1111 matches found
CVE-2021-46530
CVE-2021-46530 affects Cesanta MJS v2.20.0, with a SEGV vulnerability in the mjs_execute path (src/mjs_exec.c) that can cause a Denial of Service. The available documents identify the vulnerable component as the embedded JavaScript engine in Cesanta MJS and specify the fault as a segmentation fau...
CVE-2021-46530
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsexecute at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46529
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8814e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46528
Cesanta MJS v2.20.0 contains a SEGV vulnerability in the mjs binary exploitable via /usr/local/bin/mjs+0x5361e, leading to Denial of Service. Affected component: Cesanta MJS (embedded JavaScript engine). Root cause: segmentation fault reported in sources; exploitation status and exact fix are not...
CVE-2021-46529
CVE-2021-46529 affects Cesanta MJS v2.20.0 and is a SEGV-based Denial of Service vulnerability triggered via /usr/local/bin/mjs+0x8814e. The issue is demonstrated in multiple databases linked to Cesanta MJS, indicating a local/process crash that can exhaust resources and impact availability. The ...
CVE-2021-46528
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46527
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsgetcstring at src/mjsstring.c...
CVE-2021-46527
Cesanta MJS v2.20.0 contains a heap buffer overflow triggered by mjs_get_cstring in src/mjs_string.c. This CVE (CVE-2021-46527) is documented with a CVSS v3.1 base score of 7.8 (HIGH) [attack vector: LOCAL, attack complexity: LOW, privileges required: NONE, user interaction: REQUIRED; confidentia...
CVE-2021-46526
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
CVE-2021-46526
Cesanta MJS v2.20.0 contains a global buffer overflow via snquote in src/mjs_json.c. Affected component: MJS (embedded JavaScript engine for C/C). Root cause: buffer overflow in snquote. Impact (as per sources): high confidentiality, integrity, and availability. Attack vector: LOCAL; attack compl...
CVE-2021-46525
Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjsapply at src/mjsexec.c...
CVE-2021-46525
Cesanta MJS v2.20.0 contains a heap-use-after-free vulnerability in mjs_apply() (src/mjs_exec.c). Reported across multiple sources (e.g., NVD CVE-2021-46525) with a CVSS v3.1 base score of 7.8 (HIGH) and local/requirement-based exposure. The issue stems from incorrect heap memory handling in the ...
CVE-2021-46524
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46524
CVE-2021-46524 affects Cesanta MJS v2.20.0 (embedded JavaScript engine). The vulnerability is a heap buffer overflow triggered by the snquote path in mjs/src/mjs_json.c. Impact is memory corruption with potential reliability issues as implied by the CVSS metrics (high/partial effects). The provid...
CVE-2021-46523
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via tojsonordebug at mjs/src/mjsjson.c...
CVE-2021-46523
CVE-2021-46523 affects Cesanta MJS, specifically version 2.20.0. The vulnerability is a heap buffer overflow in the to_json_or_debug path inside mjs/src/mjs_json.c. The available connected sources confirm the affected component and the nature of the flaw; no exploit details are provided in the do...
CVE-2021-46522
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x8664-linux-gnu/libasan.so.4+0xaff53...
CVE-2021-46522
Cesanta MJS is affected by a heap buffer overflow in version v2.20.0. The overflow is reported to occur via the runtime environment path /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53. The vulnerability is described with a CVSSv3.1 base score of 7.8 (HIGH), with LOCAL attack vector, no privileges...
CVE-2021-46521
CVE-2021-46521 affects Cesanta MJS v2.20.0; a global buffer overflow is triggered via c_vsnprintf in mjs/src/common/str_util.c. Public disclosures in NVD/CNVD indicate a buffer overflow vulnerability; no exploit details or patches are provided in the connected documents. Impact and remediation ar...