← Back

Cesanta

cesanta

136 CVEs • 5 products

Products (5)

Click to collapse
Toggle

CVEs (136)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_code_at() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() in mjs.c.
1Cesanta
1Mjs
Jun 17, 2026
Jul 26, 2022
N/A· v4
5.5 MEDIUM· v3
N/A· v2
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks in frozen_cb() in mjs.c.
1Cesanta
1Mongoose Os
Jun 17, 2026
May 3, 2022
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash o...Show more
Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary memory allocation, resulting in unexpected behavior such as a crash or a remote code injection/execution.Show less
1Cesanta
1Mongoose
Jun 17, 2026
Feb 18, 2022
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target...Show more
This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attackers to write files to arbitrary locations outside the designated target folder.Show less
1Cesanta
1Mjs
Jun 17, 2026
Jan 27, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_bcode_insert_offset at src/mjs_bcode.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Jan 27, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_json_stringify at src/mjs_json.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Jan 27, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_set_internal at src/mjs_object.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Jan 27, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src/mjs_json.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Jan 27, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse_cval_type at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
1Cesanta
1Mjs
Jun 17, 2026
Jan 27, 2022
N/A· v4
5.5 MEDIUM· v3
4.3 MEDIUM· v2
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add_lineno_map_item at src/mjs_bcode.c. This vulnerability can lead to a Denial of Service (DoS).