Lucene search
K

2526 matches found

Cvelist
Cvelist
added 2006/12/26 11:0 p.m.30 views

CVE-2006-6745

Multiple unspecified vulnerabilities in Sun Java Development Kit JDK and Java Runtime Environment JRE 5.0 Update 7 and earlier, and Java System Development Kit SDK and JRE 1.4.212 and earlier 1.4.x versions, allow attackers to develop Java applets or applications that are able to gain privileges,...

6.6AI score0.14768EPSS
Exploits0References35
securityvulns
securityvulns
added 2006/12/20 12:0 a.m.32 views

Sun Java Runtime Environment multiple security vulnerabilities

Multiple vulnerabilities allow sandbox protection bypass and system functions access...

4AI score
Exploits0References2Affected Software2
Tenable Nessus
Tenable Nessus
added 2006/12/20 12:0 a.m.31 views

Sun Java JRE Multiple Vulnerabilities (102729 / 102732)

According to its version number, the Sun JRE installed on the remote host has two buffer overflow issues that may allow an untrusted applet to elevate its privileges to, for example, read or write local files or to execute local applications subject to the privileges of the user running the apple...

9.3CVSS5.9AI score0.14768EPSS
Exploits0References7
Cvelist
Cvelist
added 2006/11/21 11:0 p.m.19 views

CVE-2006-6009

Unspecified vulnerability in the Java Runtime Environment JRE Swing library in JDK and JRE 5.0 Update 7 and earlier allows attackers to obtain certain information via unknown attack vectors, related to an untrusted applet accessing data in other applets...

6.2AI score0.00417EPSS
Exploits0References6
CVE
CVE
added 2006/05/26 1:0 a.m.62 views

CVE-2003-1301

CVE-2003-1301 affects Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06 (and usage in multiple web browsers), where deeply nested object arrays are not properly handled by the garbage collector, enabling remote denial of service (application crash) via invalid memor...

5CVSS7AI score0.01171EPSS
Exploits1References5Affected Software1
exploitpack
exploitpack
added 2006/05/22 12:0 a.m.14 views

Sun Java Runtime Environment 1.31.41.5 - Nested Array Objects Denial of Service

Sun Java Runtime Environment 1.31.41.5 - Nested Array Objects Denial of Service source: https://www.securityfocus.com/bid/18058/info The Sun Java Runtime Environment is vulnerable to a denial-of-service vulnerability. This issue is due to the software's failure to handle exceptional conditions...

0.3AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2006/01/17 12:0 a.m.36 views

GLSA-200601-10 : Sun and Blackdown Java: Applet privilege escalation

The remote host is affected by the vulnerability described in GLSA-200601-10 Sun and Blackdown Java: Applet privilege escalation Adam Gowdiak discovered multiple vulnerabilities in the Java Runtime Environment's Reflection APIs that may allow untrusted applets to elevate privileges. Impact : A...

7.5CVSS5.7AI score0.11508EPSS
Exploits0References5
Gentoo Linux
Gentoo Linux
added 2006/01/16 12:0 a.m.28 views

Sun and Blackdown Java: Applet privilege escalation

Background Sun and Blackdown both provide implementations of the Java Development Kit JDK and Java Runtime Environment JRE. Description Adam Gowdiak discovered multiple vulnerabilities in the Java Runtime Environment's Reflection APIs that may allow untrusted applets to elevate privileges. Impact...

7.5CVSS6.9AI score0.11508EPSS
Exploits0
NVD
NVD
added 2005/11/16 7:42 a.m.14 views

CVE-2005-3583

1 Java Runtime Environment JRE and 2 Software Development Kit SDK 1.4.208, 1.4.209, and 1.5.005 and possibly other versions allow remote attackers to cause a denial of service JVM unresponsive via a crafted serialized object, such as a font object as demonstrated on JBoss...

7.8CVSS6.7AI score0.0094EPSS
Exploits0References4
Cvelist
Cvelist
added 2005/11/16 7:37 a.m.21 views

CVE-2005-3583

1 Java Runtime Environment JRE and 2 Software Development Kit SDK 1.4.208, 1.4.209, and 1.5.005 and possibly other versions allow remote attackers to cause a denial of service JVM unresponsive via a crafted serialized object, such as a font object as demonstrated on JBoss...

