Jcraft

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Jcraft records in CISA KEV

No Jcraft vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jsch 1 record MEDIUM Jzlib 1 record LOW

Records

2 records

TI-2016-04969 CVE-2016-5725 · GHSA-q446-82vq-w674

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode…

MEDIUM 47

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ (dot dot backslash) in a response to a r…

CVSS 3.0MEDIUM 5.9 Network No auth No interaction EPSS 0.24143 Published 2017-01-19 Partial fix · 0.1.54 CWE-22

TI-2002-02021 CVE-2002-2102 · GHSA-527c-8rxj-jcj9

InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of…

LOW 27

InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service (NullPointerException) via an invalid block of deflated data.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01861 Published 2005-08-05 No fix listed

Open these records in search →

Critical	0
High	0
Medium	2
Low	0
No CVSS	0