Cesanta

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-46513 1Cesanta 1Mjs Jun 17, 2026 Jan 27, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjs_mk_string at mjs/src/mjs_string.c.
CVE-2021-46512 1Cesanta 1Mjs Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_apply at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).
CVE-2021-46511 1Cesanta 1Mjs Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.
CVE-2021-46510 1Cesanta 1Mjs Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc.c in Cesanta MJS v2.20.0.
CVE-2021-46509 1Cesanta 1Mjs Jun 17, 2026 Jan 27, 2022 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c.
CVE-2021-46508 1Cesanta 1Mjs Jun 17, 2026 Jan 27, 2022 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 There is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0.
CVE-2020-36375 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-36374 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-36373 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-36372 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-36371 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-36370 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-36369 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-36368 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-36367 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-36366 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2020-18392 1Cesanta 1Mjs Jun 17, 2026 May 28, 2021 N/A· v4 5.5 MEDIUM· v3 4.3 MEDIUM· v2 Stack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
CVE-2021-31875 1Cesanta 1Mongooseos Mjs Jun 17, 2026 Apr 29, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 In mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse, which can potentially lead to redirection of control flow. NOTE: the...Show more In mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse, which can potentially lead to redirection of control flow. NOTE: the original reporter disputes the significance of this finding because "there isn’t very much of an opportunity to exploit this reliably for an information leak, so there isn’t any real security impact."Show less
CVE-2021-26530 1Cesanta 1Mongoose Jun 17, 2026 Feb 8, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool.
CVE-2021-26529 1Cesanta 1Mongoose Jun 17, 2026 Feb 8, 2021 N/A· v4 9.1 CRITICAL· v3 6.4 MEDIUM· v2 The mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS support) is vulnerable to remote OOB write attack via connection request after exhausting memory pool.

Previous 1...4 567 8 Next