Vulnerability index

Browse CVEs

130 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mongoose HIGH 7.5
CVE-2026-6985

A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file /src/net_builtin.c of t…

Fix: 7.21+
Fix from $1,950 2026-04-25
Mongoose HIGH 8.1
CVE-2026-5245

A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS R…

Fix: 7.21+
Fix from $1,950 2026-04-02
Mongoose HIGH 8.1
CVE-2026-5246

A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of the file mongoose.c of the co…

Fix: 7.21+
Fix from $1,950 2026-04-02
Mongoose CRITICAL 9.8
CVE-2026-5244

A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the component TLS…

Fix: 7.21+
Fix from $2,300 2026-04-02
Mongoose HIGH 7.5
CVE-2025-51495

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an a…

Fix: after 7.17
Fix from $1,950 2025-09-29
Mongoose HIGH 7.5
CVE-2024-42392

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string c…

Fix: after 7.14
Fix from $1,950 2024-11-18
Mongoose MEDIUM 5.3
CVE-2024-42389

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force t…

Fix: after 7.14
Fix from $1,600 2024-11-18
Mongoose MEDIUM 5.3
CVE-2024-42390

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force t…

Fix: after 7.14
Fix from $1,600 2024-11-18
Mongoose MEDIUM 5.3
CVE-2024-42391

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force t…

Fix: after 7.14
Fix from $1,600 2024-11-18
Mongoose HIGH 7.5
CVE-2024-42386

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce…

Fix: after 7.14
Fix from $1,950 2024-11-18
Mongoose HIGH 7.0
CVE-2024-42385

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM ce…

Fix: after 7.14
Fix from $1,950 2024-11-18
Mongoose MEDIUM 5.3
CVE-2024-42387

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force t…

Fix: after 7.14
Fix from $1,600 2024-11-18
Mongoose MEDIUM 5.3
CVE-2024-42388

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force t…

Fix: after 7.14
Fix from $1,600 2024-11-18
Mongoose CRITICAL 9.8
CVE-2024-42383

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedic…

Fix: after 7.14
Fix from $2,300 2024-11-18
Mongoose HIGH 7.5
CVE-2024-42384

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a s…

Fix: after 7.14
Fix from $1,950 2024-11-18
Mjs HIGH 7.5
CVE-2024-35386

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file.

No fix yet
Fix from $1,950 2024-05-21
Mjs MEDIUM 5.5
CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file.

No fix yet
Fix from $1,600 2024-05-21
Mjs HIGH 7.5
CVE-2023-49549

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function in the msj.c file.

No fix yet
Fix from $1,950 2024-01-02
Mjs HIGH 7.5
CVE-2023-49550

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.

No fix yet
Fix from $1,950 2024-01-02
Mjs HIGH 7.5
CVE-2023-49551

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_parse function in the msj.c file.

No fix yet
Fix from $1,950 2024-01-02
Mjs HIGH 7.5
CVE-2023-49552

An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.…

No fix yet
Fix from $1,950 2024-01-02
Mjs HIGH 7.5
CVE-2023-49553

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the msj.c file.

No fix yet
Fix from $1,950 2024-01-02
Mjs CRITICAL 9.8
CVE-2023-50044

Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.

Patch available
Fix from $2,300 2023-12-20
Mjs CRITICAL 9.8
CVE-2023-43338

Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This vulnerability allows at…

No fix yet
Fix from $2,300 2023-09-23
Mongoose HIGH 8.8
CVE-2020-25887

Buffer overflow in mg_resolve_from_hosts_file in Mongoose 6.18, when reading from a crafted hosts file.

No fix yet
Fix from $1,950 2023-08-22
Mongoose HIGH 8.8
CVE-2023-2905

Due to a failure in validating the length of a provided MQTT_CMD_PUBLISH parsed message with a variable length header, Cesanta Mongoose, an embeddabl…

Patch available
Fix from $1,950 2023-08-09
Mongoose HIGH 7.5
CVE-2023-34188

The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an …

Fix: 7.10+
Fix from $1,950 2023-06-23
Mjs MEDIUM 5.5
CVE-2023-30087

Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string function in mjs.…

No fix yet
Fix from $1,600 2023-05-09
Mjs MEDIUM 5.5
CVE-2023-30088

An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.

No fix yet
Fix from $1,600 2023-05-09
Mjs MEDIUM 5.5
CVE-2023-29570

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of S…

No fix yet
Fix from $1,600 2023-04-24