18 matches found
EUVD-2021-33185
Malicious code in bioql PyPI...
EUVD-2021-33202
Malicious code in bioql PyPI...
EUVD-2021-33200
Malicious code in bioql PyPI...
CVE-2021-46526
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
CVE-2021-46526
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
CVE-2021-46524
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46524
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46509
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46509
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...
Heap overflow
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...
Buffer overflow
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
Stack overflow
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46526
Cesanta MJS v2.20.0 contains a global buffer overflow via snquote in src/mjs_json.c. Affected component: MJS (embedded JavaScript engine for C/C). Root cause: buffer overflow in snquote. Impact (as per sources): high confidentiality, integrity, and availability. Attack vector: LOCAL; attack compl...
CVE-2021-46526
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjsjson.c...
CVE-2021-46524
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjsjson.c...
CVE-2021-46524
CVE-2021-46524 affects Cesanta MJS v2.20.0 (embedded JavaScript engine). The vulnerability is a heap buffer overflow triggered by the snquote path in mjs/src/mjs_json.c. Impact is memory corruption with potential reliability issues as implied by the CVSS metrics (high/partial effects). The provid...
CVE-2021-46509
Cesanta MJS 2.20.0 contains a stack overflow in the snquote function (mjs/src/mjs_json.c). PT-2022-12754 documents this issue and notes a temporary workaround: restrict access to the snquote function until a patch is available; no patched version is identified in the provided documents.
PT-2022-12754 · Cesanta · Cesanta Mjs
Name of the Vulnerable Software and Affected Versions: Cesanta MJS version 2.20.0 Description: A stack overflow issue was discovered in Cesanta MJS via the snquote function at mjs/src/mjs json.c. Recommendations: For Cesanta MJS version 2.20.0, consider restricting access to the snquote function ...