Where
-Infinity
0

Trending

Last week
Last month
Last year

mJSCesanta mJS mjs_tok.c skip_spaces_and_comments heap-based overflow

Risk 52
Severity
5.5
Buffer Overflow
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

A vulnerability was determined in Cesanta mJS up to 1.26. Affected is the function skipspacesandcomments of the file src/mjstok.c. Executing a manipulation can lead to heap-based buffer overflow. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The project was informed of the problem early through an issue report but has not responded yet.

First published (updated )
CVE-2026-86716

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_des…

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdestroy function in the msj.c file.

First published (updated )
CVE-2023-49553

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4…

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs+0x4ec508 component.

First published (updated )
CVE-2023-49550

Cesanta mJSInput Validation

Risk 40
Severity
5.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsarraylength function in the mjs.c file.

First published (updated )
CVE-2024-35384

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_mk_…

Risk 22
Severity
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsmkffisig function in the mjs.c file.

First published (updated )
CVE-2024-35385

Cesanta mJSAn issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjs_do_…

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsdogc function in the mjs.c file.

First published (updated )
CVE-2024-35386

Cesanta mJSAn Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service v…

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An Out of Bounds Write in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsopjsonstringify function in the msj.c file.

First published (updated )
CVE-2023-49552

Cesanta mJSBuffer Overflow

Risk 32
Severity
5.5
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Buffer Overflow vulnerability in Cesanta mJS 1.26 allows remote attackers to cause a denial of service via crafted .js file to mjsseterrorf.

First published (updated )
CVE-2021-36535

Cesanta mJSBuffer Overflow

Risk 31
Severity
5.5
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gcsweep at src/mjsgc.c. This vulnerability can lead to a Denial of Service (DoS).

First published (updated )
CVE-2023-29571

Cesanta mJSNull Pointer Dereference

Risk 31
Severity
5.5
Null Pointer Dereference
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via fficbimplwpwwwww at src/mjsffi.c. This vulnerability can lead to a Denial of Service (DoS).

First published (updated )
CVE-2023-29569

Cesanta mJSCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_ffi_cb_free at src/mjs_ff…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsfficbfree at src/mjsffi.c. This vulnerability can lead to a Denial of Service (DoS).

First published (updated )
CVE-2023-29570

Cesanta mJSBuffer Overflow

Risk 32
Severity
5.5
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

An issue found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjsexecute function in mjs.c.

First published (updated )
CVE-2023-30088

Cesanta mJSBuffer Overflow

Risk 32
Severity
5.5
Buffer Overflow
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Buffer Overflow vulnerability found in Cesanta MJS v.1.26 allows a local attacker to cause a denial of service via the mjsmkstring function in mjs.c.

First published (updated )
CVE-2023-30087

Cesanta mJSCesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the fun…

Risk 86
Severity
9.8
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjsgetptr(). This vulnerability allows attackers to execute arbitrary code via a crafted input.

First published (updated )
CVE-2023-43338

Cesanta mJSInput Validation

Risk 43
Severity
7.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

An issue in Cesanta mjs 2.20.0 allows a remote attacker to cause a denial of service via the mjsopjsonparse function in the msj.c file.

First published (updated )
CVE-2023-49551

Cesanta mJSStack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause …

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parseequality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36375

Cesanta mJSStack overflow vulnerability in parse_mul_div_rem Cesanta MJS 1.20.1, allows remote attackers to cau…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parsemuldivrem Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36371

Cesanta mJSStack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to caus…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parseplusminus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36372

Cesanta mJSStack overflow vulnerability in parse_value Cesanta MJS 1.20.1, allows remote attackers to cause a D…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parsevalue Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36366

Cesanta mJSStack overflow vulnerability in parse_statement_list Cesanta MJS 1.20.1, allows remote attackers to …

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parsestatementlist Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36369

Cesanta mJSStack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a …

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parseshifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36373

Cesanta mJSStack overflow vulnerability in parse_unary Cesanta MJS 1.20.1, allows remote attackers to cause a D…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parseunary Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36370

Cesanta mJSStack overflow vulnerability in parse_statement Cesanta MJS 1.20.1, allows remote attackers to cause…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parsestatement Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36368

Cesanta mJSStack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to caus…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parsecomparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36374

Cesanta mJSStack overflow vulnerability in parse_block Cesanta MJS 1.20.1, allows remote attackers to cause a D…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parseblock Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-36367

Cesanta mJSStack overflow vulnerability in parse_array Cesanta MJS 1.20.1, allows remote attackers to cause a D…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Stack overflow vulnerability in parsearray Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.

First published (updated )
CVE-2020-18392

Cesanta mJSCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_compact_strings at src/mjs…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gccompactstrings at src/mjsgc.c. This vulnerability can lead to a Denial of Service (DoS).

First published (updated )
CVE-2021-46538

Cesanta mJSCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c6ae. T…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c6ae. This vulnerability can lead to a Denial of Service (DoS).

First published (updated )
CVE-2021-46541

Cesanta mJSCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add_lineno_map_item at src/mj…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via addlinenomapitem at src/mjsbcode.c. This vulnerability can lead to a Denial of Service (DoS).

First published (updated )
CVE-2021-46548

Cesanta mJSCesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_get_mjs at src/mjs_builti…

Risk 31
Severity
5.5
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjsgetmjs at src/mjsbuiltin.c. This vulnerability can lead to a Denial of Service (DoS).

First published (updated )
CVE-2021-46540

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203