Cesanta
Cesanta MJS: vulnerabilidades y CVE
Cesanta MJS tiene 85 vulnerabilidades publicadas, 1 de ellas en los últimos 12 meses. 2 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE85
Últimos 12 meses1
Críticas2
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2026-86716 | Media (5.5) | 0.57% | — | 8 sept 2026 | A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skip_spaces_and_comments of the file src/mjs_tok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be… |
| CVE-2024-35386 | Alta (7.5) | 0.60% | — | 21 may 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_gc function in the mjs.c file. |
| CVE-2024-35385 | Media (4.3) | 0.53% | — | 21 may 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_ffi_sig function in the mjs.c file. |
| CVE-2024-35384 | Media (5.5) | 0.34% | — | 21 may 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_array_length function in the mjs.c file. |
| CVE-2023-49553 | Alta (7.5) | 0.86% | — | 2 ene 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_destroy function in the msj.c file. |
| CVE-2023-49552 | Alta (7.5) | 0.76% | — | 2 ene 2024 | An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_stringify function in the msj.c file. |
| CVE-2023-49551 | Alta (7.5) | 0.76% | — | 2 ene 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_op_json_parse function in the msj.c file. |
| CVE-2023-49550 | Alta (7.5) | 0.76% | — | 2 ene 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component. |
| CVE-2023-49549 | Alta (7.5) | 0.76% | — | 2 ene 2024 | An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_getretvalpos function in the msj.c file. |
| CVE-2023-50044 | Crítica (9.8) | 0.86% | — | 20 dic 2023 | Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string. |
| CVE-2023-43338 | Crítica (9.8) | 0.99% | — | 23 sept 2023 | Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). This vulnerability allows attackers to execute arbitrary code via a crafted input. |
| CVE-2023-30088 | Media (5.5) | 0.26% | — | 9 may 2023 | An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_execute function in mjs.c. |
| CVE-2023-30087 | Media (5.5) | 0.26% | — | 9 may 2023 | Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjs_mk_string function in mjs.c. |
| CVE-2023-29570 | Media (5.5) | 0.29% | — | 24 abr 2023 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS). |
| CVE-2023-29569 | Media (5.5) | 0.28% | — | 14 abr 2023 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via ffi_cb_impl_wpwwwww at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS). |
| CVE-2023-29571 | Media (5.5) | 0.29% | — | 12 abr 2023 | Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_sweep at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS). |
| CVE-2021-36535 | Media (5.5) | 0.37% | — | 3 feb 2023 | Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjs_set_errorf. |
| CVE-2021-33449 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_part_get_by_offset() in mjs.c. |
| CVE-2021-33448 | Media (5.5) | 0.34% | — | 26 jul 2022 | An issue was discovered in mjs(mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow at 0x7fffe9049390. |
| CVE-2021-33447 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_print() in mjs.c. |
| CVE-2021-33446 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_next() in mjs.c. |
| CVE-2021-33445 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_string_char_code_at() in mjs.c. |
| CVE-2021-33444 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in getprop_builtin_foreign() in mjs.c. |
| CVE-2021-33443 | Media (5.5) | 0.34% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in mjs_execute() in mjs.c. |
| CVE-2021-33442 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in json_printf() in mjs.c. |
| CVE-2021-33441 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in exec_expr() in mjs.c. |
| CVE-2021-33440 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is NULL pointer dereference in mjs_bcode_commit() in mjs.c. |
| CVE-2021-33439 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is Integer overflow in gc_compact_strings() in mjs.c. |
| CVE-2021-33438 | Media (5.5) | 0.34% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There is stack buffer overflow in json_parse_array() in mjs.c. |
| CVE-2021-33437 | Media (5.5) | 0.31% | — | 26 jul 2022 | An issue was discovered in mjs (mJS: Restricted JavaScript engine), ES6 (JavaScript version 6). There are memory leaks in frozen_cb() in mjs.c. |