6.7AI score0.0094EPSS
Exploits0References4
Cvelist
Cvelist
added 2005/11/16 7:37 a.m.22 views

CVE-2004-2540

readObject in 1 Java Runtime Environment JRE and 2 Software Development Kit SDK 1.4.0 through 1.4.205 allows remote attackers to cause a denial of service JVM unresponsive via crafted serialized data...

6.4AI score0.00928EPSS
Exploits0References4
CVE
CVE
added 2005/11/16 7:37 a.m.54 views

CVE-2005-3583

The CVE-2005-3583 entry concerns Oracle/Sun Java Runtime Environment (JRE) and Software Development Kit (SDK) versions 1.4.2_08, 1.4.2_09, and 1.5.0_05 (and possibly others) that allow remote attackers to cause a denial of service by sending a crafted serialized object (e.g., a font object), whic...

7.8CVSS7.1AI score0.0094EPSS
Exploits0References4Affected Software2
CVE
CVE
added 2005/06/21 4:0 a.m.50 views

CVE-2001-1480

Affected software: Sun JRE/JDK 1.2–1.3.0_04. Vulnerable component: clipboard access logic in untrusted applets. Root cause/impact: enables untrusted applets to access the system clipboard, potentially exposing or altering clipboard data. Affected products explicitly listed as SUN JRE/JDK versions...

7.5CVSS6.6AI score0.0054EPSS
Exploits1References5Affected Software4
Cvelist
Cvelist
added 2005/06/21 4:0 a.m.20 views

CVE-2001-1480

Java Runtime Environment JRE and SDK 1.2 through 1.3.004 allows untrusted applets to access the system clipboard...

6.5AI score0.0054EPSS
Exploits1References5
Cvelist
Cvelist
added 2005/03/12 5:0 a.m.22 views

CVE-2003-1123

Sun Java Runtime Environment JRE and SDK 1.4.001 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model...

6.4AI score0.08589EPSS
Exploits1References6
CVE
CVE
added 2005/02/19 5:0 a.m.63 views

CVE-2004-1503

The CVE-2004-1503 entry concerns the Java Runtime Environment (JRE) InitialDirContext vulnerability. Affected software are JRE versions 1.4.2, 1.5.0 (and possibly others). The issue arises in the InitialDirContext where an integer overflow allows a large sequence of DNS requests to cause the xid ...

5CVSS7.3AI score0.00928EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
added 2005/02/19 5:0 a.m.18 views

CVE-2004-1503

Integer overflow in the InitialDirContext in Java Runtime Environment JRE 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service Java exception and failed DNS requests via a large number of DNS requests, which causes the xid variable to wrap around and becom...

6.9AI score0.00928EPSS
Exploits0References4
Tenable Nessus
Tenable Nessus
added 2005/02/16 12:0 a.m.10 views

HP-UX PHSS_22678 : HP-UX ContinentalClusters, Remote Unauthorized Access (HPSBUX00133 SSRT071376 rev.2)

s700800 11.X Continental Clusters A.02.00 : ContinentalClusters includes the Java Runtime Environment JRE which is affected by the security issue described in Hewlett-Packard Company Security Bulletin 0132, 30 Nov. '00, ITRC Technical Knowledge base Document ID HPSBUX0011-132. %NASLMINLEVEL 70300...

5.2AI score
Exploits0References1
NVD
NVD
added 2004/12/31 5:0 a.m.18 views

CVE-2004-2540

readObject in 1 Java Runtime Environment JRE and 2 Software Development Kit SDK 1.4.0 through 1.4.205 allows remote attackers to cause a denial of service JVM unresponsive via crafted serialized data...

5CVSS6.4AI score0.00928EPSS
Exploits0References4
NVD
NVD
added 2004/12/31 5:0 a.m.20 views

CVE-2004-1503

Integer overflow in the InitialDirContext in Java Runtime Environment JRE 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service Java exception and failed DNS requests via a large number of DNS requests, which causes the xid variable to wrap around and becom...

5CVSS6.9AI score0.00928EPSS
Exploits0References4
Rows per page
Query Builder