logo
DATABASE RESOURCES PRICING ABOUT US

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-5.20.3)

2022-09-01T00:00:00

Description

The version of AOS installed on the remote host is prior to 5.20.3. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AOS-5.20.3 advisory. - xpointer.c in libxml2 before 2.9.5 (as used in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3, and other products) does not forbid namespace nodes in XPointer ranges, which allows remote attackers to execute arbitrary code or cause a denial of service (use-after-free and memory corruption) via a crafted XML document. (CVE-2016-4658) - A flaw was found in the way RTAS handled memory accesses in userspace to kernel communication. On a locked down (usually due to Secure Boot) guest system running on top of PowerVM or KVM hypervisors (pseries platform) a root like local user could use this flaw to further increase their privileges to that of a running kernel. (CVE-2020-27777) - An issue was discovered in the Linux kernel before 5.10. drivers/infiniband/core/ucma.c has a use-after- free because the ctx is reached via the ctx_list in some ucma_migrate_id situations where ucma_close is called, aka CID-f5449e74802c. (CVE-2020-36385) - A flaw was found in RPM's signature check functionality when reading a package file. This flaw allows an attacker who can convince a victim to install a seemingly verifiable package, whose signature header was modified, to cause RPM database corruption and execute code. The highest threat from this vulnerability is to data integrity, confidentiality, and system availability. (CVE-2021-20271) - An issue was discovered in Linux: KVM through Improper handling of VM_IO|VM_PFNMAP vmas in KVM can bypass RO checks and can lead to pages being freed while still accessible by the VMM and guest. This allows users with the ability to start and control a VM to read/write random pages of memory and can result in local privilege escalation. (CVE-2021-22543) - A heap out-of-bounds write affecting Linux since v2.6.19-rc1 was discovered in net/netfilter/x_tables.c. This allows an attacker to gain privileges or cause a DoS (via heap memory corruption) through user name space (CVE-2021-22555) - Calls to EVP_CipherUpdate, EVP_EncryptUpdate and EVP_DecryptUpdate may overflow the output length argument in some cases where the input length is close to the maximum permissable length for an integer on the platform. In such cases the return value from the function call will be 1 (indicating success), but the output length value will be negative. This could cause applications to behave incorrectly or crash. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x). (CVE-2021-23840) - The OpenSSL public API function X509_issuer_and_serial_hash() attempts to create a unique hash value based on the issuer and serial number data contained within an X509 certificate. However it fails to correctly handle any errors that may occur while parsing the issuer field (which might occur if the issuer field is maliciously constructed). This may subsequently result in a NULL pointer deref and a crash leading to a potential denial of service attack. The function X509_issuer_and_serial_hash() is never directly called by OpenSSL itself so applications are only vulnerable if they use this function directly and they use it on certificates that may have been obtained from untrusted sources. OpenSSL versions 1.1.1i and below are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1j. OpenSSL versions 1.0.2x and below are affected by this issue. However OpenSSL 1.0.2 is out of support and no longer receiving public updates. Premium support customers of OpenSSL 1.0.2 should upgrade to 1.0.2y. Other users should upgrade to 1.1.1j. Fixed in OpenSSL 1.1.1j (Affected 1.1.1-1.1.1i). Fixed in OpenSSL 1.0.2y (Affected 1.0.2-1.0.2x). (CVE-2021-23841) - In BIND 9.8.5 -> 9.8.8, 9.9.3 -> 9.11.29, 9.12.0 -> 9.16.13, and versions BIND 9.9.3-S1 -> 9.11.29-S1 and 9.16.8-S1 -> 9.16.13-S1 of BIND 9 Supported Preview Edition, as well as release versions 9.17.0 -> 9.17.11 of the BIND 9.17 development branch, when a vulnerable version of named receives a malformed IXFR triggering the flaw described above, the named process will terminate due to a failed assertion the next time the transferred secondary zone is refreshed. (CVE-2021-25214) - BPF JIT compilers in the Linux kernel through 5.11.12 have incorrect computation of branch displacements, allowing them to execute arbitrary code within the kernel context. This affects arch/x86/net/bpf_jit_comp.c and arch/x86/net/bpf_jit_comp32.c. (CVE-2021-29154) - An issue was discovered in the Linux kernel before 5.11.11. The netfilter subsystem allows attackers to cause a denial of service (panic) because net/netfilter/x_tables.c and include/linux/netfilter/x_tables.h lack a full memory barrier upon the assignment of a new table value, aka CID-175e476b8cdf. (CVE-2021-29650) - A vulnerability in the JNDI Realm of Apache Tomcat allows an attacker to authenticate using variations of a valid user name and/or to bypass some of the protection provided by the LockOut Realm. This issue affects Apache Tomcat 10.0.0-M1 to 10.0.5; 9.0.0.M1 to 9.0.45; 8.5.0 to 8.5.65. (CVE-2021-30640) - net/bluetooth/hci_request.c in the Linux kernel through 5.12.2 has a race condition for removal of the HCI controller. (CVE-2021-32399) - Apache Tomcat 10.0.0-M1 to 10.0.6, 9.0.0.M1 to 9.0.46 and 8.5.0 to 8.5.66 did not correctly parse the HTTP transfer-encoding request header in some circumstances leading to the possibility to request smuggling when used with a reverse proxy. Specifically: - Tomcat incorrectly ignored the transfer encoding header if the client declared it would only accept an HTTP/1.0 response; - Tomcat honoured the identify encoding; and - Tomcat did not ensure that, if present, the chunked encoding was the final encoding. (CVE-2021-33037) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.9 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N). (CVE-2021-35550) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). (CVE-2021-35556) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). (CVE-2021-35559) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). (CVE-2021-35561) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N). (CVE-2021-35564) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). (CVE-2021-35565) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows low privileged attacker with network access via Kerberos to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Oracle GraalVM Enterprise Edition, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 6.