VendorsCesantamjsall versions
Vulnerabilities

Cesanta mJS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

84CVEs
CVE-2021-46517
There is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46529
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8814e. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46528
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46530
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_execute at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46531
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46514
There is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46532
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via exec_expr at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46534
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getprop_builtin_foreign at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46550
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src/mjs_json.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46535
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0xe533e. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46537
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46538
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_compact_strings at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46508
There is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0.
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46539
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x45a1f. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46540
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_get_mjs at src/mjs_builtin.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46541
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c6ae. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46542
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_print at src/mjs_builtin.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46510
There is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc.c in Cesanta MJS v2.20.0.
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46543
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x18e810. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46512
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_apply at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46544
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x59e19. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46511
There is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-46545
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x4b44b. This vulnerability can lead to a Denial of Service (DoS).
Published 2022-01-27 · Modified
5.5EPSS 0.006
CVE-2021-36535
Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf.
Published 2023-02-03 · Modified
5.5EPSS 0.004
CVE-2024-35384
An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file.
Published 2024-05-21 · Analyzed
5.5EPSS 0.003
CVE-2021-33438
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33448
An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33443
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33444
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33445
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_code_at() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33440
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33446
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33441
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33447
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33442
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33437
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks in frozen_cb() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33439
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2021-33449
An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offset() in mjs.c.
Published 2022-07-26 · Modified
5.5EPSS 0.003
CVE-2023-29571
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2023-04-12 · Modified
5.5EPSS 0.003
CVE-2023-29570
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
Published 2023-04-24 · Modified
5.5EPSS 0.003
← Prev2 / 3Next →