CVE-2012-5088

CVE-2012-5088 is an Oracle/OpenJDK Java Runtime vulnerability that IBM bulletins tie to the Java Runtime included in IBM products (e.g., Rational Build Forge 8.0 and Rational Functional Tester 8.x). In IBM Build Forge, CVE-2012-5088 is described as allowing a remote attacker to execute arbitrary ...

CVE-2012-5069

CVE-2012-5069 is an unspecified concurrency-related vulnerability in the Java Runtime Environment (JRE) that affects confidentiality and integrity. It impacts Oracle Java SE 7 Update 7 and earlier, Java SE 6 Update 35 and earlier, and Java SE 5.0 Update 36 and earlier. Exploitation details are no...

CVE-2012-5067

CVE-2012-5067 is referenced in IBM security advisories related to IBM WebSphere ILOG JRules (v7.1.1) and IBM Operational Decision Manager (v7.5/v8.0). The bulletin lists APAR RS01283 and provides interim/fix pack remediation: 7.1.1.5-WS-BRMS_JDK-WIN-IF018 for JRules Windows; ODM fix pack 7.5.0.4 ...

CVE-2012-5086

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans...

NTR - ActiveX Control 'Check()' Method Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

Preemptive Protection against Oracle JRE Restrictions Bypass Remote Code Execution (CVE-2012-4681)

Multiple remote code execution vulnerabilities have been reported in Oracle Java Runtime Environment JRE...

HP ALM Remote Code Execution

Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...

HP ALM Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

NTR ActiveX Control Check() Method Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 HttpClients::IE, :uaminver = "6.0",...

Apple Mac OS X Security Update for Java (HT5473)

This host is missing an important security update according to the Java for Mac OS X 10.6 Update 10. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

MS12-063 Microsoft Internet Explorer execCommand Use-After-Free Vulnerability

This module exploits a vulnerability found in Microsoft Internet Explorer MSIE. When rendering an HTML page, the CMshtmlEd object gets deleted in an unexpected manner, but the same memory is reused again later in the CMshtmlEd::Exec function, leading to a use-after-free condition. Please note tha...

Slackware Advisory SSA:2007-243-01 java (jre, jdk)

The remote host is missing an update as announced via advisory SSA:2007-243-01. OpenVAS Vulnerability Test $Id: esoftslkssa200724301.nasl 6598 2017-07-07 09:36:44Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2005-203-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OpenJDK: AWT hardening fixes (AWT, 7163201)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate...

OpenJDK: beans ClassFinder insufficient permission checks (beans, 7162476)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 6 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Beans, a different vulnerability than CVE-2012-3136. NOTE: Oracle has not...

Oracle Sun JRE 1.x 远程JRE漏洞

BUGTRAQ ID: 55339 CVE ID: CVE-2012-0547 Sun Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案。 Oracle Java SE 7 Update 6及之前版本、6 Update 34及之前版本的JRE组件中存在不明细节漏洞，影响目前未知。 0 Sun JRE 1.x 厂商补丁： Oracle ------ Oracle已经为此发布了一个安全公告（alert-cve-2012-4681-1835715）以及相应补丁: alert-cve-2012-4681-1835715：Oracle...

OpenJDK: AWT hardening fixes (AWT, 7163201)

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 6 and earlier, and 6 Update 34 and earlier, has no impact and remote attack vectors involving AWT and "a security-in-depth issue that is not directly exploitable but which can be used to aggravate...

Oracle Java SE JRE AWT Component Unspecified Vulnerability - Windows

Oracle Java SE JRE is prone to an unspecified vulnerability. Copyright C 2012 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

VMSA-2012-0013 VMware vSphere and vCOps updates to third party libraries.

The remote ESXi is missing one or more security related Updates from VMSA-2012-0013. Summary VMware has updated several third party libraries in vSphere and vcOps to address multiple security vulnerabilities. Relevant releases VMware vCenter 4.1 without Update 3 VMware vCenter Update Manager 4.1...

VMSA-2012-0013 : VMware vSphere and vCOps updates to third-party libraries

a. vCenter and ESX update to JRE 1.6.0 Update 31 The Oracle Sun JRE is updated to version 1.6.031, which addresses multiple security issues. Oracle has documented the CVE identifiers that are addressed by this update in the Oracle Java SE Critical Patch Update Advisory of February 2012. b. vCente...