Jaspersoft Jasper Reports JRLoader Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Jaspersoft Jasper Reports. Interaction with this library is required to exploit this vulnerability but attack vectors may vary depending on the implementation. The specific flaw exists within the...

EUVD-2025-24129

Malicious code in bioql PyPI...

EUVD-2024-16550

Malicious code in bioql PyPI...

EUVD-2025-24133

Malicious code in bioql PyPI...

EUVD-2025-24131

Malicious code in bioql PyPI...

EUVD-2024-16214

Malicious code in bioql PyPI...

EUVD-2022-44022

Malicious code in bioql PyPI...

EUVD-2022-35184

Malicious code in bioql PyPI...

EUVD-2022-52681

Malicious code in bioql PyPI...

EUVD-2023-55979

Malicious code in bioql PyPI...

CVE-2025-8837 affecting package jasper for versions less than 2.0.32-5

CVE-2025-8837 affecting package jasper for versions less than 2.0.32-5. A patched version of the package is available...

CVE-2025-8836 affecting package jasper for versions less than 2.0.32-5

CVE-2025-8836 affecting package jasper for versions less than 2.0.32-5. A patched version of the package is available...

CLSA-2025-1759498325 jasper: Fix of CVE-2025-8837

CVE-2025-8837: fix use after free vulnerability in jpcdecdump function...

Advisory ROSA-SA-2025-3027

software: jasper 2.0.33 WASP: ROSA-CHROME unaffected versions = jasper-2.0.33-2 affected versions jasper-2.0.33-2 CVE-ID: CVE-2025-8835 BDU-ID: None CVE-Crit: LOW CVE-DESC.: A vulnerability in JasPer before version 4.2.5 allows a crash due to null pointer dereferencing in the jasimagechclrspc...

PT-2025-39741

🚨 SUSE Security Alert: Patch Jasper NOW! 🚨 CVE-2024-63874: A heap-based buffer overflow in Jasper lib Moderate severity can lead to RCE. Affects SLES 12/15 & openSUSE Leap. Read more: 👉 https://t.co/DHVCfWk6hR Security https://t.co/iMm7RhS5Oz...

CVE-2025-8837 affecting package jasper for versions less than 4.2.1-3

CVE-2025-8837 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...

CVE-2025-8836 affecting package jasper for versions less than 4.2.1-3

CVE-2025-8836 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...

CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3

CVE-2025-8835 affecting package jasper for versions less than 4.2.1-3. A patched version of the package is available...

SUSE: Security Advisory (SUSE-SU-2025:03219-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLED15 / SLES15 Security Update : jasper (SUSE-SU-2025:03219-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03219-1 advisory. - CVE-2025-8835: missing range check in the JPEG-2000 JPC Encoder leads to assertion failure and crash when...