Browse CVEs

MEDIUM 5.5 CVE-2020-36373 Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Mjs No fix yet Fix from $1,6002021-05-28 MEDIUM 5.5 CVE-2020-36374 Stack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Mjs No fix yet Fix from $1,6002021-05-28 MEDIUM 5.5 CVE-2020-36375 Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file. Mjs No fix yet Fix from $1,6002021-05-28 CRITICAL 9.1 CVE-2021-26528 The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting … Mongoose No fix yet Fix from $2,3002021-02-08 CRITICAL 9.1 CVE-2021-26530 The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is vulnerable to remote OOB write attack via connection… Mongoose No fix yet Fix from $2,3002021-02-08 CRITICAL 9.8 CVE-2019-19307EPSS 42% An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause … Mongoose No fix yet Fix from $2,3002019-11-26 MEDIUM 6.5 CVE-2018-19587 In Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function. Mongoose No fix yet Fix from $1,6002018-11-27 CRITICAL 9.1 CVE-2018-18764 An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffe… Mongoose No fix yet Fix from $2,3002018-10-29 CRITICAL 9.1 CVE-2018-18765 An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffe… Mongoose No fix yet Fix from $2,3002018-10-29 HIGH 7.5 CVE-2018-10945 The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and appli… Mongoose No fix yet Fix from $1,9502018-06-19 CRITICAL 9.8 CVE-2017-2921 An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket… Mongoose No fix yet Fix from $2,3002017-11-07 CRITICAL 9.8 CVE-2017-2922 An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket… Mongoose No fix yet Fix from $2,3002017-11-07 CRITICAL 9.8 CVE-2017-2891 An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CG… Mongoose No fix yet Fix from $2,3002017-11-07 CRITICAL 9.8 CVE-2017-2892 An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT … Mongoose Mitigation only Fix from $2,3002017-11-07 CRITICAL 9.8 CVE-2017-2894EPSS 31% An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT … Mongoose No fix yet Fix from $2,3002017-11-07 HIGH 8.2 CVE-2017-2895 An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT … Mongoose Mitigation only Fix from $1,9502017-11-07 HIGH 7.5 CVE-2017-2893EPSS 25% An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE pack… Mongoose No fix yet Fix from $1,9502017-11-07 HIGH 7.5 CVE-2017-2909 An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause … Mongoose Mitigation only Fix from $1,9502017-11-07