İçeriğe atla
Noroxi

JasPer Project kayıtları

jasper project üreticisine ait 102 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
8
Düzeltme kaydı olan
%84,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 21
  6. 22
  7. 24
  8. 25

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

102 kayıt
  • CVE-2008-3522
    41Planlayın

    Buffer overflow in the jas_stream_printf function in libjasper/base/jas_stream.c in JasPer 1.900.1 might allow context-dependent attackers t

    KritikCVSS 10,0İstismar yokEPSS %4

    redhat · enterprise virtualization2 Eki 2008

  • CVE-2008-3520
    38İzleyin

    Multiple integer overflows in JasPer 1.900.1 might allow context-dependent attackers to have an unknown impact via a crafted image file, rel

    KritikCVSS 9,3İstismar yokEPSS %3

    jasper project · jasper2 Eki 2008

  • CVE-2014-8138
    36İzleyin

    Heap-based buffer overflow in the jp2_decode function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (cr

    YüksekCVSS 7,5İstismar yokEPSS %18

    redhat · enterprise linux24 Ara 2014

  • CVE-2018-19541
    36İzleyin

    An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18

    YüksekCVSS 8,8İstismar yokEPSS %2

    jasper project · jasper26 Kas 2018

  • CVE-2015-8751
    36İzleyin

    Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impact via a crafted JPE

    YüksekCVSS 8,8İstismar yokEPSS %2

    jasper project · jasper17 Şub 2020

  • CVE-2018-19540
    36İzleyin

    An issue was discovered in JasPer 1.900.8, 1.900.9, 1.900.10, 1.900.11, 1.900.12, 1.900.13, 1.900.14, 1.900.15, 1.900.16, 1.900.17, 1.900.18

    YüksekCVSS 8,8İstismar yokEPSS %2

    jasper project · jasper26 Kas 2018

  • CVE-2014-9029
    35İzleyin

    Multiple off-by-one errors in the (1) jpc_dec_cp_setfromcox and (2) jpc_dec_cp_setfromrgn functions in jpc/jpc_dec.c in JasPer 1.900.1 and e

    YüksekCVSS 7,5İstismar yokEPSS %18

    jasper project · jasper8 Ara 2014

  • CVE-2014-8157
    35İzleyin

    Off-by-one error in the jpc_dec_process_sot function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of service (cra

    YüksekCVSS 7,5İstismar yokEPSS %16

    opensuse · opensuse26 Oca 2015

  • CVE-2016-9398
    32İzleyin

    The jpc_floorlog2 function in jpc_math.c in JasPer before 1.900.17 allows remote attackers to cause a denial of service (assertion failure)

    YüksekCVSS 7,5İstismar yokEPSS %5

    jasper project · jasper23 Mar 2017

  • CVE-2016-9396
    32İzleyin

    The JPC_NOMINALGAIN function in jpc/jpc_t1cod.c in JasPer through 2.0.12 allows remote attackers to cause a denial of service (JPC_COX_RFT a

    YüksekCVSS 7,5İstismar yokEPSS %5

    jasper project · jasper23 Mar 2017

  • CVE-2016-8693
    32İzleyin

    Double free vulnerability in the mem_close function in jas_stream.c in JasPer before 1.900.10 allows remote attackers to cause a denial of s

    YüksekCVSS 7,8İstismar yokEPSS %3

    jasper project · jasper15 Şub 2017

  • CVE-2016-9560
    32İzleyin

    Stack-based buffer overflow in the jpc_tsfb_getbands2 function in jpc_tsfb.c in JasPer before 1.900.30 allows remote attackers to have unspe

    YüksekCVSS 7,8İstismar yokEPSS %2

    jasper project · jasper15 Şub 2017

  • CVE-2016-10251
    32İzleyin

    Integer overflow in the jpc_pi_nextcprl function in jpc_t2cod.c in JasPer before 1.900.20 allows remote attackers to have unspecified impact

    YüksekCVSS 7,8İstismar yokEPSS %2

    jasper project · jasper15 Mar 2017

  • CVE-2016-10249
    32İzleyin

    Integer overflow in the jpc_dec_tiledecode function in jpc_dec.c in JasPer before 1.900.12 allows remote attackers to have unspecified impac

    YüksekCVSS 7,8İstismar yokEPSS %2

    jasper project · jasper15 Mar 2017

  • CVE-2016-8886
    32İzleyin

    The jas_malloc function in libjasper/base/jas_malloc.c in JasPer before 1.900.11 allows remote attackers to have unspecified impact via a cr

    YüksekCVSS 7,8İstismar yokEPSS %1

    jasper project · jasper23 Mar 2017

  • CVE-2016-9387
    32İzleyin

    Integer overflow in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c in JasPer before 1.900.13 allows remote attackers to have un

    YüksekCVSS 7,8İstismar yokEPSS %1

    jasper project · jasper23 Mar 2017

  • CVE-2016-9583
    32İzleyin

    An out-of-bounds heap read vulnerability was found in the jpc_pi_nextpcrl() function of jasper before 2.0.6 when processing crafted input.

    YüksekCVSS 7,8İstismar yokEPSS %1

    redhat · enterprise linux desktop1 Ağu 2018

  • CVE-2016-8654
    32İzleyin

    A heap-buffer overflow vulnerability was found in QMFB code in JPC codec caused by buffer being allocated with too small size.

    YüksekCVSS 7,8İstismar yokEPSS %1

    jasper project · jasper1 Ağu 2018

  • CVE-2017-6852
    32İzleyin

    Heap-based buffer overflow in the jpc_dec_decodepkt function in jpc_t2dec.c in JasPer 2.0.10 allows remote attackers to have unspecified imp

    YüksekCVSS 7,8İstismar yokEPSS %1

    jasper project · jasper15 Mar 2017

  • CVE-2014-8137
    31İzleyin

    Double free vulnerability in the jas_iccattrval_destroy function in JasPer 1.900.1 and earlier allows remote attackers to cause a denial of

    OrtaCVSS 6,8İstismar yokEPSS %14

    jasper project · jasper24 Ara 2014

  • CVE-2014-8158
    31İzleyin

    Multiple stack-based buffer overflows in jpc_qmfb.c in JasPer 1.900.1 and earlier allow remote attackers to cause a denial of service (crash

    OrtaCVSS 6,8İstismar yokEPSS %14

    jasper project · jasper26 Oca 2015

  • CVE-2017-13748
    31İzleyin

    There are lots of memory leaks in JasPer 2.0.12, triggered in the function jas_strdup() in base/jas_string.c, that will lead to a remote den

    YüksekCVSS 7,5İstismar yokEPSS %4

    jasper project · jasper29 Ağu 2017

  • CVE-2016-9389
    31İzleyin

    The jpc_irct and jpc_iict functions in jpc_mct.c in JasPer before 1.900.14 allow remote attackers to cause a denial of service (assertion fa

    YüksekCVSS 7,5İstismar yokEPSS %4

    jasper project · jasper23 Mar 2017

  • CVE-2016-9391
    31İzleyin

    The jpc_bitstream_getbits function in jpc_bs.c in JasPer before 2.0.10 allows remote attackers to cause a denial of service (assertion failu

    YüksekCVSS 7,5İstismar yokEPSS %4

    jasper project · jasper23 Mar 2017

  • CVE-2016-10248
    31İzleyin

    The jpc_tsfb_synthesize function in jpc_tsfb.c in JasPer before 1.900.9 allows remote attackers to cause a denial of service (NULL pointer d

    YüksekCVSS 7,5İstismar yokEPSS %4

    jasper project · jasper15 Mar 2017