Vulnerability index

Browse CVEs

130 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mjs MEDIUM 5.5
CVE-2021-46516

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_stack_size at mjs/src/mjs_core.c. This vulnerability can lead to a Denial …

Patch available
Fix from $1,600 2022-01-27
Mjs MEDIUM 5.5
CVE-2021-46517

There is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.

Patch available
Fix from $1,600 2022-01-27
Mjs MEDIUM 5.5
CVE-2020-18392

Stack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36366

Stack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36367

Stack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36368

Stack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36369

Stack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted fil…

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36370

Stack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36371

Stack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36372

Stack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36373

Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36374

Stack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mjs MEDIUM 5.5
CVE-2020-36375

Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

No fix yet
Fix from $1,600 2021-05-28
Mongooseos Mjs CRITICAL 9.8
CVE-2021-31875

In mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse…

Patch available
Fix from $2,300 2021-04-29
Mongoose CRITICAL 9.1
CVE-2021-26528

The mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB write attack via connection request after exhausting …

No fix yet
Fix from $2,300 2021-02-08
Mongoose CRITICAL 9.1
CVE-2021-26529

The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS support) is vulnerable to remote OOB write attack v…

Fix: after 6.18
Fix from $2,300 2021-02-08
Mongoose CRITICAL 9.1
CVE-2021-26530

The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is vulnerable to remote OOB write attack via connection…

No fix yet
Fix from $2,300 2021-02-08
Mongoose CRITICAL 9.8
CVE-2020-25756

A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. A crafted HTTP h…

Patch available
Fix from $2,300 2020-09-18
Mongoose CRITICAL 9.8
CVE-2019-19307EPSS 42%

An integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to achieve remote DoS (infinite loop), or possibly cause …

No fix yet
Fix from $2,300 2019-11-26
Mongoose HIGH 7.5
CVE-2019-13503

mq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read.

Patch available
Fix from $1,950 2019-07-11
Mongoose CRITICAL 9.8
CVE-2019-12951

An issue was discovered in Mongoose before 6.15. The parse_mqtt() function in mg_mqtt.c has a critical heap-based buffer overflow.

Fix: 6.15+
Fix from $2,300 2019-06-24
Mongoose CRITICAL 9.8
CVE-2018-20353

An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_proto_data function in mongoose.c in Cesanta…

Fix: after 6.13
Fix from $2,300 2019-06-10
Mongoose CRITICAL 9.8
CVE-2018-20354

An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mo…

Fix: after 6.13
Fix from $2,300 2019-06-10
Mongoose CRITICAL 9.8
CVE-2018-20355

An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose …

Fix: after 6.13
Fix from $2,300 2019-06-10
Mongoose CRITICAL 9.8
CVE-2018-20356

An invalid read of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose E…

Fix: after 6.13
Fix from $2,300 2019-06-10
Mongoose Embedded Web Server Library HIGH 8.8
CVE-2018-20352

Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows …

Fix: after 6.13
Fix from $1,950 2019-06-10
Mongoose MEDIUM 6.5
CVE-2018-19587

In Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function.

No fix yet
Fix from $1,600 2018-11-27
Mongoose CRITICAL 9.1
CVE-2018-18764

An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffe…

No fix yet
Fix from $2,300 2018-10-29
Mongoose CRITICAL 9.1
CVE-2018-18765

An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffe…

No fix yet
Fix from $2,300 2018-10-29
Mongoose HIGH 7.5
CVE-2018-10945

The mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a denial of service (heap-based buffer over-read and appli…

No fix yet
Fix from $1,950 2018-06-19