← Back

Mjs

mjs

Vendor: Cesanta • 84 CVEs

CVEs (84)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cesanta
1Mjs
Jun 17, 2026
May 21, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file.
1Cesanta
1Mjs
Jun 17, 2026
May 21, 2024
N/A· v4
4.3 MEDIUM· v3
N/A· v2
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file.
1Cesanta
1Mjs
Jun 17, 2026
May 21, 2024
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file.
1Cesanta
1Mjs
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the msj.c file.
1Cesanta
1Mjs
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file.
1Cesanta
1Mjs
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_parse function in the msj.c file.
1Cesanta
1Mjs
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.
1Cesanta
1Mjs
Jun 17, 2026
Jan 2, 2024
N/A· v4
7.5 HIGH· v3
N/A· v2
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function in the msj.c file.
1Cesanta
1Mjs
Jun 17, 2026
Dec 20, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.
1Cesanta
1Mjs
Jun 17, 2026
Sep 23, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This vulnerability allows attackers to execute arbitrary code via a crafted input.
1Cesanta
1Mjs
Jun 17, 2026
May 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
May 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string function in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Apr 24, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Apr 14, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Apr 12, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Feb 3, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offset() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c.