cesanta Vulnerability Advisory Catalog

Total 136 security vulnerabilities recorded for cesanta software and firmware.

← Back to All Vendors
Component: mongoose

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This issue affects the function mg_aes_gcm_decrypt of the file /src/tls_aes...

📅 2026-04-25
CVSS 3.7 Dossier →
CVE-2026-6985 MEDIUM
Component: mongoose

A weakness has been identified in Cesanta Mongoose up to 7.20. This vulnerability affects the function handle_opt of the file /src/net_builtin.c of th...

📅 2026-04-25
CVSS 5.3 Dossier →
CVE-2026-5246 MEDIUM
Component: mongoose

A vulnerability was determined in Cesanta Mongoose up to 7.20. Affected is the function mg_tls_verify_cert_signature of the file mongoose.c of the com...

📅 2026-04-02
CVSS 5.6 Dossier →
CVE-2026-5245 MEDIUM
Component: mongoose

A vulnerability was found in Cesanta Mongoose up to 7.20. This impacts the function handle_mdns_record of the file mongoose.c of the component mDNS Re...

📅 2026-04-02
CVSS 5.6 Dossier →
Component: mongoose

A vulnerability has been found in Cesanta Mongoose up to 7.20. This affects the function mg_tls_recv_cert of the file mongoose.c of the component TLS ...

📅 2026-04-02
CVSS 7.3 Dossier →
Component: mongoose

A vulnerability was detected in Cesanta Mongoose up to 7.20. This impacts the function mg_chacha20_poly1305_decrypt of the file /src/tls_chacha20.c of...

📅 2026-02-23
CVSS 3.7 Dossier →
Component: mongoose

A security vulnerability has been detected in Cesanta Mongoose up to 7.20. This affects the function getpeer of the file /src/net_builtin.c of the com...

📅 2026-02-23
CVSS 3.7 Dossier →
Component: mongoose

A weakness has been identified in Cesanta Mongoose up to 7.20. The impacted element is the function mg_sendnsreq of the file /src/dns.c of the compone...

📅 2026-02-23
CVSS 3.7 Dossier →
Component: mongoose

Null pointer dereference in add_ca_certs() in Cesanta Mongoose before 7.2 allows remote attackers to cause a denial of service via TLS initialization ...

📅 2025-11-24
CVSS 4.3 Dossier →
Component: mongoose

An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an at...

📅 2025-09-29
CVSS 7.5 Dossier →
Component: mongoose

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an infinite loop bug if the input string co...

📅 2024-11-18
CVSS 4.0 Dossier →
Component: mongoose

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force th...

📅 2024-11-18
CVSS 4.3 Dossier →
Component: mongoose

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force th...

📅 2024-11-18
CVSS 4.3 Dossier →
Component: mongoose

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force th...

📅 2024-11-18
CVSS 5.3 Dossier →
Component: mongoose

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force th...

📅 2024-11-18
CVSS 5.3 Dossier →
Component: mongoose

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and force th...

📅 2024-11-18
CVSS 5.3 Dossier →
Component: mongoose

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce ...

📅 2024-11-18
CVSS 8.2 Dossier →
Component: mongoose

Improper Neutralization of Delimiters vulnerability in Cesanta Mongoose Web Server v7.14 allows to trigger an out-of-bound memory write if the PEM cer...

📅 2024-11-18
CVSS 4.0 Dossier →
Component: mongoose

Integer Overflow or Wraparound vulnerability in Cesanta Mongoose Web Server v7.14 allows an attacker to send an unexpected TLS packet and produce a se...

📅 2024-11-18
CVSS 7.5 Dossier →
Component: mongoose

Use of Out-of-range Pointer Offset vulnerability in Cesanta Mongoose Web Server v7.14 allows to write a NULL byte value beyond the memory space dedica...

📅 2024-11-18
CVSS 4.2 Dossier →
Component: mjs

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file....

📅 2024-05-21
CVSS 7.5 Dossier →
Component: mjs

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file....

📅 2024-05-21
CVSS 4.3 Dossier →
Component: mjs

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file....

📅 2024-05-21
CVSS 5.5 Dossier →
Component: mjs

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the msj.c file....

📅 2024-01-02
CVSS 7.5 Dossier →
Page 1 of 6 (136 Total Records)