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:N/A:N). (CVE-2021-35567) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability can only be exploited by supplying data to APIs in the specified Component without using Untrusted Java Web Start applications or Untrusted Java applets, such as through a web service. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). (CVE-2021-35578) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L). (CVE-2021-35586) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 7u311, 8u301; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Oracle GraalVM Enterprise Edition. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.1 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:L). (CVE-2021-35588) - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Java SE, Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component, e.g., through a web service which supplies data to the APIs. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N). (CVE-2021-35603) - A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the int_ctl field, this issue could allow a malicious L1 to enable AVIC support (Advanced Virtual Interrupt Controller) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. This flaw affects Linux kernel versions prior to 5.14-rc7. (CVE-2021-3653) - A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block) provided by the L1 guest to spawn/handle a nested guest (L2). Due to improper validation of the virt_ext field, this issue could allow a malicious L1 to disable both VMLOAD/VMSAVE intercepts and VLS (Virtual VMLOAD/VMSAVE) for the L2 guest. As a result, the L2 guest would be allowed to read/write physical pages of the host, resulting in a crash of the entire system, leak of sensitive data or potential guest-to-host escape. (CVE-2021-3656) - A flaw was found in the Routing decision classifier in the Linux kernel's Traffic Control networking subsystem in the way it handled changing of classification filters, leading to a use-after-free condition. This flaw allows unprivileged local users to escalate their privileges on the system. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. (CVE-2021-3715) - arch/powerpc/kvm/book3s_rtas.c in the Linux kernel through 5.13.5 on the powerpc platform allows KVM guest OS users to cause host OS memory corruption via rtas_args.nargs, aka CID-f62f3c20647e. (CVE-2021-37576) - A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier. (CVE-2021-40438) - sshd in OpenSSH 6.2 through 8.x before 8.8, when certain non-default configurations are used, allows privilege escalation because supplemental groups are not initialized as expected. Helper programs for AuthorizedKeysCommand and AuthorizedPrincipalsCommand may run with privileges associated with group memberships of the sshd process, if the configuration specifies running the command as a different user. (CVE-2021-41617) - The fix for bug 63362 present in Apache Tomcat 10.1.0-M1 to 10.1.0-M5, 10.0.0-M1 to 10.0.11, 9.0.40 to 9.0.53 and 8.5.60 to 8.5.71 introduced a memory leak. The object introduced to collect metrics for HTTP upgrade connections was not released for WebSocket connections once the connection was closed. This created a memory leak that, over time, could lead to a denial of service via an OutOfMemoryError. (CVE-2021-42340) - ** DISPUTED ** An issue was discovered in the Bidirectional Algorithm in the Unicode Specification through 14.0. It permits the visual reordering of characters via control sequences, which can be used to craft source code that renders different logic than the logical ordering of tokens ingested by compilers and interpreters. Adversaries can leverage this to encode source code for compilers accepting Unicode such that targeted vulnerabilities are introduced invisibly to human reviewers. NOTE: the Unicode Consortium offers the following alternative approach to presenting this concern. An issue is noted in the nature of international text that can affect applications that implement support for The Unicode Standard and the Unicode Bidirectional Algorithm (all versions). Due to text display behavior when text includes left-to- right and right-to-left characters, the visual order of tokens may be different from their logical order. Additionally, control characters needed to fully support the requirements of bidirectional text can further obfuscate the logical order of tokens. Unless mitigated, an adversary could craft source code such that the ordering of tokens perceived by human reviewers does not match what will be processed by a compiler/interpreter/etc. The Unicode Consortium has documented this class of vulnerability in its document, Unicode Technical Report #36, Unicode Security Considerations. The Unicode Consortium also provides guidance on mitigations for this class of issues in Unicode Technical Standard #39, Unicode Security Mechanisms, and in Unicode Standard Annex #31, Unicode Identifier and Pattern Syntax. Also, the BIDI specification allows applications to tailor the implementation in ways that can mitigate misleading visual reordering in program text; see HL4 in Unicode Standard Annex #9, Unicode Bidirectional Algorithm. (CVE-2021-42574) - NSS (Network Security Services) versions prior to 3.73 or 3.68.1 ESR are vulnerable to a heap overflow when handling DER-encoded DSA or RSA-PSS signatures. Applications using NSS for handling signatures encoded within CMS, S/MIME, PKCS \#7, or PKCS \#12 are likely to be impacted. Applications using NSS for certificate validation or other TLS, X.509, OCSP or CRL functionality may be impacted, depending on how they configure NSS. *Note: This vulnerability does NOT impact Mozilla Firefox.* However, email clients and PDF viewers that use NSS for signature verification, such as Thunderbird, LibreOffice, Evolution and Evince are believed to be impacted. This vulnerability affects NSS < 3.73 and NSS < 3.68.1. (CVE-2021-43527) Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.


Related


nessus
scanner

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.0.2.5)

2022-09-01T00:00:00
nessus
scanner

Amazon Linux 2 : java-1.8.0-openjdk (ALAS-2021-1726)

2021-12-13T00:00:00
nessus
scanner

Debian DLA-2814-1 : openjdk-8 - LTS security update

2021-11-10T00:00:00
nessus
scanner

Amazon Corretto Java 11.x < 11.0.13.8.1 Multiple Vulnerabilities

2022-04-01T00:00:00
nessus
scanner

SUSE SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2021:3771-1)

2021-11-24T00:00:00
nessus
scanner

SUSE SLES15 Security Update : java-1_8_0-openjdk (SUSE-SU-2021:3770-1)

2021-11-24T00:00:00
nessus
scanner

openSUSE 15 Security Update : java-1_8_0-openjdk (openSUSE-SU-2021:3770-1)

2021-11-24T00:00:00
nessus
scanner

CentOS 7 : java-1.8.0-openjdk (CESA-2021:3889)

2021-11-17T00:00:00
nessus
scanner

RHEL 8 : java-1.8.0-openjdk (RHSA-2021:3885)

2021-10-21T00:00:00
nessus
scanner

RHEL 7 : java-1.8.0-openjdk (RHSA-2021:3889)

2021-10-21T00:00:00
nessus
scanner

RHEL 8 : java-1.8.0-openjdk (RHSA-2021:3893)

2021-10-21T00:00:00
nessus
scanner

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2021-3893)

2021-10-20T00:00:00
nessus
scanner

CentOS 8 : java-1.8.0-openjdk (CESA-2021:3893)

2021-10-28T00:00:00
nessus
scanner

Oracle Linux 7 : java-1.8.0-openjdk (ELSA-2021-3889)

2021-10-20T00:00:00
nessus
scanner

Scientific Linux Security Update : java-1.8.0-openjdk on SL7.x i686/x86_64 (2021:3889)

2021-10-20T00:00:00
nessus
scanner

RHEL 8 : java-1.8.0-openjdk (RHSA-2021:3884)

2021-10-21T00:00:00
nessus
scanner

Amazon Linux AMI : java-1.8.0-openjdk (ALAS-2022-1561)

2022-01-19T00:00:00
nessus
scanner

Amazon Corretto Java 17.x < 17.0.1.12.1 Multiple Vulnerabilities

2022-04-01T00:00:00
nessus
scanner

Amazon Corretto Java 8.x < 8.312.07.1 Multiple Vulnerabilities

2022-04-01T00:00:00
nessus
scanner

OpenJDK 7 <= 7u311 / 8 <= 8u302 / 11.0.0 <= 11.0.12 / 13.0.0 <= 13.0.8 / 15.0.0 <= 15.0.4 / 16.0.0 <= 16.0.2 Multiple Vulnerabilities (2021-10-19

2021-10-28T00:00:00
nessus
scanner

AlmaLinux 8 : java-1.8.0-openjdk (ALSA-2021:3893)

2022-02-09T00:00:00
nessus
scanner

CentOS 7 : java-11-openjdk (CESA-2021:3892)

2021-11-17T00:00:00
nessus
scanner

RHEL 7 : java-11-openjdk (RHSA-2021:3892)

2021-10-21T00:00:00
nessus
scanner

RHEL 8 : java-11-openjdk (RHSA-2021:3887)

