741 matches found
CVE-2021-46534
Cesanta MJS v2.20.0 contains a SEGV vulnerability exploitable via getprop_builtin_foreign in src/mjs_exec.c, which can lead to a Denial of Service. Affected product is Cesanta MJS (embedded JavaScript engine for C/C from Cesanta Ireland). The available documents confirm the vulnerability but do n...
CVE-2021-46531
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46532
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via execexpr at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46531
Cesanta MJS v2.20.0 is affected by a SEGV vulnerability triggered at /usr/local/bin/mjs+0x8d28e, leading to Denial of Service. Available connected sources (NVD, CNVD, OSV/CVE records) describe the issue as a DoS but do not provide explicit remediation details or fix/version. Exploitation details ...
CVE-2021-46532
CVE-2021-46532 affects Cesanta MJS v2.20.0. The issue is a segmentation fault triggered by exec_expr in src/mjs_exec.c, leading to a Denial of Service. Exploitation details are not provided in the documents. Affected component is the MJS JavaScript engine used in C/C for microcontrollers; root ca...
CVE-2021-46530
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsexecute at src/mjsexec.c. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46530
CVE-2021-46530 affects Cesanta MJS v2.20.0, with a SEGV vulnerability in the mjs_execute path (src/mjs_exec.c) that can cause a Denial of Service. The available documents identify the vulnerable component as the embedded JavaScript engine in Cesanta MJS and specify the fault as a segmentation fau...
CVE-2021-46528
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46528
Cesanta MJS v2.20.0 contains a SEGV vulnerability in the mjs binary exploitable via /usr/local/bin/mjs+0x5361e, leading to Denial of Service. Affected component: Cesanta MJS (embedded JavaScript engine). Root cause: segmentation fault reported in sources; exploitation status and exact fix are not...
CVE-2021-46529
CVE-2021-46529 affects Cesanta MJS v2.20.0 and is a SEGV-based Denial of Service vulnerability triggered via /usr/local/bin/mjs+0x8814e. The issue is demonstrated in multiple databases linked to Cesanta MJS, indicating a local/process crash that can exhaust resources and impact availability. The ...
CVE-2021-46529
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8814e. This vulnerability can lead to a Denial of Service DoS...
CVE-2021-46527
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjsgetcstring at src/mjsstring.c...
CVE-2021-46527
Cesanta MJS v2.20.0 contains a heap buffer overflow triggered by mjs_get_cstring in src/mjs_string.c. This CVE (CVE-2021-46527) is documented with a CVSS v3.1 base score of 7.8 (HIGH) [attack vector: LOCAL, attack complexity: LOW, privileges required: NONE, user interaction: REQUIRED; confidentia...
CVE-2021-46526
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
CVE-2021-46526
Cesanta MJS v2.20.0 contains a global buffer overflow via snquote in src/mjs_json.c. Affected component: MJS (embedded JavaScript engine for C/C). Root cause: buffer overflow in snquote. Impact (as per sources): high confidentiality, integrity, and availability. Attack vector: LOCAL; attack compl...
CVE-2021-46525
Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjsapply at src/mjsexec.c...
CVE-2021-46525
Cesanta MJS v2.20.0 contains a heap-use-after-free vulnerability in mjs_apply() (src/mjs_exec.c). Reported across multiple sources (e.g., NVD CVE-2021-46525) with a CVSS v3.1 base score of 7.8 (HIGH) and local/requirement-based exposure. The issue stems from incorrect heap memory handling in the ...
CVE-2021-46524
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46524
CVE-2021-46524 affects Cesanta MJS v2.20.0 (embedded JavaScript engine). The vulnerability is a heap buffer overflow triggered by the snquote path in mjs/src/mjs_json.c. Impact is memory corruption with potential reliability issues as implied by the CVSS metrics (high/partial effects). The provid...