Browse / shopify-scripts

shopify-scripts

See its reports on the map

What gets reported to shopify-scripts

• Denial of Service83
• Memory Corruption69
• Code Execution4
• Misconfiguration3
• Other weaknesses1
• Information Disclosure1

Most upvoted reports

AllValidInformativeN/ADuplicate

1. DoS: type confusion in mrb_no_method_errorUncontrolled Resource Consumption · critical
   60 votes
2. Type confusion in mrb_exc_set leading to memory corruptionUncontrolled Resource Consumption · critical
   40 votes
3. Crash in mrb_ary_pushNULL Pointer Dereference
   $80037 votes
4. Type confusion in wrap_decimal leading to memory corruptionCode Injection · critical
   35 votes
5. Buffer overflow in yywarning_sClassic Buffer Overflow
   $1,00033 votes
6. Use after free vulnerability in mruby Array#to_h causing DOS possible RCECode Injection · critical
   29 votes
7. Invalid handling of zero-length heredoc identifiers leads to infinite loop in the sandboxUncontrolled Resource Consumption · high
   $10,00023 votes
8. TOCTTOU bug in mrb_str_setbyte leading the memory corruptionCode Injection · critical
   23 votes
9. Crash: Overwriting NoMethodError with a builtin class crashes/corrupts memoryMemory Corruption - Generic · high
   $10,00020 votes
10. Null pointer dereference due to TOCTTOU bug in mrb_time_initializeUncontrolled Resource Consumption · high
    15 votes
11. Segmentation fault when a Ruby method is invoked by a C method via Object#sendUncontrolled Resource Consumption · high
    $8,00014 votes
12. Null target_class DoSUncontrolled Resource Consumption · high
    $8,00014 votes
13. Segfault and/or potential unwanted (byte)code execution with "break" and "||=" inside a loopUncontrolled Resource Consumption · high
    $10,00014 votes
14. Struct type confusion RCECode Injection · critical
    $18,00014 votes
15. SIGABRT - mrb_default_allocf Memory Corruption - Generic · low
    13 votes
16. Buffer overflow in mrb_time_asctimeUncontrolled Resource Consumption · high
    $10,00013 votes
17. Exception cause SIGABRTUncontrolled Resource Consumption · high
    13 votes
18. Heap buffer oveflow with many argumentsMemory Corruption - Generic
    $80012 votes
19. Clearing , Shifting and Pop Value from Frozen Array Violation of Secure Design Principles
    12 votes
20. Deleting Key-value pair from Frozen HASH or Clearing a Frozen HASHViolation of Secure Design Principles
    12 votes
21. Certain inputs cause tight C-level recursion leading to process stack overflowMemory Corruption - Generic · high
    $10,00012 votes
22. Segmentation fault on program counterMemory Corruption - Generic · low
    10 votes
23. Crash: Initialize Decimal with itself triggers an assertionUncontrolled Resource Consumption · high
    $10,00010 votes
24. Broken handling of maximum number of method call arguments leads to segfaultUncontrolled Resource Consumption · high
    $10,00010 votes
25. NULL pointer dereference when parsing ternary operatorsUncontrolled Resource Consumption · high
    10 votes
26. Memory disclosure in mruby String#lines methodMemory Corruption - Generic · high
    10 votes
27. NULL pointer dereference in `mrb_check_frozen`NULL Pointer Dereference
    $1,0009 votes
28. Null pointer derefence due to bug in codegen with negation without using valueUncontrolled Resource Consumption · high
    $10,0009 votes
29. Denial of service due to invalid memory access in mrb_ary_concatUncontrolled Resource Consumption · high
    $8,0009 votes
30. SIGSEGV when invalid argument on remove_methodUncontrolled Resource Consumption · high
    9 votes
31. Range#initialize_copy null pointer dereferenceUncontrolled Resource Consumption · high
    $10,0009 votes
32. Heap Buffer Overflow in mrb_hash_keysUncontrolled Resource Consumption
    $8008 votes
33. SIGSEGV - mrb_obj_extend - line:413Uncontrolled Resource Consumption
    8 votes
34. kh_get_n2s() stack overrunMemory Corruption - Generic · low
    8 votes
35. Incorrect code generation when result of NODE_NEGATE is not usedUncontrolled Resource Consumption · low
    $1,0008 votes
36. Read after free in mrb_vm_exec with OP_ARYCAT reading R(B)Memory Corruption - Generic
    $1,0008 votes
37. Denial of Service in mruby due to null pointer dereferenceUncontrolled Resource Consumption · high
    $8,0008 votes
38. Invalid read in `str_replace_partial`Out-of-bounds Read
    $1,0007 votes
39. Null pointer dereference in ary_concat NULL Pointer Dereference · low
    $8007 votes
40. SIGABRT - mirb and mrubyMemory Corruption - Generic
    7 votes
41. Use-after-free leading to an invalid pointer dereferenceUncontrolled Resource Consumption · low
    $8007 votes
42. SIGSEGV - mark_context_stackMemory Corruption - Generic
    7 votes
43. Use After Free in str_replaceMemory Corruption - Generic
    $8007 votes
44. Memory disclosure in timegmMemory Corruption - Generic · low
    $1,0007 votes
45. Range constructor type confusion DoSUncontrolled Resource Consumption · high