2021-10-21T00:00:00
nessus
scanner

RHEL 8 : java-11-openjdk (RHSA-2021:3891)

2021-10-21T00:00:00
nessus
scanner

openSUSE 15 Security Update : java-11-openjdk (openSUSE-SU-2021:3671-1)

2021-11-17T00:00:00
nessus
scanner

SUSE SLED15 / SLES15 Security Update : java-11-openjdk (SUSE-SU-2021:3671-1)

2021-11-17T00:00:00
nessus
scanner

openSUSE 15 Security Update : java-11-openjdk (openSUSE-SU-2021:1480-1)

2021-11-18T00:00:00
nessus
scanner

AlmaLinux 8 : java-11-openjdk (ALSA-2021:3891)

2022-02-09T00:00:00
nessus
scanner

RHEL 8 : java-11-openjdk (RHSA-2021:3886)

2021-10-21T00:00:00
nessus
scanner

Oracle Linux 8 : java-11-openjdk (ELSA-2021-3891)

2021-10-20T00:00:00
nessus
scanner

Oracle Linux 7 : java-11-openjdk (ELSA-2021-3892)

2021-10-20T00:00:00
nessus
scanner

CentOS 8 : java-11-openjdk (CESA-2021:3891)

2021-10-28T00:00:00
nessus
scanner

SUSE SLES12 Security Update : java-11-openjdk (SUSE-SU-2021:3528-1)

2021-10-28T00:00:00
nessus
scanner

Scientific Linux Security Update : java-11-openjdk on SL7.x i686/x86_64 (2021:3892)

2021-10-20T00:00:00
nessus
scanner

Debian DSA-5000-1 : openjdk-11 - security update

2021-11-02T00:00:00
nessus
scanner

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.0.1.6)

2022-09-01T00:00:00
nessus
scanner

RHEL 8 : java-17-openjdk (RHSA-2021:4135)

2021-11-11T00:00:00
nessus
scanner

CentOS 8 : java-17-openjdk (CESA-2021:4135)

2021-11-13T00:00:00
nessus
scanner

Oracle Linux 8 : java-17-openjdk (ELSA-2021-4135)

2021-11-18T00:00:00
nessus
scanner

AlmaLinux 8 : java-17-openjdk (ALSA-2021:4135)

2022-02-09T00:00:00
nessus
scanner

Azul Zulu Java Multiple Vulnerabilities (2021-10-19)

2021-10-25T00:00:00
nessus
scanner

Amazon Linux 2 : java-11-amazon-corretto (ALAS-2021-1718)

2021-11-05T00:00:00
nessus
scanner

Oracle Java SE 1.7.0_321 / 1.8.0_311 / 1.11.0_13 / 1.17.0_1 Multiple Vulnerabilities (Unix October 2021 CPU)

2021-10-22T00:00:00
nessus
scanner

Oracle Java SE 1.7.0_321 / 1.8.0_311 / 1.11.0_13 / 1.17.0_1 Multiple Vulnerabilities (October 2021 CPU)

2021-10-22T00:00:00
nessus
scanner

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS / 21.04 / 21.10 : OpenJDK vulnerabilities (USN-5202-1)

2021-12-17T00:00:00
nessus
scanner

EulerOS 2.0 SP8 : java-1.8.0-openjdk (EulerOS-SA-2022-1195)

2022-02-23T00:00:00
nessus
scanner

EulerOS 2.0 SP3 : java-1.7.0-openjdk (EulerOS-SA-2022-1169)

2022-02-23T00:00:00
nessus
scanner

RHEL 7 : kernel (RHSA-2021:3327)

2021-09-01T00:00:00
nessus
scanner

CentOS 7 : kernel (CESA-2021:3327)

2021-09-02T00:00:00
nessus
scanner

Scientific Linux Security Update : kernel on SL7.x x86_64 (2021:3327)

2021-09-01T00:00:00
nessus
scanner

Oracle Linux 7 : kernel (ELSA-2021-3327)

2021-09-02T00:00:00
nessus
scanner

EulerOS 2.0 SP3 : java-1.8.0-openjdk (EulerOS-SA-2022-1170)

2022-02-23T00:00:00
nessus
scanner

EulerOS 2.0 SP5 : java-1.8.0-openjdk (EulerOS-SA-2021-2933)

2021-12-31T00:00:00
nessus
scanner

RHEL 7 : kernel (RHSA-2021:3812)

2021-10-13T00:00:00
nessus
scanner

openSUSE 15 Security Update : java-1_8_0-openj9 (openSUSE-SU-2021:3615-1)

2021-11-05T00:00:00
nessus
scanner

openSUSE 15 Security Update : java-1_8_0-openj9 (openSUSE-SU-2021:1455-1)

