MJ
Product
mJS
85
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 19Medium 64Low 0
Watch
Add mJS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-46527 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c Affected: 2.20.0 |
| CVE-2021-46526 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs_json.c Affected: 2.20.0 |
| CVE-2021-46525 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c Affected: 2.20.0 |
| CVE-2021-46524 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c Affected: 2.20.0 |
| CVE-2021-46523 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c Affected: 2.20.0 |
| CVE-2021-46522 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53 Affected: 2.20.0 |
| CVE-2021-46521 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src/common/str_util.c Affected: 2.20.0 |
| CVE-2021-46520 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c Affected: 2.20.0 |
| CVE-2021-46519 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c Affected: 2.20.0 |
| CVE-2021-46518 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c Affected: 2.20.0 |
| CVE-2021-46513 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjs_mk_string at mjs/src/mjs_string.c Affected: 2.20.0 |
| CVE-2021-46509 | 7.8 | Jan 27 | Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c Affected: 2.20.0 |
| CVE-2024-35386 | 7.5 | May 21 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file Affected: 2.20.0 |
| CVE-2023-49553 | 7.5 | Jan 2 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the msj.c file Affected: 2.20.0 |
| CVE-2023-49552 | 7.5 | Jan 2 | An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file Affected: 2.20.0 |
| CVE-2023-49551 | 7.5 | Jan 2 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_parse function in the msj.c file Affected: 2.20.0 |
| CVE-2023-49550 | 7.5 | Jan 2 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component Affected: 2.20.0 |
| CVE-2023-49549 | 7.5 | Jan 2 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function in the msj.c file Affected: 2.20.0 |
| CVE-2026-86716 | 7.3 | Sep 8 | Cesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow Affected: 1.0; 1.1; 1.2; 1.3; 1.4; 1.5; +21 more |
Showing 19
