Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
125 results · page 2 of 3
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_json_stringify at src/mjs_json.c.CVE-2021-46554 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_json_stringify at src/mjs_json.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_set_internal at src/mjs_object.c.CVE-2021-46553 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_set_internal at src/mjs_object.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src/mjs_json.c.CVE-2021-46550 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via free_json_frame at src/mjs_json.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse_cval_type at src/mjs_ffi.c.CVE-2021-46549 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via parse_cval_type at src/mjs_ffi.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add_lineno_map_item at src/mjs_bcode.c.CVE-2021-46548 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via add_lineno_map_item at src/mjs_bcode.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c17e.CVE-2021-46547 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c17e. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_next at src/mjs_object.c.CVE-2021-46546 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_next at src/mjs_object.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x4b44b.CVE-2021-46545 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x4b44b. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x59e19.CVE-2021-46544 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/lib/x86_64-linux-gnu/libasan.so.4+0x59e19. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x18e810.CVE-2021-46543 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x18e810. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_print at src/mjs_builtin.c.CVE-2021-46542 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_print at src/mjs_builtin.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c6ae.CVE-2021-46541 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x2c6ae. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_get_mjs at src/mjs_builtin.c.CVE-2021-46540 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_get_mjs at src/mjs_builtin.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x45a1f.CVE-2021-46539 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /lib/x86_64-linux-gnu/libc.so.6+0x45a1f. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_compact_strings at src/mjs_gc.c.CVE-2021-46538 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via gc_compact_strings at src/mjs_gc.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e.CVE-2021-46537 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x9a30e. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0xe533e.CVE-2021-46535 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0xe533e. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getprop_builtin_foreign at src/mjs_exec.c.CVE-2021-46534 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via getprop_builtin_foreign at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via exec_expr at src/mjs_exec.c.CVE-2021-46532 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via exec_expr at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e.CVE-2021-46531 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8d28e. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_execute at src/mjs_exec.c.CVE-2021-46530 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_execute at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8814e.CVE-2021-46529 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x8814e. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e.CVE-2021-46528 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via /usr/local/bin/mjs+0x5361e. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c.CVE-2021-46527 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_get_cstring at src/mjs_string.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs_json.c.CVE-2021-46526 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via snquote at src/mjs_json.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c.CVE-2021-46525 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a heap-use-after-free via mjs_apply at src/mjs_exec.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c.CVE-2021-46524 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via snquote at mjs/src/mjs_json.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c.CVE-2021-46523 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via to_json_or_debug at mjs/src/mjs_json.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53.CVE-2021-46522 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via /usr/lib/x86_64-linux-gnu/libasan.so.4+0xaff53.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src/common/str_util.c.CVE-2021-46521 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via c_vsnprintf at mjs/src/common/str_util.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c.CVE-2021-46520 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_jprintf at src/mjs_util.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c.CVE-2021-46519 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_array_length at src/mjs_array.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c.CVE-2021-46518 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a heap buffer overflow via mjs_disown at src/mjs_core.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022There is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.CVE-2021-46517 · Other software · Cesanta · reported by MITREMedium 5.5
There is an Assertion `mjs_stack_size(&mjs->scopes) > 0' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_stack_size at mjs/src/mjs_core.c.CVE-2021-46516 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_stack_size at mjs/src/mjs_core.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022There is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.CVE-2021-46515 · Other software · Cesanta · reported by MITREMedium 5.5
There is an Assertion `mjs_stack_size(&mjs->scopes) >= scopes_len' failed at src/mjs_exec.c in Cesanta MJS v2.20.0.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022There is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.CVE-2021-46514 · Other software · Cesanta · reported by MITREMedium 5.5
There is an Assertion 'ppos != NULL && mjs_is_number(*ppos)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjs_mk_string at mjs/src/mjs_string.c.CVE-2021-46513 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a global buffer overflow via mjs_mk_string at mjs/src/mjs_string.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_apply at src/mjs_exec.c.CVE-2021-46512 · Other software · Cesanta · reported by MITREMedium 5.5
Cesanta MJS v2.20.0 was discovered to contain a SEGV vulnerability via mjs_apply at src/mjs_exec.c. This vulnerability can lead to a Denial of Service (DoS).
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022There is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.CVE-2021-46511 · Other software · Cesanta · reported by MITREMedium 5.5
There is an Assertion `m->len >= sizeof(v)' failed at src/mjs_core.c in Cesanta MJS v2.20.0.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022There is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc.c in Cesanta MJS v2.20.0.CVE-2021-46510 · Other software · Cesanta · reported by MITREMedium 5.5
There is an Assertion `s < mjs->owned_strings.buf + mjs->owned_strings.len' failed at src/mjs_gc.c in Cesanta MJS v2.20.0.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c.CVE-2021-46509 · Other software · Cesanta · reported by MITREHigh 7.8
Cesanta MJS v2.20.0 was discovered to contain a stack overflow via snquote at mjs/src/mjs_json.c.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jan 27, 2022There is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0.CVE-2021-46508 · Other software · Cesanta · reported by MITREMedium 5.5
There is an Assertion `i < parts_cnt' failed at src/mjs_bcode.c in Cesanta MJS v2.20.0.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Nov 13, 2021The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json.CVE-2021-43616 · Other software · Npmjs · reported by MITRECritical 9
The npm ci command in npm 7.x and 8.x through 8.1.3 proceeds with an installation even if dependency information in package-lock.json differs from package.json. This behavior is inconsistent with the documentation, and makes it easier for attackers to install malware that was supposed to have been blocked by an exact version match requirement in package-lock.json. NOTE: The npm team believes this is not a vulnerability. It would require someone to socially engineer package.json which has different dependencies than package-lock.json. That user would have to have file system or write access to change dependencies. The npm team states preventing malicious actors from socially engineering or gaining file system access is outside the scope of the npm CLI.
- Product
- NPM
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recorddocs.npmjs.comdocs.npmjs.com
Sep 15, 2021prism is vulnerable to Inefficient Regular Expression ComplexityCVE-2021-3801 · Other software · prismjs · reported by security@huntr.devMedium 6.5
prism is vulnerable to Inefficient Regular Expression Complexity
- Product
- prismjs/prism
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 28, 2021Prism is a syntax highlighting library.CVE-2021-32723 · Other software · PrismJS · reported by GitHubHigh 7.4
Prism is a syntax highlighting library. Some languages before 1.24.0 are vulnerable to Regular Expression Denial of Service (ReDoS). When Prism is used to highlight untrusted (user-given) text, an attacker can craft a string that will take a very very long time to highlight. This problem has been fixed in Prism v1.24. As a workaround, do not use ASCIIDoc or ERB to highlight untrusted text. Other languages are not affected and can be used to highlight untrusted text.
- Product
- prism
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 28, 2021Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.CVE-2020-36375 · Other software · Cesanta · reported by MITREMedium 5.5
Stack overflow vulnerability in parse_equality Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 28, 2021Stack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.CVE-2020-36374 · Other software · Cesanta · reported by MITREMedium 5.5
Stack overflow vulnerability in parse_comparison Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 28, 2021Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.CVE-2020-36373 · Other software · Cesanta · reported by MITREMedium 5.5
Stack overflow vulnerability in parse_shifts Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
May 28, 2021Stack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.CVE-2020-36372 · Other software · Cesanta · reported by MITREMedium 5.5
Stack overflow vulnerability in parse_plus_minus Cesanta MJS 1.20.1, allows remote attackers to cause a Denial of Service (DoS) via a crafted file.
- Product
- MJS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.