sass-lang kayıtları
sass-lang üreticisine ait 28 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %85,7
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-125 Out-of-bounds Read9
- CWE-476 NULL Pointer Dereference6
- CWE-674 Uncontrolled Recursion3
- CWE-787 Out-of-bounds Write3
- CWE-400 Uncontrolled Resource Consumption2
- CWE-416 Use After Free2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
28 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2018-11499İstismar yok | A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveragedsass-lang · libsass · CWE-416 | Kritik9,8 | — | %3,8 | 26 May 2018 |
36İzleyin | CVE-2018-19827İstismar yok | In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial osass-lang · libsass · CWE-416 | Yüksek8,8 | — | %2,0 | 3 Ara 2018 |
36İzleyin | CVE-2018-11694İstismar yok | An issue was discovered in LibSass through 3.5.4.sass-lang · libsass · CWE-476 | Yüksek8,8 | — | %1,6 | 4 Haz 2018 |
35İzleyin | CVE-2018-11695İstismar yok | An issue was discovered in LibSass <3.5.3.sass-lang · libsass · CWE-476 | Yüksek8,8 | — | %1,6 | 4 Haz 2018 |
35İzleyin | CVE-2018-11696İstismar yok | An issue was discovered in LibSass through 3.5.4.sass-lang · libsass · CWE-476 | Yüksek8,8 | — | %1,6 | 4 Haz 2018 |
35İzleyin | CVE-2022-26592İstismar yok | Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.sass-lang · libsass · CWE-787 | Yüksek8,8 | — | %0,9 | 22 Ağu 2023 |
32İzleyin | CVE-2018-11698İstismar yok | An issue was discovered in LibSass through 3.5.4.sass-lang · libsass · CWE-125 | Yüksek8,1 | — | %1,6 | 4 Haz 2018 |
32İzleyin | CVE-2018-11697İstismar yok | An issue was discovered in LibSass through 3.5.4.sass-lang · libsass · CWE-125 | Yüksek8,1 | — | %1,5 | 4 Haz 2018 |
32İzleyin | CVE-2018-11693İstismar yok | An issue was discovered in LibSass through 3.5.4.sass-lang · libsass · CWE-125 | Yüksek8,1 | — | %1,3 | 4 Haz 2018 |
30İzleyin | CVE-2022-43358İstismar yok | Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can sass-lang · libsass · CWE-787 | Yüksek7,5 | — | %1,5 | 22 Ağu 2023 |
30İzleyin | CVE-2022-43357İstismar yok | Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which sass-lang · libsass · CWE-787 | Yüksek7,5 | — | %1,5 | 22 Ağu 2023 |
27İzleyin | CVE-2018-20190İstismar yok | In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denialsass-lang · libsass · CWE-476 | Orta6,5 | — | %2,5 | 17 Ara 2018 |
27İzleyin | CVE-2018-20821İstismar yok | The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Parser::parse_sass-lang · libsass · CWE-674 | Orta6,5 | — | %2,2 | 23 Nis 2019 |
27İzleyin | CVE-2018-19839İstismar yok | In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heapsass-lang · libsass · CWE-125 | Orta6,5 | — | %2,1 | 4 Ara 2018 |
27İzleyin | CVE-2019-6286İstismar yok | In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::pasass-lang · libsass · CWE-125 | Orta6,5 | — | %2,1 | 14 Oca 2019 |
27İzleyin | CVE-2018-20822İstismar yok | LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::sass-lang · libsass · CWE-674 | Orta6,5 | — | %2,1 | 23 Nis 2019 |
