Browse CVEs

CRITICAL 9.8 CVE-2017-2921 An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket… Mongoose No fix yet Fix from $2,3002017-11-07 CRITICAL 9.8 CVE-2017-2922 An exploitable memory corruption vulnerability exists in the Websocket protocol implementation of Cesanta Mongoose 6.8. A specially crafted websocket… Mongoose No fix yet Fix from $2,3002017-11-07 CRITICAL 9.8 CVE-2017-2891 An exploitable use-after-free vulnerability exists in the HTTP server implementation of Cesanta Mongoose 6.8. An ordinary HTTP POST request with a CG… Mongoose No fix yet Fix from $2,3002017-11-07 CRITICAL 9.8 CVE-2017-2892 An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT … Mongoose Mitigation only Fix from $2,3002017-11-07 CRITICAL 9.8 CVE-2017-2894EPSS 31% An exploitable stack buffer overflow vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT … Mongoose No fix yet Fix from $2,3002017-11-07 HIGH 8.2 CVE-2017-2895 An exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. A specially crafted MQTT … Mongoose Mitigation only Fix from $1,9502017-11-07 HIGH 7.5 CVE-2017-2893EPSS 25% An exploitable NULL pointer dereference vulnerability exists in the MQTT packet parsing functionality of Cesanta Mongoose 6.8. An MQTT SUBSCRIBE pack… Mongoose No fix yet Fix from $1,9502017-11-07 HIGH 7.5 CVE-2017-2909 An infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8 library. A specially crafted DNS request can cause … Mongoose Mitigation only Fix from $1,9502017-11-07 HIGH 8.8 CVE-2017-11567 Cross-site request forgery (CSRF) vulnerability in Mongoose Web Server before 6.9 allows remote attackers to hijack the authentication of users for r… Mongoose Embedded Web Server Library after 6.8 Fix from $1,9502017-09-07 HIGH 7.5 CVE-2017-7185EPSS 12% Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 an… Mongoose Embedded Web Server Library after 6.7 Fix from $1,9502017-04-10