be.yildiz-games:module-window-javafx (>=3.2.2 <=3.5.4), com.acrolinx.client:sidebar-sdk-java (>=2.5.21 <=2.8.1) +150 more potentially affected by CVE-2024-20925 via org.openjfx:javafx-media (>=18 <=21.0.11)

org.openjfx:javafx-media MAVEN version =18, =3.2.2, =2.5.21, =3.1.0, =1.8.0, =v1.2.0-beta.2, =17.1, =17.1, =17.1, =17.1, =17.1, =17.1, =17.1, =2022.2023, =2022.2023.beta1 and more Source cves: CVE-2024-20925 Source advisory: OSV:GHSA-47G3-MF24-6559...

be.yildiz-games:module-window-javafx (>=1.0.0 <=3.2.0), ch.artaios:openchemlib-vaadin (>=2.0.0 <=3.0.0) +253 more potentially affected by CVE-2024-20925 via org.openjfx:javafx-media (>=11 <=17.0.1)

org.openjfx:javafx-media MAVEN version =11, =1.0.0, =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2022.7.2, =0.1.0, =0.0.5, =0.0.5, =0.1.0 and more Source cves: CVE-2024-20925 Source advisory: OSV:GHSA-47G3-MF24-6559...

GHSA-47G3-MF24-6559 Vulnerability affecting the org.openjfx:javafx-media maven component of the OpenJFX project

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

CVE-2024-20925

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

CVE-2024-20923

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

CVE-2024-20925

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

Buffer overflow

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

UBUNTU-CVE-2024-20925

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

The vulnerability of the JavaFX component of Oracle Java SE and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to access confidential information.

The vulnerability of the JavaFX component of Oracle Java SE and the Oracle GraalVM Enterprise Edition software exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to gain access to confidential information...

The vulnerability of the JavaFX component of the Oracle Java SE software platform and the Oracle GraalVM Enterprise Edition virtual machine allows attackers to compromise the integrity of protected information.

The vulnerability of the JavaFX component of Oracle Java SE and the Oracle GraalVM Enterprise Edition platform exists due to insufficient testing of input data. Exploiting this vulnerability can allow an attacker to compromise the integrity of protected information...

The vulnerability of the JavaFX virtual machine Oracle GraalVM Enterprise Edition and the Oracle Java SE software platform allows a perpetrator to gain access to read, modify, or delete data.

The vulnerability of the JavaFX virtual machine Oracle GraalVM Enterprise Edition and the Oracle Java SE software lies in insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain access to read, modify, or delete data...

Important: java-11-amazon-corretto

Issue Overview: A vulnerability that allows an attacker to execute arbitrary java code from the javascript engine even though the option "--no-java" was set. CVE-2024-20918 With carefully crafted custom bytecodes, arbitrary unverified bytecodes could be executed. CVE-2024-20919 Loop optimizations...

CVE-2024-20922

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

UBUNTU-CVE-2024-20922

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JavaFX. Supported versions that are affected are Oracle Java SE: 8u391; Oracle GraalVM Enterprise Edition: 20.3.12 and 21.3.8. Difficult to exploit vulnerability allows unauthenticated...

PT-2024-1226

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u391 Oracle GraalVM Enterprise Edition versions 20.3.12 and 21.3.8 Description The issue exists due to insufficient input validation in the JavaFX component of Oracle Java SE and Oracle GraalVM Enterprise Edition. This...

PT-2024-1190

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 8u391 Oracle GraalVM Enterprise Edition versions 20.3.12 and 21.3.8 Description The issue is related to insufficient input validation in the JavaFX component of Oracle Java SE and Oracle GraalVM Enterprise Edition. This...

PT-2024-1230

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u391 Oracle GraalVM Enterprise Edition versions 20.3.12 and 21.3.8 Description A difficult to exploit vulnerability in the JavaFX component of Oracle Java SE and Oracle GraalVM Enterprise Edition allows an unauthenticat...

Amazon Linux 2 : java-1.8.0-openjdk (ALAS-2023-2189)

The version of java-1.8.0-openjdk installed on the remote host is prior to 1.8.0.382.b05-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2189 advisory. Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Jav...

Medium: java-1.8.0-openjdk

Issue Overview: Vulnerability in Oracle Java SE component: JavaFX. The supported version that is affected is Oracle Java SE: 8u371. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE. Successful attacks of thi...

Authorization Bypass

openjfx is vulnerable to Authorization Bypasses. This vulnerability occurs due to a flaw in the way that JavaFX handles image files. An attacker can exploit this vulnerability to execute arbitrary code on a vulnerable system...