34 matches found
CVE-2025-8691
creationtimestamp| type| source ---|---|--- 2025-09-11 07:36:48+00:00| seen| Telegram/b6odHhiPXCd5akrzdDVSS5DYgXS8RofvOH20-psYwOEfbKc...
Linux Distros Unpatched Vulnerability : CVE-2016-8691
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The jpcdecprocesssiz function in libjasper/jpc/jpcdec.c in JasPer before 1.900.4 allows remote attackers to cause a denial of service divide-by-zero error and...
CVE-2024-8691 PAN-OS: User Impersonation in GlobalProtect Portal
A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from...
CVE-2024-8691
creationtimestamp| type| source ---|---|--- 2024-09-11 16:00:00+00:00| seen| https://security.paloaltonetworks.com/CVE-2024-8691 2024-09-11 19:32:31+00:00| seen| https://t.me/cvedetector/5389...
RHEL 7 : jasper (Unpatched Vulnerability)
The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - jasper: heap-based buffer over-read of size 8 in jasimagedepalettize in libjasper/base/jasimage.c...
Debian: Security Advisory (DLA-739-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
K28563873: Intel Ethernet 700 Series Controllers vulnerabilities CVE-2020-8690, CVE-2020-8691, CVE-2020-8692, and CVE-2020-8693
Security Advisory Description CVE-2020-8690 Protection mechanism failure in IntelR Ethernet 700 Series Controllers before version 7.3 may allow a privileged user to potentially enable escalation of privilege and/or denial of service via local access. CVE-2020-8691 A logic issue in the firmware of...
Mageia: Security Advisory (MGASA-2017-0474)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2016:2775-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Intel® Ethernet 700 Series Controller Advisory - Lenovo Support US
No description provided...
CVE-2020-8691
CVE-2020-8691 is a vulnerability in the firmware of Intel(R) Ethernet 700 Series Controllers. The issue is a logic flaw in the firmware that may allow a privileged user to escalate privileges and/or cause a denial of service via local access. Affected products are Intel Ethernet 700 Series Contro...
Intel® Ethernet 700 Series Controller Advisory
Summary: Potential security vulnerabilities in Intel® Ethernet 700 Series Controllers may allow escalation of privilege and/or denial of service. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2020-8693 Description: Improper buff...
CVE-2019-8691
CVE-2019-8691 affects macOS Mojave 10.14.x in the Graphics Drivers component. The issue is described as a validation/input sanitization failure that could allow an application to read restricted memory. Apple notes the fix is included in macOS Mojave 10.14.6 (Security Update 2019-004 High Sierra/...
CVE-2017-8691
CVE-2017-8691 affects Windows font handling, specifically when the Windows font library processes specially crafted embedded fonts. The vulnerability allows remote code execution on Windows Server 2008 SP2/R2 SP1 and Windows 7 SP1 via a crafted embedded font, with CVSSv3.0 vector AV:N/AC:L/PR:N/U...
EulerOS 2.0 SP1 : jasper (EulerOS-SA-2017-1094)
According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to...
EulerOS 2.0 SP2 : jasper (EulerOS-SA-2017-1095)
According to the versions of the jasper package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to...
Amazon Linux AMI : jasper (ALAS-2017-836)
Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code. CVE-2016-8654 , CVE-2016-9560 , CVE-2016-10249 , CVE-2015-5203 , CVE-2015-5221 , CVE-2016-1577 , CVE-2016-8690...
Scientific Linux Security Update : jasper on SL6.x, SL7.x i386/x86_64 (20170509)
Security Fixes : Multiple flaws were found in the way JasPer decoded JPEG 2000 image files. A specially crafted file could cause an application using JasPer to crash or, possibly, execute arbitrary code. CVE-2016-8654, CVE-2016-9560, CVE-2016-10249, CVE-2015-5203, CVE-2015-5221, CVE-2016-1577,...
OracleVM 3.3 / 3.4 : jasper (OVMSA-2017-0102)
The remote OracleVM system is missing necessary patches to address critical security updates : - Bump release - Multiple security fixes fixed by thoger: CVE-2015-5203 CVE-2015-5221 CVE-2016-1577 CVE-2016-1867 CVE-2016-2089 CVE-2016-2116 CVE-2016-8654 CVE-2016-8690 CVE-2016-8691 CVE-2016-8692...
CVE-2016-8691
CVE-2016-8691 affects the JasPer JPEG-2000 library. The issue is a divide-by-zero in jpc_dec_process_siz triggered by a crafted BMP image (XRsiz value) used with the imginfo command, leading to denial of service (application crash). Public advisories confirm JasPer upstream fixes and distro updat...