2021-11-07T00:00:00
nessus
scanner

RHEL 7 / 8 : Red Hat JBoss Web Server 5.6.0 Security release (Important) (RHSA-2021:4861)

2021-12-01T00:00:00
nessus
scanner

RHEL 7 : kernel (RHSA-2021:3725)

2021-10-05T00:00:00
nessus
scanner

RHEL 7 : kernel-rt (RHSA-2021:3328)

2021-08-31T00:00:00
nessus
scanner

RHEL 7 : java-1.7.1-ibm (RHSA-2022:0310)

2022-01-28T00:00:00
nessus
scanner

RHEL 7 : kernel (RHSA-2021:3987)

2021-10-28T00:00:00
nessus
scanner

RHEL 7 : java-1.8.0-ibm (RHSA-2021:5030)

2021-12-08T00:00:00
nessus
scanner

RHEL 8 : java-1.8.0-ibm (RHSA-2022:0345)

2022-02-01T00:00:00
nessus
scanner

CentOS 7 : kernel (CESA-2021:3801)

2021-11-17T00:00:00
nessus
scanner

Scientific Linux Security Update : kernel on SL7.x x86_64 (2021:3801)

2021-10-14T00:00:00
nessus
scanner

RHEL 7 : kernel (RHSA-2021:3801)

2021-10-13T00:00:00
nessus
scanner

Oracle Linux 7 : kernel (ELSA-2021-3801)

2021-10-13T00:00:00
nessus
scanner

Nutanix AOS : Multiple Vulnerabilities (NXSA-AOS-6.1)

2022-09-01T00:00:00
nessus
scanner

Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20201105.30142)

2022-09-01T00:00:00
nessus
scanner

RHEL 7 : kpatch-patch (RHSA-2021:3814)

2021-10-13T00:00:00
nessus
scanner

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2022-0020)

2022-05-10T00:00:00
nessus
scanner

NewStart CGSL MAIN 5.05 : kernel Multiple Vulnerabilities (NS-SA-2022-0047)

2022-05-09T00:00:00
nessus
scanner

NewStart CGSL CORE 5.04 / MAIN 5.04 : kernel Multiple Vulnerabilities (NS-SA-2022-0023)

2022-05-09T00:00:00
nessus
scanner

RHEL 8 : kernel (RHSA-2021:3173)

2021-08-17T00:00:00
nessus
scanner

RHEL 8 : kpatch-patch (RHSA-2021:3181)

2021-08-17T00:00:00
nessus
scanner

openSUSE 15 Security Update : java-1_8_0-ibm (openSUSE-SU-2022:0108-1)

2022-01-19T00:00:00
nessus
scanner

SUSE SLED12 / SLES12 Security Update : java-1_8_0-ibm (SUSE-SU-2022:0107-1)

2022-01-19T00:00:00
nessus
scanner

SUSE SLES15 Security Update : java-1_8_0-ibm (SUSE-SU-2022:0108-1)

2022-01-19T00:00:00
redhat
unix

(RHSA-2021:3961) Important: OpenJDK 8u312 Windows Builds release and security update

2021-10-25T11:51:36
redhat
unix

(RHSA-2021:3885) Important: java-1.8.0-openjdk security update

2021-10-20T12:38:58
redhat
unix

(RHSA-2021:3884) Important: java-1.8.0-openjdk security update

2021-10-20T12:37:16
redhat
unix

(RHSA-2021:3889) Important: java-1.8.0-openjdk security and bug fix update

2021-10-20T12:40:28
redhat
unix

(RHSA-2021:3893) Important: java-1.8.0-openjdk security and bug fix update

2021-10-20T12:38:15
redhat
unix

(RHSA-2021:3960) Important: OpenJDK 8u312 security update for Portable Linux Builds

2021-10-25T11:51:34
redhat
unix

(RHSA-2021:3967) Important: OpenJDK 11.0.13 security update for Portable Linux Builds

2021-10-25T12:20:25
redhat
unix

(RHSA-2021:3892) Important: java-11-openjdk security and bug fix update

2021-10-20T12:46:24
redhat
unix

(RHSA-2021:3886) Important: java-11-openjdk security update

2021-10-20T12:36:57
redhat
unix

(RHSA-2021:3891) Important: java-11-openjdk security update

2021-10-20T12:41:00
redhat
unix

(RHSA-2021:3968) Important: OpenJDK 11.0.13 security update for Windows Builds

2021-10-25T12:20:28
redhat
unix

(RHSA-2021:3887) Important: java-11-openjdk security update

2021-10-20T12:39:20
redhat
unix

(RHSA-2021:4532) Important: OpenJDK 17.0.1 security update for Portable Linux Builds

