JerryScript

Every one of the 98 is a mark on the map. Named now: 1 to 26, most at risk first.

1. JerryScript commit 4e58ccf68070671e1fff5cd6673f0c1d5b80b166 is affected by: Buffer Overflow. The impact is: denial of service and possibly arbitrary code execution. The component…CVE-2019-1010176JerryScript · 2.5% likely

   CWE-787

2. The lexer_process_char_literal function in jerry-core/parser/js/js-lexer.c in JerryScript 1.0 does not skip memory allocation for empty strings, which allows remote attackers to c…CVE-2017-9250Jerryscript · 2.5% likely

   CWE-476

3. vm/opcodes.c in JerryScript 2.2.0 allows attackers to hijack the flow of control by controlling a register.CVE-2020-13991Jerryscript · 2.4% likely
4. Buffer Overflow vulnerability in JerryScript version 3.0, allows remote attackers to execute arbitrary code via ecma_stringbuilder_append_raw component at /jerry-core/ecma/base/ec…CVE-2023-36109Jerryscript · 2.4% likely

   CWE-120

5. parser/js/js-scanner.c in JerryScript 2.2.0 mishandles errors during certain out-of-memory conditions, as demonstrated by a scanner_reverse_info_list NULL pointer dereference and…CVE-2020-13649Jerryscript · 2.2% likely

   CWE-476

6. JerryScript 1.0 allows remote attackers to cause a denial of service (jmem_heap_alloc_block_internal heap memory corruption) or possibly execute arbitrary code via a crafted .js f…CVE-2017-14749Jerryscript · 2.1% likely

   CWE-119

7. An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function in lit/lit-char-helpers.c via a RegExp("[\x0"); payl…CVE-2017-18212Jerryscript · 1.8% likely

   CWE-125

8. A buffer overflow in ecma_builtin_typedarray_prototype_filter() in JerryScript version fe3a5c0 allows an attacker to construct a fake object or a fake arraybuffer with unlimited s…CVE-2021-42863Jerryscript · 1.7% likely

   CWE-120

9. An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_hex function via a RegExp("[\\u0") payload, related to re_parse_c…CVE-2018-11419Jerryscript · 1.5% likely

   CWE-125

10. An issue was discovered in JerryScript 1.0. There is a heap-based buffer over-read in the lit_read_code_unit_from_utf8 function via a RegExp("[\\u0020") payload, related to re_par…CVE-2018-11418Jerryscript · 1.5% likely

    CWE-125

11. Buffer Overflwo vulnerability in JerryScript Project jerryscript v.3.0.0 allows a remote attacker to execute arbitrary code via the scanner_is_context_needed component in js-scann…CVE-2023-38961Jerryscript · 1.5% likely

    CWE-787

12. There is a heap-buffer-overflow at re-parser.c in re_parse_char_escape in JerryScript 2.2.0.CVE-2020-23323Jerryscript · 1.3% likely

    CWE-787

13. There is a heap-buffer-overflow at lit-strings.c:431 in lit_read_code_unit_from_utf8 in JerryScript 2.2.0.CVE-2020-23321Jerryscript · 1.3% likely

    CWE-787

14. There is a heap-buffer-overflow at jmem-poolman.c:165 in jmem_pools_collect_empty in JerryScript 2.2.0.CVE-2020-23303Jerryscript · 1.3% likely

    CWE-787

15. An issue in Jerrscript- project Jerryscrip v. 2.3.0 allows a remote attacker to execute arbitrary code via the ecma_builtin_array_prototype_object_slice parameter.CVE-2020-22597Jerryscript · 1.3% likely
16. There is a stack-overflow at ecma-regexp-object.c:535 in ecma_regexp_match in JerryScript 2.2.0.CVE-2020-23306Jerryscript · 1.3% likely

    CWE-787

17. An issue was discovered in ecma/operations/ecma-container-object.c in JerryScript 2.2.0. Operations with key/value pairs did not consider the case where garbage collection is trig…CVE-2020-14163Jerryscript · 1.3% likely

    CWE-125

18. There is a heap-use-after-free at ecma-helpers-string.c:772 in ecma_ref_ecma_string in JerryScript 2.2.0CVE-2020-23302Jerryscript · 1.3% likely

    CWE-416

19. JerryScript 2.2.0 allows attackers to cause a denial of service (assertion failure) because a property key query for a Proxy object returns unintended data.CVE-2020-13622Jerryscript · 1.3% likely

    CWE-617

20. A Heap-based Buffer Overflow vulnerability exists in JerryScript 2.4.0 and prior versions via an out-of-bounds read in parser_parse_for_statement_start in the js-parser-statm.c fi…CVE-2021-43453Jerryscript · 1.3% likely

    CWE-125

21. In JerryScript 2.3.0, there is an out-of-bounds read in main_print_unhandled_exception in the main-utils.c file.CVE-2020-29657Jerryscript · 1.2% likely

    CWE-125

22. Buffer overflow vulnerability in file ecma-builtin-array-prototype.c:909 in function ecma_builtin_array_prototype_object_slice in Jerryscript before commit e1ce7dd7271288be8c0c813…CVE-2021-41751Jerryscript · 1.2% likely

    CWE-120

23. Stack overflow vulnerability in Jerryscript before commit e1ce7dd7271288be8c0c8136eea9107df73a8ce2 on Oct 20, 2021 due to an unbounded recursive call to the new opt() function.CVE-2021-41752Jerryscript · 1.2% likely

    CWE-674

24. An issue was discovered in JerryScript commit a6ab5e9. There is an Use-After-Free in lexer_compare_identifier_to_string in js-lexer.c file.CVE-2021-46170Jerryscript · 1.2% likely

    CWE-416

25. JerryScript Git version 14ff5bf does not sufficiently track and release allocated memory via jerry-core/ecma/operations/ecma-regexp-object.c after RegExp, which causes a memory le…CVE-2021-41959Jerryscript · 1.2% likely

    CWE-401

26. JerryScript 2.2.0 allows attackers to cause a denial of service (stack consumption) via a proxy operation.CVE-2020-13623Jerryscript · 1.2% likely

    CWE-400

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.