1118 matches found
EUVD-2021-33229
Malicious code in bioql PyPI...
EUVD-2021-33216
Malicious code in bioql PyPI...
EUVD-2021-33214
Malicious code in bioql PyPI...
EUVD-2021-33193
Malicious code in bioql PyPI...
EUVD-2021-33192
Malicious code in bioql PyPI...
EUVD-2021-33210
Malicious code in bioql PyPI...
EUVD-2024-39589
Malicious code in bioql PyPI...
EUVD-2024-39590
Malicious code in bioql PyPI...
EUVD-2021-33195
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2023-29571
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gcsweep at src/mjsgc.c. This vulnerability can lead to a Denial of Service DoS...
Linux Distros Unpatched Vulnerability : CVE-2023-49551
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsopjsonparse function in the msj.c file. CVE-2023-49551 Note that...
Linux Distros Unpatched Vulnerability : CVE-2023-49552
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsopjsonstringify function in the msj.c file...
Linux Distros Unpatched Vulnerability : CVE-2023-49549
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsgetretvalpos function in the msj.c file. CVE-2023-49549 Note tha...
Linux Distros Unpatched Vulnerability : CVE-2022-25299
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - This affects the package cesanta/mongoose before 7.6. The unsafe handling of file names during upload using mghttpupload method may enable attackers to write...
Linux Distros Unpatched Vulnerability : CVE-2023-30087
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjsmkstring function in mjs.c...
Linux Distros Unpatched Vulnerability : CVE-2023-49550
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component. CVE-2023-49550 Note that Nessus relies on t...
Linux Distros Unpatched Vulnerability : CVE-2023-30088
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjsexecute function in mjs.c. CVE-2023-30088 Note that Nessus...
Linux Distros Unpatched Vulnerability : CVE-2023-49553
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdestroy function in the msj.c file. CVE-2023-49553 Note that...
Linux Distros Unpatched Vulnerability : CVE-2018-18764
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An exploitable arbitrary memory read vulnerability exists in the MQTT packet-parsing functionality of Cesanta Mongoose 6.13. It is a heap-based buffer over-read...
CVE-2025-0695
An Allocation of Resources Without Limits or Throttling vulnerability in Cesanta Frozen versions less than 1.7 allows an attacker to induce a crash of the component embedding the library by supplying a maliciously crafted JSON as input...