CVE-2020-14750

CVE-2020-14750 CVE-2020-14750 および cve-2020-14882 の脆弱性向け PoC システムが脆弱かどうかをテストするには、次を使用します: ./test-CVE-2020-14750 nombredelhost:7001 現時点では、このバージョンはホストが脆弱であることのみを保証します。結果が否定的であっても、脆弱でないことを保証するものではありません。今後のバージョンで実装される予定です。 更新: 取得した応答によって、ホストが脆弱であるか、テストが失敗したかを区別できるようになりました。 悪用するには、最初のパラメータとしてホストをポート付きで...

Updated java-1.8.0-openjdk, java-11-openjdk, java-17-openjdk, and java-latest-openjdk packages fix security vulnerabilities

LIBPNG is vulnerable to a buffer overflow in pngimagereadcomposite via incorrect palette premultiplication. CVE-2025-64720 LIBPNG is vulnerable to a heap buffer overflow in pngcombinerow triggered via pngimagefinishread. CVE-2025-65018 Improve JMX connections. CVE-2026-21925 Improve HttpServer...

EUVD-2019-8319

Malware in sbrugna...

SUSE CVE-2005-3904

Unspecified vulnerability in Java Management Extensions JMX in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors...

CVE-2020-9004

A remote authenticated authorization-bypass vulnerability in Wowza Streaming Engine 4.8.0 and earlier allows any read-only user to issue requests to the administration panel in order to change functionality. For example, a read-only user may activate the Java JMX port in unauthenticated mode and...

CVE-2019-18572

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can...

CVE-2019-18572

CVE-2019-18572 affects Dell RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance prior to version 7.1.1 P03. The issue is an Improper Authentication where a Java JMX agent on the remote host is configured with plain text password authentication, enabling an unauthenticated r...

CVE-2019-18572

The RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.1 P03 contain an Improper Authentication vulnerability. A Java JMX agent running on the remote host is configured with plain text password authentication. An unauthenticated remote attacker can...

OpenJDK: unbounded memory allocation during deserialization in TabularDataSupport (JMX, 8189985)

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JMX. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161; JRockit: R28.3.17. Easily exploitable vulnerability allows unauthenticated attacker with...

CVE-2016-0448

Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX...