CVE-2020-36370

Summary: CVE-2020-36370 is a stack overflow vulnerability in the Cesanta MJS engine, specifically in the parse_unary function of version 1.20.1. The issue can allow a remote attacker to cause a Denial of Service by supplying a crafted file. The connected sources confirm the vulnerability details ...

CVE-2020-18392

Cesanta MJS 1.20.1 contains a stack overflow in the parse_array function, enabling remote DoS via a crafted file. Affected: Cesanta MJS 1.20.1. Root cause: stack overflow in parse_array; impact is Denial of Service. Some sources suggest a workaround (disable the parse array function) until a fix;...

CVE-2020-18392

Stack overflow vulnerability in parsearray Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-36371

CVE-2020-36371 affects Cesanta MJS 1.20.1, with a stack overflow in parse_mul_div_rem that can be triggered by a crafted input file to cause a Denial of Service. The vulnerability is documented across multiple sources (NVD, Red Hat, CNVD, OSV, CVE lists). Reported impact is DoS; attack vector inv...

CVE-2020-36371

Stack overflow vulnerability in parsemuldivrem Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

CVE-2020-36366

The CVE-2020-36366 entry maps to Cesanta MJS 1.20.1 and describes a stack overflow vulnerability in the parse_value function. The impact is a Denial of Service via crafted files, with no explicit exploitation details provided in the connected documents. No remediation details are included in the ...

CVE-2020-36366

Stack overflow vulnerability in parsevalue Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service DoS via a crafted file...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseplusminus in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsevalue in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parsemuldivrem in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

PT-2021-10167 · Cesanta · Cesanta Mjs

Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 1.20.1 Description: The issue is a stack overflow vulnerability in the parse array function, which allows remote attackers to cause a Denial of Service DoS via a crafted file. Recommendations: For Cesanta MJS version 1.20....

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseequality in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

Cesanta MJS 缓冲区错误漏洞

Cesanta MJS is an embedded JavaScript engine for C/C++, designed for microcontrollers with limited resources. A stack overflow vulnerability exists in parseshifts in Cesanta MJS version 1.20.1. An attacker can exploit this vulnerability via specially crafted files to cause a denial of service...

CVE-2021-31875

In mjsjson.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjsjsonparse, which can potentially lead to redirection of control flow. NOTE: the original reporter disputes the significance of this finding because "there isn’t...

CVE-2021-31875

The CVE concerns Cesanta MongooseOS mJS 1.26, where a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse. This may lead to redirection of control flow. Affected component: mjs_json_parse in mjs_json.c. Documented impact remains high (potential co...

Vulnerabilities in the Debian GNU/Linux operating system that allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information

The numerous vulnerabilities of the mono-mjs package in the Debian GNU/Linux operating system can be exploited, which may lead to breaches of the confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...

CVE-2010-0340

SQL injection vulnerability in the MJS Event Pro mjseventpro extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the MJS Event Pro mjseventpro extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2010-0340

The CVE-2010-0340 entry concerns the MJS Event Pro (mjseventpro) TYPO3 extension, affected versions up to 0.2.1. The vulnerability is an SQL injection that enables remote attackers to execute arbitrary SQL commands via unspecified vectors. Multiple connected records (Red Hat, NVD, CVE lists) conf...

CVE-2010-0340

SQL injection vulnerability in the MJS Event Pro mjseventpro extension 0.2.1 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...