Espruino Luki w zabezpieczeniach

Oś czasu

Wersja

1.0	9
1.1	9
1.2	9
1.3	9
1.4	9

Przeciwdziałanie

Official Fix	12
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	8

Wykorzystywanie

High	0
Functional	0
Proof-of-Concept	1
Unproven	0
Not Defined	19

Wektor dostępu

Not Defined	0
Physical	0
Local	10
Adjacent	9
Network	1

Uwierzytelnianie

Not Defined	0
High	0
Low	10
None	10

Interakcja z użytkownikiem

Not Defined	0
Required	10
None	10

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	12
≤7	5
≤8	1
≤9	0
≤10	0

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	13
≤7	4
≤8	1
≤9	0
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	5
≤5	0
≤6	14
≤7	1
≤8	0
≤9	0
≤10	0

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	6
≤7	0
≤8	7
≤9	0
≤10	1

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Sprzedawca

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	12
<2k	3
<5k	5
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Wykorzystaj dzisiaj

<1k	19
<2k	1
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (107): 1.0, 1.1, 1.2, 1.3, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, 1.13, 1.14, 1.15, 1.16, 1.17, 1.18, 1.19, 1.20, 1.21, 1.22, 1.23, 1.24, 1.25, 1.26, 1.27, 1.28, 1.29, 1.30, 1.31, 1.32, 1.33, 1.34, 1.35, 1.36, 1.37, 1.38, 1.39, 1.40, 1.41, 1.42, 1.43, 1.44, 1.45, 1.46, 1.47, 1.48, 1.49, 1.50, 1.51, 1.52, 1.53, 1.54, 1.55, 1.56, 1.57, 1.58, 1.59, 1.60, 1.61, 1.62, 1.63, 1.64, 1.65, 1.66, 1.67, 1.68, 1.69, 1.70, 1.71, 1.72, 1.73, 1.74, 1.75, 1.76, 1.77, 1.78, 1.79, 1.80, 1.81, 1.82, 1.83, 1.84, 1.85, 1.86, 1.87, 1.88, 1.89, 1.90, 1.91, 1.92, 1.93, 1.94, 1.95, 1.96, 1.97, 1.98, 2V00, 2V10.246, 2V11.251, 2v05.41, 2v11, 2v20, 6ea4c0a, 11.251

Opublikowano	Base	Temp	Słaby punkt	0day	Dzisiaj	Wyk	Prz	CTI	CVE
2024-02-07	5.5	5.5	Espruino jsvar.c jsvStringIteratorPrintfCallback information disclosure	$0-$5k	$0-$5k	Not Defined	Not Defined	0.03	CVE-2024-25201
2024-02-07	6.5	6.5	Espruino jsparse.c jspeFactorFunctionCall memory corruption	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2024-25200
2023-04-04	5.5	5.5	Espruino jsvar.c jsvGarbageCollectMarkUsed memory corruption	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-23257
2023-04-04	7.6	7.6	Espruino jswrap_object.c jswrap_function_replacewith memory corruption	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2020-19693
2022-03-05	5.5	5.2	Espruino jsvar.c jsvGetNextSibling memory corruption	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2022-25465
2022-03-05	5.5	5.3	Espruino jsvar.c jsvNewFromString memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2022-25044
2022-01-21	5.5	5.5	Espruino jsutils.c vcbprintf memory corruption	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-46325
2022-01-21	5.5	5.5	Espruino jsvar.c jsvNewFromString memory corruption	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2021-46324
2022-01-21	3.5	3.4	Espruino jsinteractive.c jsiGetDeviceFromClass memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2021-46323
2021-07-13	6.3	6.0	Espruino jsvGetStringChars memory corruption	$0-$5k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2020-22884

10 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 10 results.

◂ PoprzedniPrzeglądKolejny ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!