Browse CVEs

MEDIUM 5.5 CVE-2023-29569 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial … Mjs No fix yet Fix from $1,6002023-04-14 MEDIUM 5.5 CVE-2023-29571 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (… Mjs No fix yet Fix from $1,6002023-04-12 MEDIUM 5.5 CVE-2021-36535 Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf. Mjs No fix yet Fix from $1,6002023-02-03 MEDIUM 5.5 CVE-2021-33447 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in m… Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33448 An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390. Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33449 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_g… Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33437 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks in frozen_cb() in mjs.c. Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33438 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() … Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33439 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in … Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33440 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit… Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33441 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in m… Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33442 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in… Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33443 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mj… Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33444 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_… Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33445 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_… Mjs 2.20.0+ Fix from $1,6002022-07-26 MEDIUM 5.5 CVE-2021-33446 An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mj… Mjs 2.20.0+ Fix from $1,6002022-07-26 CRITICAL 9.8 CVE-2021-27425 Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrar… Mongoose Os Mitigation only Fix from $2,3002022-05-03 HIGH 7.5 CVE-2022-25299 This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attack… Mongoose 7.6+ Fix from $1,9502022-02-18 MEDIUM 5.5 CVE-2021-46547 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c17e. This vulnerability can lead to a Denial of Service… Mjs Patch available Fix from $1,6002022-01-27 MEDIUM 5.5 CVE-2021-46548 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add_lineno_map_item at src/mjs_bcode.c. This vulnerability can lead to a Denia… Mjs Patch available Fix from $1,6002022-01-27 MEDIUM 5.5 CVE-2021-46549 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse_cval_type at src/mjs_ffi.c. This vulnerability can lead to a Denial of S… Mjs Patch available Fix from $1,6002022-01-27 MEDIUM 5.5 CVE-2021-46550 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src/mjs_json.c. This vulnerability can lead to a Denial of … Mjs Patch available Fix from $1,6002022-01-27 MEDIUM 5.5 CVE-2021-46553 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_set_internal at src/mjs_object.c. This vulnerability can lead to a Denial … Mjs Patch available Fix from $1,6002022-01-27 MEDIUM 5.5 CVE-2021-46554 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_json_stringify at src/mjs_json.c. This vulnerability can lead to a Denial … Mjs Patch available Fix from $1,6002022-01-27 MEDIUM 5.5 CVE-2021-46556 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_bcode_insert_offset at src/mjs_bcode.c. This vulnerability can lead to a D… Mjs Patch available Fix from $1,6002022-01-27 HIGH 7.8 CVE-2021-46522 Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53. Mjs No fix yet Fix from $1,9502022-01-27 HIGH 7.8 CVE-2021-46523 Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c. Mjs No fix yet Fix from $1,9502022-01-27 HIGH 7.8 CVE-2021-46524 Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c. Mjs Patch available Fix from $1,9502022-01-27 HIGH 7.8 CVE-2021-46525 Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c. Mjs Patch available Fix from $1,9502022-01-27 HIGH 7.8 CVE-2021-46526 Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs_json.c. Mjs Patch available Fix from $1,9502022-01-27