2021-11-11T18:26:11
redhat
unix

(RHSA-2021:4135) Important: java-17-openjdk security update

2021-11-09T19:26:37
redhat
unix

(RHSA-2021:4531) Important: OpenJDK 17.0.1 security update for Windows Builds

2021-11-11T18:26:09
redhat
unix

(RHSA-2021:3327) Important: kernel security and bug fix update

2021-08-31T07:45:12
redhat
unix

(RHSA-2021:3812) Important: kernel security update

2021-10-12T14:15:36
redhat
unix

(RHSA-2021:4863) Important: Red Hat JBoss Web Server 5.6.0 Security release

2021-11-30T14:21:16
redhat
unix

(RHSA-2021:4861) Important: Red Hat JBoss Web Server 5.6.0 Security release

2021-11-30T14:19:46
redhat
unix

(RHSA-2021:3725) Important: kernel security and bug fix update

2021-10-05T07:22:39
redhat
unix

(RHSA-2021:3328) Important: kernel-rt security and bug fix update

2021-08-31T07:45:27
redhat
unix

(RHSA-2022:0310) Important: java-1.7.1-ibm security update

2022-01-27T13:57:58
redhat
unix

(RHSA-2021:3987) Important: kernel security and bug fix update

2021-10-26T07:01:23
redhat
unix

(RHSA-2021:5030) Important: java-1.8.0-ibm security update

2021-12-08T16:11:56
redhat
unix

(RHSA-2022:0345) Important: java-1.8.0-ibm security update

2022-02-01T15:01:14
redhat
unix

(RHSA-2021:3801) Important: kernel security and bug fix update

2021-10-12T13:21:31
redhat
unix

(RHSA-2021:3814) Important: kpatch-patch security update

2021-10-12T14:15:40
redhat
unix

(RHSA-2021:3173) Important: kernel security update

2021-08-17T07:52:33
redhat
unix

(RHSA-2021:3181) Important: kpatch-patch security update

2021-08-17T07:54:01
almalinux
unix

Important: java-1.8.0-openjdk security and bug fix update

2021-10-20T12:38:15
almalinux
unix

Important: java-11-openjdk security update

2021-10-20T12:41:00
almalinux
unix

Important: java-17-openjdk security update

2021-11-09T19:26:37
oraclelinux
unix

java-1.8.0-openjdk security and bug fix update

2021-10-20T00:00:00
oraclelinux
unix

java-1.8.0-openjdk security and bug fix update

2021-10-20T00:00:00
oraclelinux
unix

java-11-openjdk security update

2021-10-20T00:00:00
oraclelinux
unix

java-11-openjdk security and bug fix update

2021-10-21T00:00:00
oraclelinux
unix

java-17-openjdk security update

2021-11-18T00:00:00
oraclelinux
unix

kernel security and bug fix update

2021-08-31T00:00:00
oraclelinux
unix

kernel security and bug fix update

2021-10-12T00:00:00
osv
software

openjdk-8 - security update

2021-11-09T00:00:00
osv
software

openjdk-11 - security update

2021-11-01T00:00:00
osv
software

openjdk-11 - security update

2021-11-01T00:00:00
osv
software

openjdk-17 - security update

2021-11-23T00:00:00
debian
unix

[SECURITY] [DLA 2814-1] openjdk-8 security update

2021-11-09T18:53:12
debian
unix

[SECURITY] [DSA 5000-1] openjdk-11 security update

2021-11-01T19:44:34
debian
unix

[SECURITY] [DSA 5000-2] openjdk-11 security update

2021-12-22T19:03:51
debian
unix

[SECURITY] [DSA 5012-1] openjdk-17 security update

2021-11-23T21:30:57
mageia
unix

Updated java openjdk packages fix security vulnerability

2021-12-08T20:04:18
fedora
unix

[SECURITY] Fedora 35 Update: java-1.8.0-openjdk-1.8.0.312.b07-1.fc35

2021-10-29T23:29:25
fedora
unix

[SECURITY] Fedora 33 Update: java-1.8.0-openjdk-1.8.0.312.b07-1.fc33

2021-10-28T19:31:36
fedora
unix

[SECURITY] Fedora 34 Update: java-1.8.0-openjdk-1.8.0.312.b07-1.fc34

2021-10-28T19:32:25
fedora
unix

[SECURITY] Fedora 33 Update: java-11-openjdk-11.0.13.0.8-1.fc33

2021-10-28T19:31:37
fedora
unix

[SECURITY] Fedora 34 Update: java-11-openjdk-11.0.13.0.8-1.fc34

2021-10-25T15:14:27
fedora
unix

[SECURITY] Fedora 35 Update: java-11-openjdk-11.0.13.0.8-1.fc35

2021-10-29T23:29:26
fedora
unix

[SECURITY] Fedora 35 Update: java-latest-openjdk-17.0.1.0.12-1.rolling.fc35

2021-10-31T01:09:50
fedora
unix

[SECURITY] Fedora 34 Update: java-latest-openjdk-17.0.1.0.12-1.rolling.fc34

2021-10-31T01:15:50
fedora
unix

[SECURITY] Fedora 33 Update: java-latest-openjdk-17.0.1.0.12-1.rolling.fc33

