69 matches found
CVE-2021-33449
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in mjsbcodepartgetbyoffset in mjs.c...
CVE-2021-33448
An issue was discovered in mjsmJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow at 0x7fffe9049390...
CVE-2021-33448
An issue was discovered in mjsmJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow at 0x7fffe9049390...
CVE-2021-33437
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There are memory leaks in frozencb in mjs.c...
CVE-2021-33438
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow in jsonparsearray in mjs.c...
CVE-2021-33445
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in mjsstringcharcodeat in mjs.c...
Stack overflow
An issue was discovered in mjsmJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow at 0x7fffe9049390...
Design/Logic Flaw
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There are memory leaks in frozencb in mjs.c...
CVE-2021-33443
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow in mjsexecute in mjs.c...
CVE-2021-33446
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is NULL pointer dereference in mjsnext in mjs.c...
CVE-2021-33447
CVE-2021-33447 affects Cesanta’s embedded JavaScript engine mJS (mJS) with a NULL pointer dereference in function mjs_print() of file mjs.c . Multiple connected sources (NVD, Red Hat CNS, OSV, CVE catalogs) confirm the issue, described as a NULL pointer dereference in mjs_print(). Impact details ...
CVE-2021-33439
CVE-2021-33439 describes an integer overflow in the mjs (mJS: Restricted JavaScript engine) project, specifically in the function gc_compact_strings() within mjs.c. The vulnerability affects the embedded JavaScript engine used in ES6 contexts and is documented across multiple sources (NVD, Red Ha...
CVE-2021-33438
An issue was discovered in mjs mJS: Restricted JavaScript engine, ES6 JavaScript version 6. There is stack buffer overflow in jsonparsearray in mjs.c...
CVE-2021-33438
CVE-2021-33438 : An issue in the mjs (mJS: Restricted JavaScript engine) ES6 engine has a stack buffer overflow in the function json_parse_array() within mjs.c. The vulnerability is documented across multiple feeds (NVD/Red Hat/EUVD/OSV etc.). The vulnerability is described without public exploit...
CVE-2021-33437
CVE-2021-33437 affects the mjs (mJS) embedded JavaScript engine. All connected sources describe memory leaks in the frozen_cb() function of mjs.c. The issue is tied to the ES6 engine and has been documented across multiple feeds (Red Hat, NVD, OSV, CVE lists). One PT Security entry notes that aff...
MAL-2022-4885 Malicious code in node-es6-seed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d7306399dc8e5ffc0f9af242283015bb832e1a786c85b39298f738e788a56e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in node-es6-seed (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 28d7306399dc8e5ffc0f9af242283015bb832e1a786c85b39298f738e788a56e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in roblox-es6-migration-helper (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e6744d30670c11b6c78c162fbf812373252b628ed5af3977d02003b1d7711c9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Regular Expression Denial of Service (ReDoS) in es6-crawler-detect
This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex operators...
GHSA-JXG6-FHWC-9V9C Regular Expression Denial of Service (ReDoS) in es6-crawler-detect
This affects the package es6-crawler-detect before 3.1.3. No limitation of user agent string length supplied to regex operators...