27İzleyin | CVE-2019-6284İstismar yok | In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.sass-lang · libsass · CWE-125 | Orta6,5 | — | %2,0 | 14 Oca 2019 |
27İzleyin | CVE-2018-19838İstismar yok | In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resulsass-lang · libsass · CWE-400 | Orta6,5 | — | %1,9 | 4 Ara 2018 |
27İzleyin | CVE-2019-6283İstismar yok | In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.sass-lang · libsass · CWE-125 | Orta6,5 | — | %1,9 | 14 Oca 2019 |
27İzleyin | CVE-2018-19797İstismar yok | In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and astsass-lang · libsass · CWE-476 | Orta6,5 | — | %1,8 | 3 Ara 2018 |
27İzleyin | CVE-2018-19837İstismar yok | In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows attackers to cause a denial-of-service resass-lang · libsass · CWE-400 | Orta6,5 | — | %1,7 | 4 Ara 2018 |
26İzleyin | CVE-2019-18797İstismar yok | LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp.sass-lang · libsass · CWE-674 | Orta6,5 | — | %1,5 | 6 Kas 2019 |
26İzleyin | CVE-2019-18799İstismar yok | LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.sass-lang · libsass · CWE-476 | Orta6,5 | — | %1,2 | 6 Kas 2019 |
26İzleyin | CVE-2018-19826İstismar yok | In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quotsass-lang · libsass · CWE-835 | Orta6,5 | — | %1,1 | 3 Ara 2018 |
26İzleyin | CVE-2018-19218İstismar yok | In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack.sass-lang · libsass · CWE-125 | Orta6,5 | — | %1,1 | 12 Kas 2018 |
- CVE-2018-1149940Planlayın
A use-after-free vulnerability exists in handle_error() in sass_context.cpp in LibSass 3.4.x and 3.5.x through 3.5.4 that could be leveraged
KritikCVSS 9,8İstismar yokEPSS %3sass-lang · libsass26 May 2018
- CVE-2018-1982736İzleyin
In LibSass 3.5.5, a use-after-free vulnerability exists in the SharedPtr class in SharedPtr.cpp (or SharedPtr.hpp) that may cause a denial o
YüksekCVSS 8,8İstismar yokEPSS %2sass-lang · libsass3 Ara 2018
- CVE-2018-1169436İzleyin
An issue was discovered in LibSass through 3.5.4.
YüksekCVSS 8,8İstismar yokEPSS %1sass-lang · libsass4 Haz 2018
- CVE-2018-1169535İzleyin
An issue was discovered in LibSass <3.5.3.
YüksekCVSS 8,8İstismar yokEPSS %1sass-lang · libsass4 Haz 2018
- CVE-2018-1169635İzleyin
An issue was discovered in LibSass through 3.5.4.
YüksekCVSS 8,8İstismar yokEPSS %1sass-lang · libsass4 Haz 2018
- CVE-2022-2659235İzleyin
Stack Overflow vulnerability in libsass 3.6.5 via the CompoundSelector::has_real_parent_ref function.
YüksekCVSS 8,8İstismar yokEPSS %0sass-lang · libsass22 Ağu 2023
- CVE-2018-1169832İzleyin
An issue was discovered in LibSass through 3.5.4.
YüksekCVSS 8,1İstismar yokEPSS %1sass-lang · libsass4 Haz 2018
- CVE-2018-1169732İzleyin
An issue was discovered in LibSass through 3.5.4.
YüksekCVSS 8,1İstismar yokEPSS %1sass-lang · libsass4 Haz 2018
- CVE-2018-1169332İzleyin
An issue was discovered in LibSass through 3.5.4.
