Vulnerabilities > Cesanta > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-12-20 | CVE-2023-50044 | Classic Buffer Overflow vulnerability in Cesanta MJS 2.22.0 Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string. | 9.8 |
| 2023-09-23 | CVE-2023-43338 | Out-of-bounds Write vulnerability in Cesanta MJS 2.20.0 Cesanta mjs v2.20.0 was discovered to contain a function pointer hijacking vulnerability via the function mjs_get_ptr(). | 9.8 |
| 2021-04-29 | CVE-2021-31875 | Off-by-one Error vulnerability in Cesanta Mongooseos MJS 1.26 In mjs_json.c in Cesanta MongooseOS mJS 1.26, a maliciously formed JSON string can trigger an off-by-one heap-based buffer overflow in mjs_json_parse, which can potentially lead to redirection of control flow. | 9.8 |
| 2020-09-18 | CVE-2020-25756 | Classic Buffer Overflow vulnerability in Cesanta Mongoose 6.18 A buffer overflow vulnerability exists in the mg_get_http_header function in Cesanta Mongoose 6.18 due to a lack of bounds checking. | 9.8 |