CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in mjs.c. The CVSSv3.1 base score is 4.3 (Medium) with network access, low attack complexity, and low privileges required. APT/exploitation details are not provided; PT-2024-26471 ...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35385

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35384

Cesanta MJS 2.20.0 contains a DoS vulnerability in mjs_array_length (mjs.c) due to improper handling of incoming error messages. A remote attacker could trigger the issue to cause denial of service. Affected product is the embedded JavaScript engine; no patch/version remediation details are provi...

CVE-2024-35384

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file...

CVE-2024-35386

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file...

CVE-2024-35386

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file...

CVE-2024-35386

CVE-2024-35386 affects Cesanta mjs 2.20.0. The issue is in the mjs_do_gc function (mjs.c) and enables remote attackers to cause a denial of service. The CVSS v3.1 base score is 7.5 (Network, Low complexity, No privileges, no user interaction; Availability impact). Public details consistently desc...

CVE-2024-35386

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file...

PT-2024-26472 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: An issue in Cesanta mjs allows a remote attacker to cause a denial of service via the mjs do gc function in the mjs.c file. Recommendations: For Cesanta mjs version 2.20.0, consider disabling the mjs do...

PT-2024-26471 · Cesanta · Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta mjs version 2.20.0 Description: An issue in Cesanta mjs allows a remote attacker to cause a denial of service via the mjs mk ffi sig function in the mjs.c file. Recommendations: For Cesanta mjs version 2.20.0, consider disabling the m...

Cesanta mjs 安全漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C / C ++ interoperability. A security vulnerability exists in Cesanta mjs version 2.20.0, which originate...

Cesanta mjs 安全漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. It is designed for microcontrollers with limited resources. The main design goals are a small footprint and simple C / C ++ interoperability. A security vulnerability exists in Cesanta mjs version 2.20.0, which originate...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MJS Software PT Sign Ups – Beautiful volunteer sign ups and management made easy allows Stored XSS.This issue affects PT Sign Ups – Beautiful volunteer sign ups and management made easy: from n/a...

CVE-2024-24848 WordPress PT Sign Ups Plugin <= 1.0.4 is vulnerable to Cross Site Scripting (XSS)

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MJS Software PT Sign Ups – Beautiful volunteer sign ups and management made easy allows Stored XSS.This issue affects PT Sign Ups – Beautiful volunteer sign ups and management made easy: from n/a...

Cesanta MJS Denial of Service Vulnerability (CNVD-2024-27558)

Cesanta MJS is an embedded JavaScript engine for C/C++ from Cesanta Ireland. A denial of service vulnerability exists in Cesanta MJS version 2.20.0, which is caused by a flaw in the mjs+0x4ec508 component. An attacker could exploit this vulnerability to cause a denial of service...