Lucene search
+L

15687 matches found

Veracode
Veracode
added 2019/05/02 5:03 a.m.25 views

Authentication Bypass

Multiple improper permission check issues were discovered in the Libraries component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

9.3CVSS6AI score0.04751EPSS
SaveExploits0References15Affected Software1
Veracode
Veracode
added 2019/05/02 5:03 a.m.29 views

Weak Encryption Parameters

The Diffie-Hellman DH key exchange algorithm implementation in the Security component in OpenJDK failed to validate public DH parameters properly. This could cause OpenJDK to accept and use weak parameters, allowing an attacker to recover the negotiated key...

4CVSS4.7AI score0.03501EPSS
SaveExploits0References81Affected Software3
Veracode
Veracode
added 2019/05/02 5:03 a.m.28 views

Authentication Bypass

Multiple flaws were discovered in the JMX, Libraries, Security, and Serviceability components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...

4.3CVSS6.1AI score0.03482EPSS
SaveExploits0References28Affected Software1
Veracode
Veracode
added 2019/05/02 5:03 a.m.26 views

Buffer Overflows

AtomicReferenceFieldUpdater in OpenJDK does not properly check if the field to be updated is of primitive type. An untrusted Java application or applet could use flaw to trigger Java virtual machine memory corruption and possibly bypass Java sandbox restrictions...

9.3CVSS3.9AI score0.05577EPSS
SaveExploits0References39Affected Software3
Veracode
Veracode
added 2019/05/02 5:03 a.m.27 views

Authentication Bypass

It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions...

9.3CVSS5.9AI score0.0536EPSS
SaveExploits0References20Affected Software2
Veracode
Veracode
added 2019/05/02 5:03 a.m.21 views

Authentication Bypass

Multiple flaws were discovered in the JMX, Libraries, Security, and Serviceability components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...

6.4CVSS4.5AI score0.03826EPSS
SaveExploits0References39Affected Software3
Veracode
Veracode
added 2019/05/02 5:02 a.m.30 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.5AI score0.07279EPSS
SaveExploits0References16Affected Software2
Veracode
Veracode
added 2019/05/02 5:02 a.m.38 views

Privilege Escalation

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.5AI score0.07279EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
added 2019/05/02 5:02 a.m.32 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07279EPSS
SaveExploits0References14Affected Software2
Veracode
Veracode
added 2019/05/02 5:02 a.m.33 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07279EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
added 2019/05/02 5:02 a.m.39 views

Denial Of Service (DoS)

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.5AI score0.07279EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
added 2019/05/02 5:02 a.m.48 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07279EPSS
SaveExploits0References17Affected Software2
Veracode
Veracode
added 2019/05/02 5:02 a.m.43 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07279EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
added 2019/05/02 5:02 a.m.43 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07279EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
added 2019/05/02 4:55 a.m.29 views

Denial Of Service (DoS)

openjdk is vulnerable to denial of service. A remote attacker is able to crash the application via excessive resource consumption and a daemon restart using malicious values in an HTTP request...

7.8CVSS1.8AI score0.32096EPSS
SaveExploits0References5Affected Software1
Veracode
Veracode
added 2019/05/02 4:54 a.m.23 views

Information Disclosure

OpenJDK is vulnerable to information disclosure. The attack is due to a flaw which allows an untrusted Java application or applet to bypass certain Java sandbox restrictions...

5CVSS5.7AI score0.03961EPSS
SaveExploits0References28Affected Software3
Veracode
Veracode
added 2019/05/02 4:54 a.m.34 views

Arbitrary Code Execution

OpenJDK 7 is vulnerable to arbitrary code execution. It allows an untrusted Java application or applet to use a flaw to bypass Java sandbox restrictions...

9.3CVSS6.6AI score0.05501EPSS
SaveExploits0References26Affected Software3
Veracode
Veracode
added 2019/05/02 4:54 a.m.41 views

Arbitrary Code Execution

OpenJDK is vulnerable to arbitrary code execution. The attack is due to a flaw which allows an untrusted Java application or applet to bypass certain Java sandbox restrictions...

9.3CVSS6.6AI score0.04652EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
added 2019/05/02 4:54 a.m.41 views

Sandbox Restrictions Bypass

openjdk is vulnerable to sandbox restrictions bypass. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions and affect confidentiality, integrity and availability via vectors related to 2D...

10CVSS6.1AI score0.07188EPSS
SaveExploits0References28Affected Software3
Veracode
Veracode
added 2019/05/02 4:54 a.m.38 views

Arbitrary Code Execution

OpenJDK is vulnerable to arbitrary code execution. The attack is due to a flaw which allows an untrusted Java application or applet to bypass certain Java sandbox restrictions...

10CVSS6.7AI score0.07188EPSS
SaveExploits0References28Affected Software3
Rows per page
Query Builder