mjs
by Cesanta
CVEs (13)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-35385 | 0.00 | — | 0.01 | May 21, 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file. | |||
| CVE-2024-35384 | 0.00 | — | 0.01 | May 21, 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file. | |||
| CVE-2024-35386 | 0.00 | — | 0.02 | May 21, 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file. | |||
| CVE-2023-49549 | 0.00 | — | 0.01 | Jan 2, 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function in the msj.c file. | |||
| CVE-2023-49553 | 0.00 | — | 0.00 | Jan 2, 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the msj.c file. | |||
| CVE-2023-49550 | 0.00 | — | 0.01 | Jan 2, 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component. | |||
| CVE-2023-49552 | 0.00 | — | 0.00 | Jan 2, 2024 | An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file. | |||
| CVE-2023-30088 | 0.00 | — | 0.00 | May 9, 2023 | An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c. | |||
| CVE-2023-30087 | 0.00 | — | 0.00 | May 9, 2023 | Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string function in mjs.c. | |||
| CVE-2023-29570 | 0.00 | — | 0.00 | Apr 24, 2023 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS). | |||
| CVE-2023-29569 | 0.00 | — | 0.00 | Apr 14, 2023 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS). | |||
| CVE-2023-29571 | 0.00 | — | 0.00 | Apr 12, 2023 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS). | |||
| CVE-2021-36535 | 0.00 | — | 0.00 | Feb 3, 2023 | Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf. |
- CVE-2024-35385May 21, 2024risk 0.00cvss —epss 0.01
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file.
- CVE-2024-35384May 21, 2024risk 0.00cvss —epss 0.01
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file.
- CVE-2024-35386May 21, 2024risk 0.00cvss —epss 0.02
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file.
- CVE-2023-49549Jan 2, 2024risk 0.00cvss —epss 0.01
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function in the msj.c file.
- CVE-2023-49553Jan 2, 2024risk 0.00cvss —epss 0.00
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the msj.c file.
- CVE-2023-49550Jan 2, 2024risk 0.00cvss —epss 0.01
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.
- CVE-2023-49552Jan 2, 2024risk 0.00cvss —epss 0.00
An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file.
- CVE-2023-30088May 9, 2023risk 0.00cvss —epss 0.00
An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c.
- CVE-2023-30087May 9, 2023risk 0.00cvss —epss 0.00
Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string function in mjs.c.
- CVE-2023-29570Apr 24, 2023risk 0.00cvss —epss 0.00
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
- CVE-2023-29569Apr 14, 2023risk 0.00cvss —epss 0.00
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
- CVE-2023-29571Apr 12, 2023risk 0.00cvss —epss 0.00
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).
- CVE-2021-36535Feb 3, 2023risk 0.00cvss —epss 0.00
Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf.