← Back

Cesanta

cesanta

144 CVEs • 5 products

Products (5)

Click to collapse
Toggle

CVEs (144)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cesanta
1Mongoose
Jun 17, 2026
Jun 23, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an attacker can cause an infinite loop in which the server continuously re...Show more
The HTTP server in Mongoose before 7.10 accepts requests containing negative Content-Length headers. By sending a single attack payload over TCP, an attacker can cause an infinite loop in which the server continuously reparses that payload, and does not respond to any other requests.Show less
1Cesanta
1Mjs
Jun 17, 2026
May 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
May 9, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string function in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Apr 24, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Apr 14, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Apr 12, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Feb 3, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offset() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_code_at() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks in frozen_cb() in mjs.c.