7271 matches found
Oracle Java SE Multiple Vulnerabilities (October 2017 CPU)
The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 1, 8 Update 151, 7 Update 161, or 6 Update 171. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D Little CMS 2 - Deployment - Hotspot -...
Java SE and Java SE Embedded Libraries Subcomponent Denial of Service Vulnerability
Oracle Java SE is the standard version of Oracle's Java platform for developing and deploying Java applications for desktops, servers, and embedded devices and real-time environments, and Java SE and Java SE Embedded are components of Java SE Embedded, a Java platform for developing powerful,...
Oracle Java SE Security Updates (oct2017-3236626) 02 - Windows
Oracle Java SE is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Unspecified Vulnerability in Oracle Java SE and Java SE Embedded Components (CNVD-2017-31310)
Oracle Java SE is short for Java Platform Standard Edition, which is used to develop and deploy Java applications for desktops, servers, and embedded devices and real-time environments.Java SE Embedded is based on Java SE and provides specific features and support for embedded systems. An...
KLA11122 Multiple vulnerabilities in Oracle Java SE, Java SE Embedded and JRockit
Multiple serious vulnerabilities have been found in Oracle Java SE. Malicious users can exploit these vulnerabilities to cause denial of service and bypass security restrictions. Below is a complete list of vulnerabilities: 1. An unspecified vulnerability in subcomponent Smart Card IO can be...
HIBUN Confidential File Decryption program may insecurely load Dynamic Link Libraries
Overview HIBUN Confidential File Decryption program provided by Hitachi Solutions, Ltd. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Note that this vulnerability is different from JVN55516206. Yuji Tounai of NTT Communications...
ArcGIS Server 10.3.1 RMIClassLoader useCodebaseOnly=false Code Execution Exploit
ArcGIS Server version 10.3.1 suffers from an RMIClassLoader useCodebaseOnly=false remote code execution vulnerability. Using an Esri-provided image on Azure's Marketplace, ArcGIS Server 10.3.1 started Java's rmid on port 1098 and explicitly set the property java.rmi.server.useCodebaseOnly equal t...
SmartBear SoapUI 5.3.0 Remote Code Execution Via Deserialization
Title: SmartBear SoapUI - Remote Code Execution via Deserialization Author: Jakub Palaczynski Date: 12. July 2017 Exploit tested on: ================== SoapUI 5.3.0 Also works on older versions. Vulnerability: Remote Code Execution via Deserialization: ================================= SoapUI by...
Self-Decrypting Confidential Files created by JP1/HIBUN may insecurely load Dynamic Link Libraries
Overview Self-decrypting confidential files created by JP1/HIBUN contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor...
[SECURITY] Fedora 27 Update: file-5.31-10.fc27
The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats...
[SECURITY] Fedora 27 Update: rubygems-2.6.13-100.fc27
RubyGems is the Ruby standard for publishing and managing third party libraries...
Install program and Installer of i-filter 6.0 may insecurely load Dynamic Link Libraries and invoke executable files
Overview i-filter 6.0 provided by Digital Arts Inc. is web filtering and parental control software. The install program is designed to download the installer via the internet and execute it. The i-filter 6.0 install program and installer contain the following vulnerabilities. Eili Masami of...
radare2 - Unix-Like Reverse Engineering Framework And Commandline Tools
r2 is a rewrite from scratch of radare in order to provide a set of libraries and tools to work with binary files. The radare project started as a forensics tool, a scriptable command-line hexadecimal editor able to open disk files, but later support for analyzing binaries, disassembling code,...
[SECURITY] Fedora 26 Update: mpg123-1.25.6-1.fc26
Real time MPEG 1.0/2.0/2.5 audio player/decoder for layers 1, 2 and 3 most commonly MPEG 1.0 layer 3 aka MP3, as well as re-usable decoding and output libraries...
JVN#75929834: Install program and Installer of i-フィルター 6.0 may insecurely load Dynamic Link Libraries and invoke executable files
i-フィルター 6.0 provided by Digital Arts Inc. is web filtering and parental control software. The install program is designed to download the installer via the internet and execute it. The i-フィルター 6.0 install program and installer contain the following vulnerabilities. Lead to insecurely loading...
[SECURITY] Fedora 26 Update: file-5.30-11.fc26
The file command is used to identify a particular file according to the type of data contained by the file. File can identify many different file types, including ELF binaries, system libraries, RPM packages, and different graphics formats...
EulerOS 2.0 SP1 : java-1.7.0-openjdk (EulerOS-SA-2017-1207)
According to the versions of the java-1.7.0-openjdk packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - It was discovered that the DCG implementation in the RMI component of OpenJDK failed to correctly handle references. A remote attack...
[SECURITY] Fedora 26 Update: rubygems-2.6.13-100.fc26
RubyGems is the Ruby standard for publishing and managing third party libraries...
