7102
  8. 817
  9. 910
  10. 1048
  11. 11135
  12. 1267
  13. 13158
  14. 14148
  15. 1515
  16. 163
  17. 1737
  18. 1885
  19. 19233
  20. 2072
  21. 2183
  22. 224
  23. 234
  24. 2478
  25. 25114
  26. 2652
  27. 2787
  28. 28167
  29. 297
  30. 307
  31. 3128
All Critical High Medium Low Exploited only Public exploit

2,026 results · Feed

  • Unscored —
    CVE-2022-22891

    Jerryscript 3.0.0 was discovered to contain a SEGV vulnerability via ecma_ref_object_inline in /jerry-core/ecma/base/ec…

    iotjs Ubuntu
  • Unscored —
    CVE-2022-22890

    There is an Assertion 'arguments_type != SCANNER_ARGUMENTS_PRESENT && arguments_type != SCANNER_ARGUMENTS_PRESENT_NO_RE…

    iotjs Ubuntu
  • Unscored —
    CVE-2022-22888

    Jerryscript 3.0.0 was discovered to contain a stack overflow via ecma_op_object_find_own in /ecma/operations/ecma-objec…

    iotjs Ubuntu
  • Unscored —
    CVE-2020-23315

    There is an ASSERTION (pFuncBody->GetYieldRegister() == oldYieldRegister) failed in Js::DebugContext::RundownSourcesAnd…

  • Unscored —
    CVE-2021-46351

    There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/built…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46350

    There is an Assertion 'ecma_is_value_object (value)' failed at jerryscript/jerry-core/ecma/base/ecma-helpers-value.c in…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46349

    There is an Assertion 'type == ECMA_OBJECT_TYPE_GENERAL || type == ECMA_OBJECT_TYPE_PROXY' failed at /jerry-core/ecma/o…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46348

    There is an Assertion 'ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p)' failed at /jerry-core/ecma/base/ecma-literal-storag…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46347

    There is an Assertion 'ecma_object_check_class_name_is_object (obj_p)' failed at /jerry-core/ecma/operations/ecma-objec…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46346

    There is an Assertion 'local_tza == ecma_date_local_time_zone_adjustment (date_value)' failed at /jerry-core/ecma/built…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46344

    There is an Assertion 'flags & PARSER_PATTERN_HAS_REST_ELEMENT' failed at /jerry-core/parser/js/js-parser-expr.c in Jer…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46345

    There is an Assertion 'cesu8_cursor_p == cesu8_end_p' failed at /jerry-core/lit/lit-strings.c in JerryScript 3.0.0.

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46343

    There is an Assertion 'context_p->token.type == LEXER_LITERAL' failed at /jerry-core/parser/js/js-parser-expr.c in Jerr…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46340

    There is an Assertion 'context_p->stack_top_uint8 == SCAN_STACK_TRY_STATEMENT || context_p->stack_top_uint8 == SCAN_STA…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46342

    There is an Assertion 'ecma_is_lexical_environment (obj_p) || !ecma_op_object_is_fast_array (obj_p)' failed at /jerry-c…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46339

    There is an Assertion 'lit_is_valid_cesu8_string (string_p, string_size)' failed at /base/ecma-helpers-string.c(ecma_ne…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46338

    There is an Assertion 'ecma_is_lexical_environment (object_p)' failed at /base/ecma-helpers.c(ecma_get_lex_env_type) in…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46337

    There is an Assertion 'page_p != NULL' failed at /parser/js/js-parser-mem.c(parser_list_get) in JerryScript 3.0.0.

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46334

    Moddable SDK v11.5.0 was discovered to contain a stack buffer overflow via the component __interceptor_strcat.

  • Unscored —
    CVE-2021-46336

    There is an Assertion 'opts & PARSER_CLASS_LITERAL_CTOR_PRESENT' failed at /parser/js/js-parser-expr.c(parser_parse_cla…

    iotjs Ubuntu
  • Unscored —
    CVE-2021-46335

    Moddable SDK v11.5.0 was discovered to contain a NULL pointer dereference in the component fx_Function_prototype_hasIns…

  • Unscored —
    CVE-2021-46333

    Moddable SDK v11.5.0 was discovered to contain an invalid memory access vulnerability via the component __asan_memmove.

  • Unscored —
    CVE-2021-46332

    Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via xs/sources/xsDataView.c in fxUint8Getter.

  • Unscored —
    CVE-2021-46331

    Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsProxy.c in fxProxyGetPrototype.

  • Unscored —
    CVE-2021-46330

    Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsDataView.c in fx_ArrayBuffer_proto…

  • Unscored —
    CVE-2021-46328

    Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __libc_start_main.

  • Unscored —
    CVE-2021-46327

    Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via xs/sources/xsArray.c in fx_Array_prototype_sort.

  • Unscored —
    CVE-2021-46329

    Moddable SDK v11.5.0 was discovered to contain a SEGV vulnerability via the component _fini.

  • Unscored —
    CVE-2021-46326

    Moddable SDK v11.5.0 was discovered to contain a heap-buffer-overflow via the component __asan_memcpy.

  • Unscored —
    CVE-2021-46325

    Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.

  • Unscored —
    CVE-2021-46324

    Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.

  • Unscored —
    CVE-2021-46323

    Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass.

  • Medium 5.9
    CVE-2021-29785

    IBM Security SOAR V42 and V43could allow a remote attacker to obtain sensitive information, caused by the failure to pr…

    IBM Security SOAR
  • Unscored —
    CVE-2021-46061

    An SQL Injection vulnerability exists in Sourcecodester Computer and Mobile Repair Shop Management system (RSMS) 1.0 vi…

  • Unscored —
    CVE-2021-44090

    An SQL Injection vulnerability exists in Sourcecodester Online Reviewer System 1.0 via the password parameter.

  • Unscored —
    CVE-2021-44245

    An SQL Injection vulnerability exists in Courcecodester COVID 19 Testing Management System (CTMS) 1.0 via the (1) usern…

  • Unscored —
    CVE-2021-44244

    An SQL Injection vulnerabiity exists in Sourcecodester Logistic Hub Parcel's Management System 1.0 via the username par…

  • Unscored —
    CVE-2022-23120

    A code injection vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 2…

    Trend Micro Trend Micro Deep Security Agent for Linux Linux
  • Unscored —
    CVE-2022-23119 EPSS 21%

    A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux vers…

    Trend Micro Trend Micro Deep Security Agent for Linux Linux
  • Unscored —
    CVE-2021-44092

    An SQL Injection vulnerability exists in code-projects Pharmacy Management 1.0 via the username parameter in the admini…