584 matches found
CVE-2021-46535
CESANTA MJS v2.20.0 contains a SEGV vulnerability exploitable via /usr/local/bin/mjs+0xe533e, leading to Denial of Service. The connected records consistently describe a local-seen crash path without detailing remote vectors or exploit specifics. No remedy/version fix is stated in these documents...
CVE-2021-46534
Cesanta MJS v2.20.0 contains a SEGV vulnerability exploitable via getprop_builtin_foreign in src/mjs_exec.c, which can lead to a Denial of Service. Affected product is Cesanta MJS (embedded JavaScript engine for C/C from Cesanta Ireland). The available documents confirm the vulnerability but do n...
CVE-2021-46534
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getpropbuiltinforeign at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46531
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46532
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via execexpr at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46530
CVE-2021-46530 affects Cesanta MJS v2.20.0, with a SEGV vulnerability in the mjs_execute path (src/mjs_exec.c) that can cause a Denial of Service. The available documents identify the vulnerable component as the embedded JavaScript engine in Cesanta MJS and specify the fault as a segmentation fau...
CVE-2021-46530
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsexecute at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46529
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8814e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46528
Cesanta MJS v2.20.0 contains a SEGV vulnerability in the mjs binary exploitable via /usr/local/bin/mjs+0x5361e, leading to Denial of Service. Affected component: Cesanta MJS (embedded JavaScript engine). Root cause: segmentation fault reported in sources; exploitation status and exact fix are not...
CVE-2021-46528
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46527
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsgetcstring at src/mjsstring.c...
CVE-2021-46527
Cesanta MJS v2.20.0 contains a heap buffer overflow triggered by mjs_get_cstring in src/mjs_string.c. This CVE (CVE-2021-46527) is documented with a CVSS v3.1 base score of 7.8 (HIGH) [attack vector: LOCAL, attack complexity: LOW, privileges required: NONE, user interaction: REQUIRED; confidentia...
CVE-2021-46526
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
CVE-2021-46525
Cesanta MJS v2.20.0 contains a heap-use-after-free vulnerability in mjs_apply() (src/mjs_exec.c). Reported across multiple sources (e.g., NVD CVE-2021-46525) with a CVSS v3.1 base score of 7.8 (HIGH) and local/requirement-based exposure. The issue stems from incorrect heap memory handling in the ...
CVE-2021-46525
Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjsapply at src/mjsexec.c...
CVE-2021-46524
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46523
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via tojsonordebug at mjs/src/mjsjson.c...
CVE-2021-46522
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x8664-linux-gnu/libasan.so.4+0xaff53...
CVE-2021-46522
Cesanta MJS is affected by a heap buffer overflow in version v2.20.0. The overflow is reported to occur via the runtime environment path /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53. The vulnerability is described with a CVSSv3.1 base score of 7.8 (HIGH), with LOCAL attack vector, no privileges...