Cesanta

Records155All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical27CVSS 9.0–10.0

CVSS high40CVSS 7.0–8.9

Exploited now

Cesanta records in CISA KEV

No Cesanta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mjs 84 records HIGH Mongoose 55 records HIGH Mongoose Embedded Web Server Library 3 records MEDIUM Mongoose Os 2 records MEDIUM Mongooseos Mjs 1 record MEDIUM

Records

84 records in Mjs · all components

TI-2023-23198 CVE-2023-43338 · GHSA-92m7-86f6-r2hj

Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability…

HIGH 82

Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00987 Published 2023-09-22 No fix listed CWE-787

TI-2023-27057 CVE-2023-49553 · GHSA-9gfv-m6hh-94gq

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via…

HIGH 72

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the msj.c file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00857 Published 2024-01-02 No fix listed

TI-2023-27055 CVE-2023-49551 · GHSA-7hrg-3c44-45cg

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via…

HIGH 72

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_parse function in the msj.c file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2024-01-02 No fix listed CWE-20

TI-2023-27054 CVE-2023-49550 · GHSA-5mfr-vx4f-m7q7

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.

HIGH 72

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00758 Published 2024-01-02 No fix listed CWE-400

TI-2023-27056 CVE-2023-49552 · GHSA-f6jr-7pgg-f497

An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial…

HIGH 66

An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00759 Published 2024-01-02 No fix listed CWE-787

TI-2023-27053 CVE-2023-49549 · GHSA-fh95-g988-p9j3

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via…

HIGH 66

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function in the msj.c file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00758 Published 2024-01-02 No fix listed

TI-2024-23407 CVE-2024-35384 · GHSA-6hjh-qhhq-4q76

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via…

MEDIUM 58

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00341 Published 2024-05-21 No fix listed CWE-20

TI-2023-14129 CVE-2023-30088 · GHSA-jgmq-8h79-52mh

An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service…

MEDIUM 58

An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00255 Published 2023-05-09 No fix listed CWE-119

TI-2023-13925 CVE-2023-29571 · GHSA-pw32-jj49-66pq

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at…

MEDIUM 58

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00288 Published 2023-04-12 No fix listed CWE-119

TI-2023-13924 CVE-2023-29570 · GHSA-qmx9-67mw-5ghq

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at…

MEDIUM 58

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00287 Published 2023-04-24 No fix listed CWE-770

TI-2023-13923 CVE-2023-29569 · GHSA-vrq5-53cv-ff3x

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via…

MEDIUM 58

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00276 Published 2023-04-14 No fix listed CWE-476

TI-2021-14788 CVE-2021-36535 · GHSA-9mr9-jp9j-332h

Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a…

MEDIUM 58

Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00372 Published 2023-02-03 No fix listed CWE-787

TI-2024-23408 CVE-2024-35385 · GHSA-47p2-vwpg-v462

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via…

MEDIUM 53

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00531 Published 2024-05-21 No fix listed CWE-125

TI-2023-27371 CVE-2023-50044 · GHSA-5x2j-8rm7-fm3j

Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API…

MEDIUM 44

Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0086 Published 2023-12-20 No fix listed CWE-120

TI-2024-23409 CVE-2024-35386 · GHSA-fmvf-fm6q-vpjg

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via…

MEDIUM 40

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00602 Published 2024-05-21 No fix listed

TI-2021-21304 CVE-2021-46527 · GHSA-678r-w8gp-8m7g

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00739 Published 2022-01-27 No fix listed CWE-787

TI-2021-21303 CVE-2021-46526 · GHSA-3449-q73h-pp22

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs_json.c.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs_json.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00739 Published 2022-01-27 No fix listed CWE-120

TI-2021-21302 CVE-2021-46525 · GHSA-r2fp-jg3h-x57v

Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00777 Published 2022-01-27 No fix listed CWE-416

TI-2021-21301 CVE-2021-46524 · GHSA-qqr4-8m2r-fv75

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00739 Published 2022-01-27 No fix listed CWE-787

TI-2021-21300 CVE-2021-46523 · GHSA-9pgj-x6h2-p943

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0073 Published 2022-01-27 No fix listed CWE-787

TI-2021-21299 CVE-2021-46522 · GHSA-pmh9-v5qm-xh48

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0073 Published 2022-01-27 No fix listed CWE-787

TI-2021-21298 CVE-2021-46521 · GHSA-h7hg-fw2g-58j8

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src/common/str_util.c.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src/common/str_util.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0073 Published 2022-01-27 No fix listed CWE-120

TI-2021-21297 CVE-2021-46520 · GHSA-cjxw-c723-f938

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0073 Published 2022-01-27 No fix listed CWE-787

TI-2021-21296 CVE-2021-46519 · GHSA-8ff8-x2c5-r774

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0073 Published 2022-01-27 No fix listed CWE-787

TI-2021-21295 CVE-2021-46518 · GHSA-rrr6-r9v5-phwp

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c.

LOW 35

Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.0073 Published 2022-01-27 No fix listed CWE-787

Open these records in search →