2021-10-31T01:01:59
amazon
unix

Important: java-1.8.0-openjdk

2022-01-18T20:14:00
amazon
unix

Important: java-1.8.0-openjdk

2021-12-08T02:23:00
amazon
unix

Important: java-11-amazon-corretto

2021-10-28T23:20:00
suse
unix

Security update for java-1_8_0-openjdk (important)

2021-11-24T00:00:00
suse
unix

Security update for java-1_8_0-openjdk (important)

2021-11-23T00:00:00
suse
unix

Security update for java-11-openjdk (important)

2021-11-17T00:00:00
suse
unix

Security update for java-11-openjdk (important)

2021-11-16T00:00:00
suse
unix

Security update for java-1_8_0-openj9 (important)

2021-11-04T00:00:00
suse
unix

Security update for java-1_8_0-openj9 (important)

2021-11-06T00:00:00
suse
unix

Security update for seamonkey (important)

2022-04-08T00:00:00
centos
unix

java security update

2021-11-17T15:06:26
centos
unix

java security update

2021-11-17T15:04:57
centos
unix

bpftool, kernel, perf, python security update

2021-08-31T21:19:47
centos
unix

bpftool, kernel, perf, python security update

2021-11-17T15:22:13
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Business Developer

2022-03-15T14:50:59
ibm
software

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition

2021-12-02T16:45:48
ibm
software

Security Bulletin: Vulnerabilities in Java impact IBM Cloud Application Business Insights (CVE-2021-35550, CVE-2021-35561, CVE-2021-35603, and CVE-2021-41035)

2022-12-30T15:09:22
ibm
software

Security Bulletin: Java SE as used by IBM Cloud Pak For Security is vulnerable to information disclosure and denial of service.

2022-07-25T14:08:02
ibm
software

Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Java

2022-02-23T17:54:10
ibm
software

Security Bulletin: Multiple vulnerabilities may affect IBM® Semeru Runtime

2021-12-02T16:09:54
ibm
software

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2021 - Includes Oracle October 2021 CPU (minus CVE-2021-35550/35561/35603) plus CVE-2021-41035 affects IBM Tivoli Composite Application Manager for Transactions-Robotic Response Time

2022-02-21T09:00:07
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and IBM App Connect Enterprise

2022-04-01T13:15:21
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation Application Manager Nov 2021 CPU (CVE-2021-41035, CVE-2021-35578, CVE-2021-35586, CVE-2021-35564, CVE-2021-35561, CVE-2021-35565, CVE-2021-35567)

2022-03-04T11:03:37
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli System Automation for Multiplatforms Nov 2021 CPU (CVE-2021-41035, CVE-2021-35578, CVE-2021-35586, CVE-2021-35564, CVE-2021-35561, CVE-2021-35565, CVE-2021-35567)

2022-03-04T11:16:58
ibm
software

Security Bulletin: Vulnerabilities in IBM® SDK Java™ Technology Edition, Version 8, that is used by IBM Workload Scheduler.

2022-08-08T15:42:45
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect Liberty for Java for IBM Cloud October 2021 CPU

2022-10-07T16:01:56
ibm
software

Security Bulletin: The IBM® SDK Java Technology Edition, October 2021 CPU affect IBM Common Licensing (CVE-2021-35560, CVE-2021-35586, CVE-2021-35578, CVE-2021-35564, CVE-2021-35559, CVE-2021-35556, CVE-2021-35565, CVE-2021-35588, CVE-2021-41035)

2022-05-30T08:58:49
ibm
software

Security Bulletin: Multiple vulnerabilities have been identified in Oracle October 2021 CPU for Java 8 shipped with IBM® Intelligent Operations Center (CVE-2021-35560, CVE-2021-35586, CVE-2021-35578, CVE-2021-35564, CVE-2021-35559, CVE)

2022-09-07T13:49:20
ibm
software

Security Bulletin: A vulnerability in IBM Java Runtime affects TXSeries for Multiplatforms

2022-02-23T09:09:50
ibm
software

Security Bulletin: February 2022 :Multiple vulnerabilities in IBM Java Runtime affect CICS Transaction Gateway

2022-02-22T15:42:31
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect IBM Tivoli Business Service Manager

2021-12-08T16:55:32
ibm
software

Security Bulletin: Vulnerabilities in IBM Java affecting IBM Rational Asset Analyzer.

