Lucene search
K

21 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2002-2081

Malware in sbrugna...

5CVSS6.4AI score0.01099EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2025/05/21 8:32 p.m.7 views

CVE-2002-2102

InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service NullPointerException via an invalid block of deflated data...

5CVSS7AI score0.01099EPSS
Exploits0References1
SUSE CVE
SUSE CVE
added 2023/02/15 5:0 a.m.2 views

SUSE CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS8.8AI score0.26672EPSS
Exploits3References4
OSV
OSV
added 2022/05/13 1:9 a.m.0 views

GHSA-Q446-82VQ-W674 Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS7AI score0.26672EPSS
Exploits3References11
Github Security Blog
Github Security Blog
added 2022/05/13 1:9 a.m.33 views

Improper Limitation of a Pathname to a Restricted Directory in JCraft JSch

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS5AI score0.26672EPSS
Exploits3References12Affected Software1
Tenable Nessus
Tenable Nessus
added 2021/04/22 12:0 a.m.59 views

Oracle Primavera Gateway (Apr 2021 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote host is 16.2.x, 17.12.x prior to 17.12.11. It is, therefore, affected by multiple vulnerabilities as referenced in the April 2021 CPU advisory. - Vulnerability in the Primavera Gateway...

5.9CVSS6.4AI score0.26672EPSS
Exploits3References4
IBM Security Bulletins
IBM Security Bulletins
added 2021/03/29 9:4 p.m.115 views

Security Bulletin: Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE

Summary Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command. Vulnerability Details CVEID: CVE-2016-5725...

5.9CVSS2.5AI score0.26672EPSS
Exploits3Affected Software1
UbuntuCve
UbuntuCve
added 2017/01/19 10:59 p.m.32 views

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS6.7AI score0.26672EPSS
Exploits3References3
NVD
NVD
added 2017/01/19 10:59 p.m.14 views

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS6AI score0.26672EPSS
Exploits3References11
Prion
Prion
added 2017/01/19 10:59 p.m.19 views

Directory traversal

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

4.3CVSS7AI score0.26672EPSS
Exploits3References11Affected Software1
OSV
OSV
added 2017/01/19 10:59 p.m.8 views

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS5.7AI score0.26672EPSS
Exploits3References11
Cvelist
Cvelist
added 2017/01/19 10:0 p.m.21 views

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.8AI score0.26672EPSS
Exploits3References11
Debian CVE
Debian CVE
added 2017/01/19 10:0 p.m.24 views

CVE-2016-5725

Directory traversal vulnerability in JCraft JSch before 0.1.54 on Windows, when the mode is ChannelSftp.OVERWRITE, allows remote SFTP servers to write to arbitrary files via a ..\ dot dot backslash in a response to a recursive GET command...

5.9CVSS6.1AI score0.26672EPSS
Exploits3
CVE
CVE
added 2017/01/19 10:0 p.m.140 views

CVE-2016-5725

CVE-2016-5725 is a directory traversal flaw in JSch (JSch-JCraft) before 0.1.54 on Windows when using ChannelSftp.OVERWRITE. An attacker could cause a remote SFTP server to write arbitrary files via ..\ in a response to a recursive GET. Connected IBM advisories note related fixes/upgrades (e.g., ...

5.9CVSS5.7AI score0.26672EPSS
Exploits3References11Affected Software1
CNVD
CNVD
added 2016/09/27 12:0 a.m.1 views

JCraft JSch Directory Traversal Vulnerability

JCraft JSch is a set of secure channels for connecting to sshd servers from JCraft Japan. A directory traversal vulnerability exists in versions of JCraft JSch prior to 0.1.53, which can be exploited by an attacker to overwrite arbitrary files in an application by sending a request with the...

5.9CVSS9.5AI score0.26672EPSS
Exploits3References1
Cvelist
Cvelist
added 2005/08/05 4:0 a.m.16 views

CVE-2002-2102

InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service NullPointerException via an invalid block of deflated data...

6.6AI score0.01099EPSS
Exploits0References3
CVE
CVE
added 2005/08/05 4:0 a.m.43 views

CVE-2002-2102

CVE-2002-2102 affects JCraft JZlib prior to 0.0.7. InfBlocks.java can throw a NullPointerException when processing an invalid block of deflated data, enabling remote denial of service. Affected: JZlib (Java compression library) — InfBlocks.java path indicates the vulnerable component. Impact: Den...

5CVSS6.7AI score0.01099EPSS
Exploits0References3Affected Software1
Debian CVE
Debian CVE
added 2005/08/05 4:0 a.m.17 views

CVE-2002-2102

InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service NullPointerException via an invalid block of deflated data...

5CVSS6.3AI score0.01099EPSS
Exploits0
NVD
NVD
added 2002/12/31 5:0 a.m.12 views

CVE-2002-2102

InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service NullPointerException via an invalid block of deflated data...

5CVSS6.6AI score0.01099EPSS
Exploits0References3
OSV
OSV
added 2002/12/31 5:0 a.m.2 views

DEBIAN-CVE-2002-2102

InfBlocks.java in JCraft JZlib before 0.0.7 allow remote attackers to cause a denial of service NullPointerException via an invalid block of deflated data...

5CVSS6.8AI score0.01099EPSS
Exploits0References1
Rows per page
Query Builder