CVE-2020-18392: Uncontrolled Recursion

Stack overflow vulnerability in parsearray Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-36373: Uncontrolled Recursion

Stack overflow vulnerability in parseshifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseequality in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

PT-2021-12020

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse unary function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version 1.20....

CVE-2020-36366: Uncontrolled Recursion

Stack overflow vulnerability in parsevalue Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-36372: Uncontrolled Recursion

Stack overflow vulnerability in parseplusminus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsemuldivrem in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

PT-2021-12025

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse equality function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version...

PT-2021-12021

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse mul div rem function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version...

Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseplusminus in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

PT-2021-12022

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse plus minus function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version...

PT-2021-12023

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse shifts function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version...

Cesanta MJS buffer error vulnerability

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseshifts in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

PT-2021-12024

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse comparison function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version...

PT-2021-12018

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse statement function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version...

PT-2021-12017

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse block function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version 1.20....

PT-2021-12016

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse value function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version 1.20....

CVE-2021-31875: Off-by-one Error

In mjsjson.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjsjsonparse, which can potentially lead to redirection of control flow. NOTE: the original reporter disputes the significance of this finding because "there isn’t...

CVE-2021-31875

In mjsjson.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjsjsonparse, which can potentially lead to redirection of control flow. NOTE: the original reporter disputes the significance of this finding because "there isn’t...

CVE-2021-31875

The CVE concerns Cesanta MongooseOS mJS 1.26, where a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse. This may lead to redirection of control flow. Affected component: mjs_json_parse in mjs_json.c. Documented impact remains high (potential co...