15 matches found
EUVD-2021-33185
Malicious code in bioql PyPI...
EUVD-2021-33202
Malicious code in bioql PyPI...
EUVD-2021-33200
Malicious code in bioql PyPI...
CVE-2021-46526
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
CVE-2021-46509
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46509
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...
Heap overflow
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...
Buffer overflow
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
Heap overflow
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via tojsonordebug at mjs/src/mjsjson.c...
Stack overflow
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46526
Cesanta MJS v2.20.0 contains a global buffer overflow via snquote in src/mjs_json.c. Affected component: MJS (embedded JavaScript engine for C/C). Root cause: buffer overflow in snquote. Impact (as per sources): high confidentiality, integrity, and availability. Attack vector: LOCAL; attack compl...
CVE-2021-46526
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
CVE-2021-46509
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...
Heap overflow
DISPUTED In mjsjson.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjsjsonparse, which can potentially lead to redirection of control flow. NOTE: the original reporter disputes the significance of this finding because...
CVE-2021-31875
The CVE concerns Cesanta MongooseOS mJS 1.26, where a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse. This may lead to redirection of control flow. Affected component: mjs_json_parse in mjs_json.c. Documented impact remains high (potential co...