Skip to contentCesanta vulnerabilities
Newest
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c.CVE-2021-465257.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src...CVE-2021-465247.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs...CVE-2021-465237.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux...CVE-2021-465227.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src...CVE-2021-465217.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src...CVE-2021-465207.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src...CVE-2021-465197.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src...CVE-2021-465187.8 High
- cesanta mjsThere is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS...CVE-2021-465175.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_stack_size at mjs/src...CVE-2021-465165.5 Medium
- cesanta mjsThere is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len' failed at src/mjs_exec.c in...CVE-2021-465155.5 Medium
- cesanta mjsThere is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta...CVE-2021-465145.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjs_mk_string at mjs...CVE-2021-465137.8 High
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_apply at src/mjs_exec...CVE-2021-465125.5 Medium
- cesanta mjsThere is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.CVE-2021-465115.5 Medium
- cesanta mjsThere is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc...CVE-2021-465105.5 Medium
- cesanta mjsCesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c.CVE-2021-465097.8 High
- cesanta mjsThere is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0.CVE-2021-465085.5 Medium
- cesanta mjsStack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to...CVE-2020-363755.5 Medium
- cesanta mjsStack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause...CVE-2020-363735.5 Medium
- cesanta mjsStack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to...CVE-2020-363745.5 Medium
- cesanta mjsStack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers...CVE-2020-363695.5 Medium
- cesanta mjsStack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to...CVE-2020-363725.5 Medium
- cesanta mjsStack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause...CVE-2020-363675.5 Medium
- cesanta mjsStack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to...CVE-2020-363685.5 Medium
- cesanta mjsStack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause...CVE-2020-363705.5 Medium
- cesanta mjsStack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause...CVE-2020-183925.5 Medium
- cesanta mjsStack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to...CVE-2020-363715.5 Medium
- cesanta mjsStack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause...CVE-2020-363665.5 Medium
- cesanta mongooseos mjsIn mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off...CVE-2021-31875Disputed9.8 Critical
- cesanta mongooseThe mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 (compiled with OpenSSL support) is...CVE-2021-26530Fix available9.1 Critical
- cesanta mongooseThe mg_tls_init function in Cesanta Mongoose HTTPS server 7.0 and 6.7-6.18 (compiled with mbedTLS...CVE-2021-26529Fix available9.1 Critical
- cesanta mongooseThe mg_http_serve_file function in Cesanta Mongoose HTTP server 7.0 is vulnerable to remote OOB...CVE-2021-26528Fix available9.1 Critical
- cesanta mongoose** DISPUTED ** A buffer overflow vulnerability exists in the mg_get_http_header function in...CVE-2020-25756Fix availableDisputed9.8 Critical
- cesanta mongooseAn integer overflow in parse_mqtt in mongoose.c in Cesanta Mongoose 6.16 allows an attacker to...CVE-2019-19307Fix availableEPSS 41.3%9.8 Critical
- cesanta mongoosemq_parse_http in mongoose.c in Mongoose 6.15 has a heap-based buffer over-read.CVE-2019-13503Fix available7.5 High
- cesanta mongooseAn issue was discovered in Mongoose before 6.15. The parse_mqtt() function in mg_mqtt.c has a...CVE-2019-12951Fix available9.8 Critical
- cesanta mongooseAn invalid read of 8 bytes due to a use-after-free vulnerability in the...CVE-2018-203569.8 Critical
- cesanta mongooseAn invalid write of 8 bytes due to a use-after-free vulnerability in the...CVE-2018-203559.8 Critical
- cesanta mongooseAn invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the...CVE-2018-203549.8 Critical
- cesanta mongooseAn invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the...CVE-2018-203539.8 Critical
- cesanta mongoose embedded web server libraryUse-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose...CVE-2018-203528.8 High
- cesanta mongooseIn Cesanta Mongoose 6.13, a SIGSEGV exists in the mongoose.c mg_mqtt_add_session() function.CVE-2018-195876.5 Medium
- cesanta mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing...CVE-2018-18765Fix available9.1 Critical
- cesanta mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing...CVE-2018-18764Fix available9.1 Critical
- cesanta mongooseThe mg_handle_cgi function in mongoose.c in Mongoose 6.11 allows remote attackers to cause a...CVE-2018-10945Fix available7.5 High
- automattic mongooseAn exploitable memory corruption vulnerability exists in the Websocket protocol implementation of...CVE-2017-2922Fix available9.8 Critical
- automattic mongooseAn exploitable memory corruption vulnerability exists in the Websocket protocol implementation of...CVE-2017-2921Fix available8.1 High
- automattic mongooseAn infinite loop programming error exists in the DNS server functionality of Cesanta Mongoose 6.8...CVE-2017-2909Fix available7.5 High
- automattic mongooseAn exploitable arbitrary memory read vulnerability exists in the MQTT packet parsing...CVE-2017-2895Fix available8.2 High
- Show moreLoading…