    $10,0007 votes
46. Undefined method_missing null pointer dereferenceUncontrolled Resource Consumption · high
    $8,0007 votes
47. heap-buffer-overflow in OP_R_BREAKHeap Overflow
    $8006 votes
48. SIGABRT - in freeMemory Corruption - Generic
    6 votes
49. SIGABRT in mrb_debug_info_append_fileMemory Corruption - Generic
    6 votes
50. SIGSEGV in mrb_vm_execNULL Pointer Dereference
    6 votes
51. SIGSEGV - mrb_obj_valueUncontrolled Resource Consumption · medium
    6 votes
52. Memory corrouption in mrb_gc_markMemory Corruption - Generic · high
    $1006 votes
53. SIGSEGV - mrb_vm_exec - line:1681Uncontrolled Resource Consumption
    6 votes
54. Double free of filename after codegen errorMemory Corruption - Generic
    $2006 votes
55. attempting double-free using the mruby compiler `mrbc`Memory Corruption - Generic · high
    6 votes
56. mrb_str_modify try to write to memory not marked for writingUncontrolled Resource Consumption
    6 votes
57. Invalid memory write caused by incorrect upper bound in array_copyUncontrolled Resource Consumption · low
    $1,0006 votes
58. SEGV on ary_concatMemory Corruption - Generic
    $8005 votes
59. Invalid read leading to a segfaultOut-of-bounds Read · low
    $8005 votes
60. SIGSEGV in mrb_classNULL Pointer Dereference
    5 votes
61. SIGABRT - mirb - Double FreeDouble Free
    5 votes
62. Null pointer dereferences in ary_concatUncontrolled Resource Consumption
    $8005 votes
63. SIGSEGV in str_buf_catMemory Corruption - Generic
    5 votes
64. Null pointer dereferences from mrb_vm_execUncontrolled Resource Consumption
    $8005 votes
65. mrb_vm_exec - null ptr dereferenceUncontrolled Resource Consumption · medium
    5 votes
66. SIGABRT - method_missing - mark_context_stackMemory Corruption - Generic
    5 votes
67. Null pointer dereference in mrb_random_initializeUncontrolled Resource Consumption
    $1005 votes
68. SIGSEGV - vm.c - line:1214Uncontrolled Resource Consumption
    5 votes
69. Heap Buffer overflow in mrb_funcall_with_blockUncontrolled Resource Consumption · low
    $8005 votes
70. SIGSEGV - mrb_vm_exec - vm.c in line:1272Uncontrolled Resource Consumption · low
    5 votes
71. Heap overflow due to off-by-one when expanding stackMemory Corruption - Generic
    $8005 votes
72. Heap use-after-free during range creationMemory Corruption - Generic · low
    $2005 votes
73. SIGSEGV Null Pointer mrb_str_concat()Uncontrolled Resource Consumption · low
    5 votes
74. Segfault when passing invalid values to `values_at`Uncontrolled Resource Consumption · low
    $1,0005 votes
75. Null pointer dereference regression in parse.yUncontrolled Resource Consumption · low
    $1,0005 votes
76. SIGSEGV on mruby's mark_tbl() (Invalid memory access)Memory Corruption - Generic · high
    5 votes
77. SIGSEGV on mruby mrb_str_modify() (Invalid memory access)Uncontrolled Resource Consumption · high
    5 votes
78. SIGSEV on mrb_ary_spliceUncontrolled Resource Consumption · high
    5 votes
79. ruby DoS https://www.mruby.scienceUncontrolled Resource Consumption · high
    $8,0005 votes
80. mruby heredoc notationUncontrolled Resource Consumption
    4 votes
81. heap-use-after-free in OP_RESCUEUse After Free
    $8004 votes
82. SIGSEGV in mrb_vm_execNULL Pointer Dereference
    4 votes
83. SIGSEGV in mrb_str_inumNULL Pointer Dereference
    4 votes
84. heap use-after-free in mrb_vm_exec()Memory Corruption - Generic
    4 votes
85. Null pointer dereferences in mrb_get_argsUncontrolled Resource Consumption
    $8004 votes
86. SIGABRT in only mirbMemory Corruption - Generic
    4 votes
87. SIGSEGV - mrb_yield_with_classViolation of Secure Design Principles · medium
    4 votes
88. Heap Buffer Overflow while processing OP_SENDUncontrolled Resource Consumption
    $8004 votes
89. Interger overflow in str_substr leading to read/write out of bound memoryUncontrolled Resource Consumption · high
    $1004 votes
90. A crash when an exception is caught in a caller and the receiver returned from `ensure`Uncontrolled Resource Consumption
    4 votes
91. SIGSEGV - mrb_vm_exec - line:1312Uncontrolled Resource Consumption
    4 votes
92. Recursion causing uninitialized memory reads leading to a segfaultMemory Corruption - Generic · low
    $2,0004 votes
93. Aborted - proc.c - line:143Uncontrolled Resource Consumption
    4 votes
94. SIGABRT - mrb_realloc_simple - gc.c - line:201Memory Corruption - Generic
    4 votes
95. Null pointer dereference in mrb_str_modifyUncontrolled Resource Consumption · low
    4 votes
96. SIGSEGV in mrb_vm_execMemory Corruption - Generic
    4 votes
97. SIGSEGV - kh_resize_iv - Null DerefUncontrolled Resource Consumption · low
    4 votes
98. heap-buffer-overflow on mrubyMemory Corruption - Generic
    $1004 votes
99. Heap Overflow in mrb_arb_spliceMemory Corruption - Generic · low
    $8004 votes
100. mrb_vformat() heap overflow could lead to code executionMemory Corruption - Generic
     4 votes