Known vulnerabilities in Mongoose - page 3

Software: Mongoose
Software CPE: cpe:2.3:a:cesanta:mongoose:*:*:*:*:*:*:*:*
Total vulnerabilities: 57
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Mongoose Mongoose is affected by 57 known vulnerabilities: 28 high, 24 medium, 5 low Critical High Medium Low

Vulnerabilities (57)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU18959 - Heap-based Buffer Overflow
CVE-2019-12951
CWE-122 High
No
No
6.15 02.07.2019 SB2019070209
#VU36385 - Memory corruption
CVE-2018-19587
CWE-119 Medium
No
No
- 27.11.2018 SB2018102927
#VU36474 - Out-of-bounds read
CVE-2018-18764
CWE-125 High
No
No
- 29.10.2018 SB2018102927
#VU36475 - Out-of-bounds read
CVE-2018-18765
CWE-125 High
No
No
- 29.10.2018 SB2018102927
#VU111841 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2009-1354
CWE-22 Low
Available
No
- 10.10.2018 SB2018101034
#VU111836 - Use After Free
CVE-2017-7185
CWE-416 Medium
Available
No
- 09.10.2018 SB2018100955
#VU37019 - Out-of-bounds read
CVE-2018-10945
CWE-125 Medium
No
No
6.12 19.06.2018 SB2018061910
#VU9108 - Use After Free
CVE-2017-2922
CWE-416 High
No
No
- 02.11.2017 SB2017110217
#VU9107 - Memory corruption
CVE-2017-2921
CWE-119 High
No
No
- 02.11.2017 SB2017110217
#VU9106 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-2909
CWE-835 Low
No
No
- 02.11.2017 SB2017110217
#VU9105 - Out-of-bounds read
CVE-2017-2895
CWE-125 Low
No
No
- 02.11.2017 SB2017110217
#VU9104 - Stack-based buffer overflow
CVE-2017-2894
CWE-121 High
No
No
- 02.11.2017 SB2017110217
#VU9103 - NULL Pointer Dereference
CVE-2017-2893
CWE-476 Low
No
No
- 02.11.2017 SB2017110217
#VU9102 - Improper input validation
CVE-2017-2892
CWE-20 High
No
No
- 02.11.2017 SB2017110217
#VU9101 - Use After Free
CVE-2017-2891
CWE-416 High
No
No
- 02.11.2017 SB2017110217
#VU111840 - Cross-Site Request Forgery (CSRF)
CVE-2017-11567
CWE-352 High
Available
No
6.9 18.09.2017 SB2017091825
#VU2935 - Memory corruption
CVE-2011-2900
CWE-119 High
Available
No
- 27.12.2016 SB2011080301
SB2011083102
SB2011083103


Showing elements 41 - 60 out of 57