MU
Product
Mujs
30
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 8High 18Medium 4Low 0
Watch
Add Mujs to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-44789 | 8.8 | Nov 23 | A logical issue in O_getOwnPropertyDescriptor() in Artifex MuJS 1.0.0 through 1.3.x before 1.3.2 allows an attacker to achieve Remote Code Execution through memory corruption, via… Affected: 1.0.0 before 1.3.2 |
| CVE-2020-24343 | 7.8 | Aug 13 | Artifex MuJS through 1.0.7 has a use-after-free in jsrun.c because of unconditional marking in jsgc.c Affected: through 1.0.7 |
| CVE-2017-5628 | 7.8 | Jan 30 | An issue was discovered in Artifex Software, Inc Affected: before 2017-01-24 |
| CVE-2017-5627 | 7.8 | Jan 30 | An issue was discovered in Artifex Software, Inc Affected: before 2017-01-24 |
| CVE-2021-33796 | 7.5 | Jul 7 | In MuJS before version 1.1.2, a use-after-free flaw in the regexp source property access may cause denial of service Affected: before 1.1.2 |
| CVE-2020-22886 | 7.5 | Jul 13 | Buffer overflow vulnerability in function jsG_markobject in jsgc.c in mujs before 1.0.8, allows remote attackers to cause a denial of service Affected: before 1.0.8 |
| CVE-2020-22885 | 7.5 | Jul 13 | Buffer overflow vulnerability in mujs before 1.0.8 due to recursion in the GC scanning phase, allows remote attackers to cause a denial of service Affected: before 1.0.8 |
| CVE-2019-11413 | 7.5 | Apr 22 | An issue was discovered in Artifex MuJS 1.0.5 Affected: 1.0.5 |
| CVE-2019-11412 | 7.5 | Apr 22 | An issue was discovered in Artifex MuJS 1.0.5 Affected: 1.0.5 |
| CVE-2016-10132 | 7.5 | Mar 24 | regexp.c in Artifex Software, Inc Affected: All versions, or not specified |
| CVE-2016-9108 | 7.5 | Feb 3 | Integer overflow in the js_regcomp function in regexp.c in Artifex Software, Inc Affected: through 2016-10-31 |
| CVE-2016-9109 | 7.5 | Jan 18 | Artifex Software MuJS allows attackers to cause a denial of service (crash) via vectors related to incomplete escape sequences Affected: All versions, or not specified |
| CVE-2016-7564 | 7.5 | Jan 18 | Heap-based buffer overflow in the Fp_toString function in jsfunction.c in Artifex Software MuJS allows attackers to cause a denial of service (crash) via crafted input Affected: All versions, or not specified |
| CVE-2016-7563 | 7.5 | Jan 18 | The chartorune function in Artifex Software MuJS allows attackers to cause a denial of service (out-of-bounds read) via a * (asterisk) at the end of the input Affected: All versions, or not specified |
| CVE-2016-9294 | 7.5 | Nov 12 | Artifex Software, Inc Affected: before 2016-10-26 |
| CVE-2016-9136 | 7.5 | Nov 3 | Artifex Software, Inc Affected: through 2016-10-31 |
| CVE-2016-7506 | 7.5 | Oct 29 | An out-of-bounds read vulnerability was observed in Sp_replace_regexp function of Artifex Software, Inc Affected: through 8c805b4eb19cf2af689c860b77e6111d2ee439d5 |
| CVE-2016-9017 | 7.5 | Oct 28 | Artifex Software, Inc Affected: through 5c337af4b3df80cf967e4f9f6a21522de84b392a |
Showing 18