cesanta Vulnerability Advisory Catalog

Total 136 security vulnerabilities recorded for cesanta software and firmware.

← Back to All Vendors
Component: mjs

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit(...

📅 2022-07-26
CVSS 5.5 Dossier →
Component: mjs

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in m...

📅 2022-07-26
CVSS 5.5 Dossier →
Component: mjs

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() i...

📅 2022-07-26
CVSS 5.5 Dossier →
Component: mjs

An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks in frozen_cb() in mjs.c....

📅 2022-07-26
CVSS 5.5 Dossier →
Component: mongoose_os

Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc. This improper memory assignment can lead to arbitrary...

📅 2022-05-03
CVSS 7.3 Dossier →
CVE-2022-25299 CRITICAL
Component: mongoose

This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mg_http_upload() method may enable attacke...

📅 2022-02-18
CVSS 9.8 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_bcode_insert_offset at src/mjs_bcode.c. This vulnerability can lead to a De...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_json_stringify at src/mjs_json.c. This vulnerability can lead to a Denial o...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_set_internal at src/mjs_object.c. This vulnerability can lead to a Denial o...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src/mjs_json.c. This vulnerability can lead to a Denial of S...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse_cval_type at src/mjs_ffi.c. This vulnerability can lead to a Denial of Se...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add_lineno_map_item at src/mjs_bcode.c. This vulnerability can lead to a Denial...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c17e. This vulnerability can lead to a Denial of Service ...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_next at src/mjs_object.c. This vulnerability can lead to a Denial of Servic...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x4b44b. This vulnerability can lead to a Denia...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x59e19. This vulnerability can lead to ...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x18e810. This vulnerability can lead to a Deni...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_print at src/mjs_builtin.c. This vulnerability can lead to a Denial of Serv...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c6ae. This vulnerability can lead to a Denial of Service ...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_get_mjs at src/mjs_builtin.c. This vulnerability can lead to a Denial of Se...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x45a1f. This vulnerability can lead to a Denia...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_compact_strings at src/mjs_gc.c. This vulnerability can lead to a Denial of ...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e. This vulnerability can lead to a Denial of Service ...

📅 2022-01-27
CVSS 5.5 Dossier →
Component: mjs

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0xe533e. This vulnerability can lead to a Denial of Service ...

📅 2022-01-27
CVSS 5.5 Dossier →
Page 3 of 6 (136 Total Records)