Lucene search
+L

8056 matches found

Github Security Blog
Github Security Blog
•added 2020/02/04 10:39 p.m.•232 views

Improper Restriction of XML External Entity Reference in jackson-mapper-asl

A flaw was found in org.codehaus.jackson:jackson-mapper-asl:1.9.x libraries. XML external entity vulnerabilities similar to CVE-2016-3720 also affects codehaus jackson-mapper-asl libraries but in different classes...

7.5CVSS2.8AI score0.16606EPSS
SaveExploits0References73Affected Software1
BDU FSTEC
BDU FSTEC
•added 2020/02/03 12:00 a.m.•13 views

The vulnerability of the Libraries component in Oracle Java SE software platforms allows a perpetrator to trigger a service failure.

The vulnerability of the Libraries component in Oracle Java SE software platforms is related to lack of access control. Exploiting this vulnerability could allow an attacker to cause service interruptions using network protocols...

4.3CVSS6.4AI score0.0396EPSS
SaveExploits0References7Affected Software16
Tenable Nessus
Tenable Nessus
•added 2020/01/30 12:00 a.m.•54 views

CentOS 6 : java-1.8.0-openjdk (RHSA-2020:0157)

The remote CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0157 advisory. - Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Serialization. Supported versions that are affected are Java SE:...

8.1CVSS6.5AI score0.04881EPSS
SaveExploits0References8
Cent OS
Cent OS
•added 2020/01/28 9:30 p.m.•144 views

java security update

CentOS Errata and Security Advisory CESA-2020:0196 An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

8.1CVSS6.6AI score0.04881EPSS
SaveExploits0References7
IBM Security Bulletins
IBM Security Bulletins
•added 2020/01/28 3:11 p.m.•46 views

Security Bulletin: Multiple security vulnerabilities were fixed in IBM Security Access Manager Appliance

Summary Multiple vulnerabilities in the python libraries used by the IBM Security Access Manager appliance. Vulnerability Details CVEID: CVE-2019-9948 DESCRIPTION: urllib in Python 2.x through 2.7.16 supports the localfile: scheme, which makes it easier for remote attackers to bypass protection...

9.1CVSS1.4AI score0.20743EPSS
SaveExploits4Affected Software1
Tenable Nessus
Tenable Nessus
•added 2020/01/28 12:00 a.m.•56 views

RHEL 8 : java-11-openjdk (RHSA-2020:0232)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0232 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

8.1CVSS6.8AI score0.04881EPSS
SaveExploits0References16
RedHat Linux
RedHat Linux
•added 2020/01/27 8:55 a.m.•65 views

Important: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

8.1CVSS6.6AI score0.04881EPSS
SaveExploits0References8
OpenVAS
OpenVAS
•added 2020/01/27 12:00 a.m.•16 views

Fedora: Security Advisory for python3 (FEDORA-2019-297a9f4aa5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2020/01/23 12:00 a.m.•253 views

RHEL 8 : java-1.8.0-openjdk (RHSA-2020:0202)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0202 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

8.1CVSS6.8AI score0.04881EPSS
SaveExploits0References16
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•44 views

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2019-1299)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

3.1CVSS6.8AI score0.03374EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•70 views

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2016-1032)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.7AI score0.0669EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•118 views

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1207)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.9AI score0.0345EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•133 views

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2017-1208)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.9AI score0.0345EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2020/01/23 12:00 a.m.•26 views

Huawei EulerOS: Security Advisory for dhcp (EulerOS-SA-2019-2336)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.08813EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/01/23 12:00 a.m.•44 views

Oracle Linux 8 : java-1.8.0-openjdk (ELSA-2020-0202)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-0202 advisory. - Remove CVE-2018-3639 mitigation due to performance regression and OpenJDK position on speculative execution vulnerabilities...

8.1CVSS7.4AI score0.60631EPSS
SaveExploits3References8
Tenable Nessus
Tenable Nessus
•added 2020/01/22 12:00 a.m.•80 views

RHEL 7 : java-1.8.0-openjdk (RHSA-2020:0196)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0196 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

8.1CVSS6.8AI score0.04881EPSS
SaveExploits0References16
RedHat Linux
RedHat Linux
•added 2020/01/21 11:18 p.m.•121 views

Important: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

8.1CVSS6.6AI score0.04881EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
•added 2020/01/21 11:18 p.m.•31 views

OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)

Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

4.3CVSS7.3AI score0.0396EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
•added 2020/01/21 3:10 a.m.•21 views

OpenJDK: Excessive memory usage in OID processing in X.509 certificate parsing (Libraries, 8234037)

Vulnerability in the Java SE product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE...

4.3CVSS7.3AI score0.0396EPSS
SaveExploits0References4
Fedora
Fedora
•added 2020/01/20 10:49 p.m.•48 views

[SECURITY] Fedora 31 Update: glibc-2.30-10.fc31

The glibc package contains standard libraries which are used by multiple programs on the system. In order to save disk space and memory, as well as to make upgrading easier, common system code is kept in one place and shared between programs. This particular package contains the most important se...

3.3CVSS2AI score0.00409EPSS
SaveExploits0
Rows per page
Query Builder