Lucene search

K
JfreeJfreechart

6 matches found

CVE
CVE
added 2024/04/08 11:15 p.m.69 views

CVE-2024-22949

JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /chart/annotations/CategoryLineAnnotation. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been ...

9.1CVSS7.2AI score0.00122EPSS
CVE
CVE
added 2024/04/10 7:15 p.m.52 views

CVE-2023-52070

JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the 'setSeriesNeedle(int index, int type)' method. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have bee...

8.4CVSS7.1AI score0.00079EPSS
CVE
CVE
added 2024/04/10 7:15 p.m.49 views

CVE-2024-23077

JFreeChart v1.5.4 was discovered to be vulnerable to ArrayIndexOutOfBounds via the component /chart/plot/CompassPlot.java. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been based...

7.5CVSS7.1AI score0.00186EPSS
CVE
CVE
added 2007/12/11 9:46 p.m.46 views

CVE-2007-6306

Multiple cross-site scripting (XSS) vulnerabilities in the image map feature in JFreeChart 1.0.8 allow remote attackers to inject arbitrary web script or HTML via the (1) chart name or (2) chart tool tip text; or the (3) href, (4) shape, or (5) coords attribute of a chart area.

4.3CVSS8AI score0.01781EPSS
CVE
CVE
added 2024/04/10 12:15 p.m.44 views

CVE-2024-23076

JFreeChart v1.5.4 was discovered to contain a NullPointerException via the component /labels/BubbleXYItemLabelGenerator.java. NOTE: this is disputed by multiple third parties who believe there was not reasonable evidence to determine the existence of a vulnerability. The submission may have been ba...

7.5CVSS7.2AI score0.00398EPSS
CVE
CVE
added 2007/12/11 9:46 p.m.33 views

CVE-2007-6307

Multiple cross-site scripting (XSS) vulnerabilities in clickstats.php in wwwstats 3.21 allow remote attackers to inject arbitrary web script or HTML via (1) the link parameter or (2) the User-Agent HTTP header.

4.3CVSS5.8AI score0.1133EPSS