1026 matches found
PT-2022-12777
Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A SEGV issue was found in Cesanta MJS via the exec expr function at src/mjs exec.c, which can cause a Denial of Service DoS. Recommendations For version 2.20.0, consider disabling the exec expr function a...
CVE-2021-46515: Reachable Assertion
There is an Assertion mjsstacksize&mjs-scopes = scopeslen' failed at src/mjsexec.c in Cesanta MJS v2.20.0...
PT-2022-12760
Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description The issue is related to an assertion failure in the mjs stack size function, specifically when checking if mjs-scopes is greater than or equal to scopes len. This failure occurs at src/mjs exec.c in Cesan...
PT-2022-12758
Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A global buffer overflow issue was discovered in Cesanta MJS via the mjs mk string function at mjs/src/mjs string.c. Recommendations For Cesanta MJS version 2.20.0, consider applying a patch or fix to...
CVE-2021-46513: Buffer Copy without Checking Size of Input
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjsmkstring at mjs/src/mjsstring.c...
CVE-2021-46518: Out-of-bounds Write
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsdisown at src/mjscore.c...
PT-2022-12763
Name of the Vulnerable Software and Affected Versions Cesanta MJS version 2.20.0 Description A heap buffer overflow was discovered in Cesanta MJS via the mjs disown function at src/mjs core.c. Recommendations For Cesanta MJS version 2.20.0, consider disabling the mjs disown function as a temporar...
Cesanta MJS Stack Overflow Vulnerability
Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C/C++ interoperability. A stack overflow vulnerability exists in parsearray in Cesanta MJS version 1.20.1...
Cesanta MJS Stack Overflow Vulnerability
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsevalue in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...
Cesanta MJS stack overflow vulnerability (CNVD-2021-38645)
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for resource-constrained microcontrollers. A stack overflow vulnerability exists in parseblock in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...
Cesanta MJS stack overflow vulnerability (CNVD-2021-38648)
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for resource-constrained microcontrollers. A stack overflow vulnerability exists in parseunary in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...
Cesanta MJS stack overflow vulnerability (CNVD-2021-38646)
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsestatement in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...
Cesanta MJS stack overflow vulnerability (CNVD-2021-38653)
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseequality in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...
Cesanta MJS Stack Overflow Vulnerability (CNVD-2021-38650)
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseplusminus in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...
Cesanta MJS Stack Overflow Vulnerability (CNVD-2021-38649)
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsemuldivrem in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...
Cesanta MJS stack overflow vulnerability (CNVD-2021-38651)
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseshifts in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...
Cesanta MJS stack overflow vulnerability (CNVD-2021-38652)
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsecomparison in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...
Cesanta MJS stack overflow vulnerability (CNVD-2021-38647)
Cesanta MJS is an embedded JavaScript engine for C/C++, designed for resource-constrained microcontrollers. A stack overflow vulnerability exists in parsestatementlist in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via a specially crafted file to cause a denial of servi...