2021-12-14T03:28:58
ibm
software

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM CICS TX on Cloud

2022-02-10T14:51:34
ibm
software

Security Bulletin: IBM Event Streams affected by multiple vulnerabilities in the Java runtime

2021-12-21T17:52:39
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Functional Tester

2022-01-05T12:34:18
ibm
software

Security Bulletin: IBM Operations Analytics Predictive Insights is vulnerable to multiple vulnerabilities due to the use of IBM SDK, Java Technology Edition.

2022-03-04T20:16:43
ibm
software

Security Bulletin: Multiple Vulnerabilities in Sterling Connect:Direct Browser User Interface

2022-03-03T20:04:41
ibm
software

Security Bulletin: A vulnerability in Java affects IBM License Metric Tool v9 (CVE-2021-35578).

2022-03-23T15:41:27
ibm
software

Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Java (Multiple CVEs)

2022-04-22T20:42:04
ibm
software

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM Digital Business Automation Workflow family products Java CPU October 2021

2022-09-14T15:28:14
ibm
software

Security Bulletin: IBM SDK Java 8.0.7.0 Update for IBM DataQuant

2022-01-14T11:47:21
ibm
software

Security Bulletin: IBM Rational Build Forge 8.0.x is affected by Java version used in it.(CVE-2021-35560, CVE-2021-35586, CVE-2021-35578, CVE-2021-35564, CVE-2021-35559, CVE-2021-35556, CVE-2021-35565, CVE-2021-35588, CVE-2021-41035)

2022-01-17T18:16:07
ibm
software

Security Bulletin: Vulnerabilities in Java SE affect IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data

2023-01-12T21:59:00
ibm
software

Security Bulletin: Some unspecified vulnerabilities in Java SE result in the unauthenticated attacker to take control of the system or some impact

2022-03-06T02:52:38
ibm
software

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Connect:Direct Web Services

2022-03-01T19:14:48
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects WebSphere Application Server October 2021 CPU that is bundled with IBM WebSphere Application Server Patterns

2021-12-21T20:06:47
ibm
software

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Oct 2021 - Includes Oracle October 2021 CPU

2022-04-01T23:21:42
ibm
software

Security Bulletin: Enterprise Content Management System Monitor is affected by a vulnerability in IBM® SDK Java™ Technology Edition

2022-03-25T06:36:33
ibm
software

Security Bulletin: IBM SDK, Java Technology Edition, Security Update October 2021

2022-05-10T23:16:42
ibm
software

Security Bulletin: Due to use of IBM SDK, Java Technology Edition, IBM Tivoli Application Dependency Discovery Manager (TADDM) is vulnerable to denial of service

2022-04-19T14:56:37
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM i

2022-01-21T22:22:58
ibm
software

Security Bulletin: Multiple vulnerabilities in Linux Kernel affect IBM QRadar SIEM (CVE-2021-22543, CVE-2021-3653, CVE-2021-3656, CVE-2021-37576)

2022-04-28T20:56:41
ibm
software

Security Bulletin: Multiple security vulnerability are addressed in monthly security fix for IBM Cloud Pak for Business Automation February 2022

2022-03-10T21:42:40
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect AIX

2022-02-23T15:05:16
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect IBM Security QRadar SOAR ( CVE-2021-35560, CVE-2021-35578, CVE-2021-35564, CVE-2021-35565, CVE-2021-35588)

2022-03-03T14:18:43
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect z/Transaction Processing Facility

2021-12-16T19:48:12
ibm
software

Security Bulletin: Multiple vulnerabilities in the IBM Java Runtime affect IBM Rational ClearCase ( CVE-2021-35578, CVE-2021-35603, CVE-2021-35550, CVE-2021-35561, CVE-2022-21299 )

2022-07-25T14:49:17
ibm
software

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect Host On-Demand

2022-04-07T20:09:16
ibm
software

Security Bulletin: Multiple vulnerabilities in the IBM Java Runtime affect IBM Rational ClearQuest

2022-07-26T10:49:08
ubuntu
unix

OpenJDK vulnerabilities

2021-12-17T00:00:00
f5
software

Multiple Java vulnerabilities CVE-2021-35588, CVE-2021-35603, CVE-2021-35565, CVE-2021-35578

2022-09-06T09:40:00
f5
software

Multiple Java vulnerabilities CVE-2021-35560, CVE-2021-35561, CVE-2021-35564, CVE-2021-35567, CVE-2021-35586

2022-09-06T09:42:00
aix
unix

Multiple vulnerabilities in IBM Java SDK affect AIX

2022-02-23T08:12:23