CVE-2017-1541

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

Design/Logic Flaw

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

CVE-2017-1541

A flaw in the AIX 5.3, 6.1, 7.1, and 7.2 JRE/SDK installp and updatep packages prevented the java.security, java.policy and javaws.policy files from being updated correctly. IBM X-Force ID: 130809...

CVE-2017-1541

CVE-2017-1541 is an IBM AIX Java vulnerability where the JRE/SDK installp and updatep packages could fail to update the files java.security, java.policy, and javaws.policy. Affected: AIX 5.3, 6.1, 7.1, 7.2 (and VIOS 2.2.x); root cause is improper updating of security policy files, which may impac...

GLSA-201709-22 : Oracle JDK/JRE, IcedTea: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201709-22 Oracle JDK/JRE, IcedTea: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Oracles JRE, JDK and IcedTea. Please review the referenced CVE identifiers for details. Impact : A remote attacker could...

Oracle JDK/JRE, IcedTea: Multiple vulnerabilities

Background Java Platform, Standard Edition Java SE lets you develop and deploy Java applications on desktops and servers, as well as in today’s demanding embedded environments. Java offers the rich user interface, performance, versatility, portability, and security that today’s applications...

Oracle Java JDKJRE 1.8.0.131 Apache Xerces 2.11.0 - PDFDocx Server Side Denial of Service

Oracle Java JDKJRE 1.8.0.131 Apache Xerces 2.11.0 - PDFDocx Server Side Denial of Service Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in Oracle Java JDK/JRE 1.8.0.131 and previous versions packages and Apache Xerces 2.11.0 The vulnerabilities are: Oracle...

Oracle Java JDK/JRE < 1.8.0.131 / Apache Xerces 2.11.0 - 'PDF/Docx' Server Side Denial of Service

Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in Oracle Java JDK/JRE 1.8.0.131 and previous versions packages and Apache Xerces 2.11.0 The vulnerabilities are: Oracle JDK/JRE Concurrency-Related Denial of Service java.net.URLConnection with no...

GLSA-201705-03 : Oracle JDK/JRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201705-03 Oracle JDK/JRE: Multiple vulnerabilities Multiple vulnerabilities have been discovered in in Oracles JRE and JDK. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

Oracle JDK/JRE: Multiple vulnerabilities

Background Java Platform, Standard Edition Java SE lets you develop and deploy Java applications on desktops and servers, as well as in today’s demanding embedded environments. Java offers the rich user interface, performance, versatility, portability, and security that today’s applications...

GLSA-201701-65 : Oracle JRE/JDK: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201701-65 Oracle JRE/JDK: Multiple vulnerabilities Multiple vulnerabilities have been discovered in in Oracles JRE and JDK. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly...

Oracle JRE/JDK: Multiple vulnerabilities

Background Java Platform, Standard Edition Java SE lets you develop and deploy Java applications on desktops and servers, as well as in today’s demanding embedded environments. Java offers the rich user interface, performance, versatility, portability, and security that today’s applications...

Java Applet Method Handle Remote Code Execution (CVE-2012-5088)

A code execution vulnerability has been reported in Oracle's Java and JRE. The vulnerability is due to improper use of the Method Handle class. A remote attacker may exploit this issue by enticing a target user to open a specially crafted Java applet which can enable an attacker to execute...

GLSA-201611-04 : Oracle JRE/JDK: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201611-04 Oracle JRE/JDK: Multiple vulnerabilities Multiple vulnerabilities exist in both Oracles JRE and JDK. Please review the referenced CVEs for additional information. Impact : Remote attackers could gain access to informatio...

KLA10887 Multiple vulnerabilities in Oracle Java SE

An unspecified vulnerabilities were found in Oracle Java SE. By exploiting this vulnerability malicious users can cause denial of service, affect integrity or obtain sensitive information. This vulnerability can be exploited remotely. Technical details These vulnerabilities are related to 2D, AWT...

GLSA-201610-08 : Oracle JRE/JDK: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201610-08 Oracle JRE/JDK: Multiple vulnerabilities Multiple vulnerabilities exist in both Oracles JRE and JDK. Please review the referenced CVEs for additional information. Impact : Remote attackers could gain access to informatio...

Oracle JRE/JDK: Multiple vulnerabilities

Background Java Platform, Standard Edition Java SE lets you develop and deploy Java applications on desktops and servers, as well as in today’s demanding embedded environments. Java offers the rich user interface, performance, versatility, portability, and security that today’s applications...

Debian DSA-3641-1 : openjdk-7 - security update

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in breakouts of the Java sandbox or denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

VMware vSphere Replication Oracle JRE JMX Deserialization RCE (VMSA-2016-0005)

The VMware vSphere Replication running on the remote host is version 5.6.x prior to 5.6.0.6, 5.8.x prior to 5.8.1.2, 6.0.x prior to 6.0.0.3, or 6.1.x prior to 6.1.1. It is, therefore, affected by a remote code execution vulnerability in the Oracle JRE JMX component due to a flaw related to the...

VMware VRealize Operations Manager 6.x Oracle JRE JMX Deserialization RCE (VMSA-2016-0005)

The remote VMware vRealize Operations Manager vROps 6.x host is affected by a remote code execution vulnerability in the Oracle JRE JMX component due to a flaw related to the deserialization of authentication credentials. An unauthenticated, remote attacker can exploit this to execute arbitrary...