YüksekCVSS 8,1İstismar yokEPSS %1sass-lang · libsass4 Haz 2018
- CVE-2022-4335830İzleyin
Stack overflow vulnerability in ast_selectors.cpp: in function Sass::ComplexSelector::has_placeholder in libsass:3.6.5-8-g210218, which can
YüksekCVSS 7,5İstismar yokEPSS %1sass-lang · libsass22 Ağu 2023
- CVE-2022-4335730İzleyin
Stack overflow vulnerability in ast_selectors.cpp in function Sass::CompoundSelector::has_real_parent_ref in libsass:3.6.5-8-g210218, which
YüksekCVSS 7,5İstismar yokEPSS %1sass-lang · libsass22 Ağu 2023
- CVE-2018-2019027İzleyin
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Eval::operator()(Sass::Supports_Operator*) in eval.cpp may cause a Denial
OrtaCVSS 6,5İstismar yokEPSS %2sass-lang · libsass17 Ara 2018
- CVE-2018-2082127İzleyin
The parsing component in LibSass through 3.5.5 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Parser::parse_
OrtaCVSS 6,5İstismar yokEPSS %2sass-lang · libsass23 Nis 2019
- CVE-2018-1983927İzleyin
In LibSass prior to 3.5.5, the function handle_error in sass_context.cpp allows attackers to cause a denial-of-service resulting from a heap
OrtaCVSS 6,5İstismar yokEPSS %2sass-lang · libsass4 Ara 2018
- CVE-2019-628627İzleyin
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::skip_over_scopes in prelexer.hpp when called from Sass::Parser::pa
OrtaCVSS 6,5İstismar yokEPSS %2sass-lang · libsass14 Oca 2019
- CVE-2018-2082227İzleyin
LibSass 3.5.4 allows attackers to cause a denial-of-service (uncontrolled recursion in Sass::Complex_Selector::perform in ast.hpp and Sass::
OrtaCVSS 6,5İstismar yokEPSS %2sass-lang · libsass23 Nis 2019
- CVE-2019-628427İzleyin
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::alternatives in prelexer.hpp.
OrtaCVSS 6,5İstismar yokEPSS %2sass-lang · libsass14 Oca 2019
- CVE-2018-1983827İzleyin
In LibSass prior to 3.5.5, functions inside ast.cpp for IMPLEMENT_AST_OPERATORS expansion allow attackers to cause a denial-of-service resul
OrtaCVSS 6,5İstismar yokEPSS %1sass-lang · libsass4 Ara 2018
- CVE-2019-628327İzleyin
In LibSass 3.5.5, a heap-based buffer over-read exists in Sass::Prelexer::parenthese_scope in prelexer.hpp.
OrtaCVSS 6,5İstismar yokEPSS %1sass-lang · libsass14 Oca 2019
- CVE-2018-1979727İzleyin
In LibSass 3.5.5, a NULL Pointer Dereference in the function Sass::Selector_List::populate_extends in SharedPtr.hpp (used by ast.cpp and ast
OrtaCVSS 6,5İstismar yokEPSS %1sass-lang · libsass3 Ara 2018
- CVE-2018-1983727İzleyin
In LibSass prior to 3.5.5, Sass::Eval::operator()(Sass::Binary_Expression*) inside eval.cpp allows attackers to cause a denial-of-service re
OrtaCVSS 6,5İstismar yokEPSS %1sass-lang · libsass4 Ara 2018
- CVE-2019-1879726İzleyin
LibSass 3.6.1 has uncontrolled recursion in Sass::Eval::operator()(Sass::Binary_Expression*) in eval.cpp.
OrtaCVSS 6,5İstismar yokEPSS %1sass-lang · libsass6 Kas 2019
- CVE-2019-1879926İzleyin
LibSass before 3.6.3 allows a NULL pointer dereference in Sass::Parser::parseCompoundSelector in parser_selectors.cpp.
OrtaCVSS 6,5İstismar yokEPSS %1sass-lang · libsass6 Kas 2019
- CVE-2018-1982626İzleyin
In inspect.cpp in LibSass 3.5.5, a high memory footprint caused by an endless loop (containing a Sass::Inspect::operator()(Sass::String_Quot
OrtaCVSS 6,5İstismar yokEPSS %1sass-lang · libsass3 Ara 2018
- CVE-2018-1921826İzleyin
In LibSass 3.5-stable, there is an illegal address access at Sass::Parser::parse_css_variable_value_token that will lead to a DoS attack.
OrtaCVSS 6,5İstismar yokEPSS %1sass-lang · libsass12 Kas 2018