11823 matches found
Privilege Escalation
Java SE and Java SE Embedded are vulnerable to arbitrary code execution attacks. A remote user can exploit a flaw in the RMI component to gain elevated privileges. This may allow the user with lower privileges to perform restricted actions...
Privilege Escalation
Java SE and Java SE Embedded are vulnerable to privilege escalation. A remote user can exploit a flaw in the JAXP component to gain elevated privileges. This may allow the user with lower privileges to perform restricted actions...
Arbitrary Code Execution
Java SE and Java SE Embedded are vulnerable to arbitrary code execution attacks. A remote user can exploit a flaw in the Hotspot component to partially modify data...
Privilege Escalation
Java SE and Java SE Embedded are vulnerable to privilege escalation attacks. A remote user can exploit a flaw in the Libraries component to gain elevated privileges. This may allow a user with lower privileges to perform restricted actions...
Privilege Escalation
Java SE and Java SE Embedded are vulnerable to privilege escalation. A remote user can exploit a flaw in the Libraries component to gain elevated privileges. This may allow the user with lower privileges to perform restricted actions...
Denial Of Service (DoS)
Java SE and Java SE Embedded are vulnerable to denial of service attacks. A remote attacker could cause an application crash resulting in denial of service conditions via the Libraries component...
Unauthorized Modification
Java SE and Java SE Embedded are vulnerable to unauthorized modification attacks. An unauthenticated attacker can exploit a flaw in the FTP client implementation in the Networking component in OpenJDK. A remote attacker could possibly use this flaw to manipulate FTP connections established by a...
Privilege Escalation
Java SE and Java Embedded are vulnerable to privilege escalation attacks. An unauthenticated attacker can exploit a flaw in the SMTP client implementation in the Networking component in OpenJDK. The attacker could possibly use this flaw to manipulate SMTP connections established by a Java...
Denial Of Service (DoS)
Java SE and Java SE Embedded are vulnerable to denial of serviceDos attacks. This occurs in JAXP component of OpenJDK which fails to correctly enforce parse tree size limits when parsing XML documents. An attacker could use this flaw to crash the application via consuming an excessive amount of C...
Unauthorized Modification
Java SE and Java SE Embedded are vulnerable to unauthenticated modification attacks. An unauthenticated attacker can exploit a flaw in the Security component of OpenJDK which does not allow users to restrict the set of algorithms allowed for Jar integrity verification allowing an attacker to modi...
Improper Access Control
Java SE and Java SE Embedded are vulnerable to improper access control attacks. The affected component is JCE of OpenJDK. A local attacker could possibly use this flaw to load an attacker-controlled library which elevates their privileges...
Information Disclosure
Java SE and Java SE Embedded are vulnerable to information disclosure attacks. This allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, which leads to elevated privilege gaining and application crashing...
Information Disclosure
Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to information disclosure. A remote unauthenticated attacker is able to gain unauthorized read access to a subset of Java SE, Java SE Embedded accessible data via the Networking component...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
XML External Entity (XXE)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Denial Of Service (DoS)
PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Server. The rh-php56 packages provide a recent stable release of PHP with PEAR 1.9.5 and enhanced language features including constant expressions, variadic functions, arguments unpacking, and the interactive debuger. T...
Information Disclosure
Oracle Java SE and Java SE Embedded are vulnerable to information disclosure. A remote user can exploit a flaw in the Networking component to access sensitive information...
Sandbox Restrictions Bypass
Oracle Java SE and Java SE Embedded are vulnerable to sandbox restrictions bypass. Mishandled classloaders in the component JMX of OpenJDK allows an untrusted Java application or applet to bypass certain Java sandbox restrictions to perform unauthorized actions...
Memory Corruption
Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. CVE-2012-1970,...
