İçeriğe atla
Noroxi

espruino kayıtları

espruino üreticisine ait 19 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 21
  3. 22
  4. 23
  5. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

19 kayıt
  • CVE-2020-22884
    40Planlayın

    Buffer overflow vulnerability in function jsvGetStringChars in Espruino before RELEASE_2V09, allows remote attackers to execute arbitrary co

    KritikCVSS 9,8İstismar yokEPSS %2

    espruino · espruino13 Tem 2021

  • CVE-2020-19693
    39İzleyin

    An issue found in Espruino Espruino 6ea4c0a allows an attacker to execute arbitrrary code via oldFunc parameter of the jswrap_object.c:jswra

    KritikCVSS 9,8İstismar yokEPSS %0

    espruino · espruino4 Nis 2023

  • CVE-2018-11595
    31İzleyin

    Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Escalation of Privileges with a user

    YüksekCVSS 7,8İstismar yokEPSS %1

    espruino · espruino31 May 2018

  • CVE-2022-25044
    31İzleyin

    Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.

    YüksekCVSS 7,8İstismar yokEPSS %0

    espruino · espruino4 Mar 2022

  • CVE-2021-46325
    31İzleyin

    Espruino 2v10.246 was discovered to contain a stack buffer overflow via src/jsutils.c in vcbprintf.

    YüksekCVSS 7,8İstismar yokEPSS %0

    espruino · espruino20 Oca 2022

  • CVE-2021-46324
    31İzleyin

    Espruino 2v11.251 was discovered to contain a stack buffer overflow via src/jsvar.c in jsvNewFromString.

    YüksekCVSS 7,8İstismar yokEPSS %0

    espruino · espruino20 Oca 2022

  • CVE-2022-25465
    31İzleyin

    Espruino 2v11 release was discovered to contain a stack buffer overflow via src/jsvar.c in jsvGetNextSibling.

    YüksekCVSS 7,8İstismar yokEPSS %0

    espruino · espruino4 Mar 2022

  • CVE-2020-23257
    30İzleyin

    Buffer Overflow vulnerability found in Espruino 2v05.41 allows an attacker to cause a denial of service via the function jsvGarbageCollectMa

    YüksekCVSS 7,5İstismar yokEPSS %0

    espruino · espruino4 Nis 2023

  • CVE-2024-25200
    30İzleyin

    Espruino 2v20 (commit fcc9ba4) was discovered to contain a Stack Overflow via the jspeFactorFunctionCall at src/jsparse.c.

    YüksekCVSS 7,5İstismar yokEPSS %0

    espruino · espruino7 Şub 2024

  • CVE-2024-25201
    30İzleyin

    Espruino 2v20 (commit fcc9ba4) was discovered to contain an Out-of-bounds Read via jsvStringIteratorPrintfCallback at src/jsvar.c.

    YüksekCVSS 7,5İstismar yokEPSS %0

    espruino · espruino7 Şub 2024

  • CVE-2018-11598
    28İzleyin

    Espruino before 1.99 allows attackers to cause a denial of service (application crash) and a potential Information Disclosure with user craf

    YüksekCVSS 7,1İstismar yokEPSS %1

    espruino · espruino31 May 2018

  • CVE-2018-11593
    28İzleyin

    Espruino before 1.99 allows attackers to cause a denial of service (application crash) and potential Information Disclosure with a user craf

    YüksekCVSS 7,1İstismar yokEPSS %1

    espruino · espruino31 May 2018

  • CVE-2018-11594
    22İzleyin

    Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow

    OrtaCVSS 5,5İstismar yokEPSS %1

    espruino · espruino31 May 2018

  • CVE-2018-11592
    22İzleyin

    Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via an Out-of-bounds R

    OrtaCVSS 5,5İstismar yokEPSS %1

    espruino · espruino31 May 2018

  • CVE-2018-11591
    22İzleyin

    Espruino before 1.98 allows attackers to cause a denial of service (application crash) with a user crafted input file via a NULL pointer der

    OrtaCVSS 5,5İstismar yokEPSS %1

    espruino · espruino31 May 2018

  • CVE-2018-11590
    22İzleyin

    Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via an integer overflo

    OrtaCVSS 5,5İstismar yokEPSS %1

    espruino · espruino31 May 2018

  • CVE-2018-11596
    22İzleyin

    Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow

    OrtaCVSS 5,5İstismar yokEPSS %0

    espruino · espruino31 May 2018

  • CVE-2018-11597
    22İzleyin

    Espruino before 1.99 allows attackers to cause a denial of service (application crash) with a user crafted input file via a Buffer Overflow

    OrtaCVSS 5,5İstismar yokEPSS %0

    espruino · espruino31 May 2018

  • CVE-2021-46323
    22İzleyin

    Espruino 2v11.251 was discovered to contain a SEGV vulnerability via src/jsinteractive.c in jsiGetDeviceFromClass.

    OrtaCVSS 5,5İstismar yokEPSS %0

    espruino · espruino20 Oca 2022