Cesanta

Records155All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical27CVSS 9.0–10.0

CVSS high40CVSS 7.0–8.9

Exploited now

Cesanta records in CISA KEV

No Cesanta vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Mjs 84 records HIGH Mongoose 55 records HIGH Mongoose Embedded Web Server Library 3 records MEDIUM Mongoose Os 2 records MEDIUM Mongooseos Mjs 1 record MEDIUM

Records

2 records in Mongoose Os · all components

TI-2021-08914 CVE-2021-27425 · GHSA-2vmf-rc4q-xhgw

Cesanta Software Mongoose-OS Integer Overflow or Wraparound

MEDIUM 51

Cesanta Software Mongoose-OS v2.17.0 is vulnerable to integer wrap-around in function mm_malloc.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01675 Published 2022-05-03 No fix listed CWE-190

TI-2017-04881 CVE-2017-7185 · GHSA-r945-w37w-79vf

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in…

MEDIUM 47

Use-after-free vulnerability in the mg_http_multipart_wait_for_boundary function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.7 and earlier and Mongoose OS 1.2 and earlier allows remote attackers to ca…

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.12251 Published 2017-04-10 No fix listed CWE-416

Open these records in search →

Critical	27
High	40
Medium	88
Low	0
No CVSS	0