Vulnerabilities

TI-2024-00381 CVE-2024-0419 · GHSA-827x-jcqr-j5w5

Jasper httpdx HTTP POST Request denial of service

HIGH 72

A vulnerability was found in Jasper httpdx up to 1.5.4 and classified as problematic.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01142 Published 2024-01-11 No fix listed CWE-404

TI-2016-07821 CVE-2016-9600 · GHSA-r486-9x35-xf6g

NULL pointer dereference in jasper

LOW 32

JasPer before version 2.0.10 is vulnerable to a null pointer dereference was found in the decoded creation of JPEG 2000 image files.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0146 Published 2018-03-12 Partial fix CWE-476

TI-2009-04526 CVE-2009-4770 · GHSA-3g3v-w4xh-5w8p

The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default…

LOW 35

The FTP server component in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 has a default password of pass123 for the moderator account, which makes it easier for remote attackers to obtain privileged access.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01272 Published 2010-04-20 No fix listed CWE-255

TI-2009-04525 CVE-2009-4769 · GHSA-72h8-x8gh-6pw7

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6…

HIGH 67

Multiple format string vulnerabilities in the tolog function in httpdx 1.4, 1.4.5, 1.4.6, 1.4.6b, and 1.5 allow (1) remote attackers to execute arbitrary code via format string specifiers in a GET request to the HTTP ser…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.37895 Published 2010-04-20 No fix listed CWE-134

TI-2009-04287 CVE-2009-4531 · GHSA-32cq-h35v-hv9g

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page…

LOW 33

httpdx 1.4.4 and earlier allows remote attackers to obtain the source code for a web page by appending a .

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07111 Published 2009-12-31 No fix listed CWE-200

TI-2009-03535 CVE-2009-3711 · GHSA-wgqh-fmw6-rm93

Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and…

HIGH 78

Stack-based buffer overflow in the h_handlepeer function in http.cpp in httpdx 1.4, and possibly 1.4.3, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.63909 Published 2009-10-16 No fix listed CWE-119

TI-2009-03499 CVE-2009-3663 · GHSA-gj4q-m5q3-4wfq

Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server…

MEDIUM 58

Format string vulnerability in the h_readrequest function in http.c in httpdx Web Server 1.4 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via format string specifiers in the Host…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.14632 Published 2009-10-11 No fix listed CWE-134