12405 matches found
Important: java-1.7.0-openjdk
Issue Overview: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network...
OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via...
JDK: Unspecified vulnerability fixed in 7u221 and 8u211 (2D)
Vulnerability in the Java SE component of Oracle Java SE subcomponent: 2D. Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of...
[SECURITY] [DLA 1782-1] openjdk-7 security update
Package : openjdk-7 Version : 7u221-2.6.18-1deb8u1 CVE ID : CVE-2019-2602 CVE-2019-2684 CVE-2019-2698 Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in denial of service, sandbox bypass, information disclosure or the execution of...
Security Bulletin: IBM MessageSight is affected by the following four IBM Java vulnerabilities
Summary IBM MessageSight has addressed the following Java vulnerabilities: CVE-2018-12549: Eclipse OpenJ9 could allow a remote attacker to execute arbitrary code on the system. CVE-2018-12547: Eclipse OpenJ9 is vulnerable to a buffer overflow, caused by improper bounds checking by the jiosnprintf...
Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Datapower Gateway
Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™, Versions 7.1-4 and 8.0-5 used by IBM DataPower Gateway. IBM DataPower Gateway has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-12547 DESCRIPTION: Eclipse OpenJ9 is vulnerable to a buffer overflow...
Oracle Java File Detection for Windows (deprecated)
The host contains one or more java executables. This plugin has been deprecated. unmanagedsoftwarewindows.nbin plugin ID 921433 is used instead. Binary data sunjavasearch.nbin...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK affects IBM InfoSphere Information Server
Summary There are multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Versions 7 and 8 that are used by IBM InfoSphere Information Server. These issues were disclosed as part of the IBM Java SDK updates in January 2019. Vulnerability Details CVEID: CVE-2018-1890 DESCRIPTION: IBM SD...
Privilege Escalation
Java SE, Java SE Embedded and JRockit component of Oracle Java SE are vulnerable to Privilege Escalation. A remote authenticated user can exploit this flaw in the JAAS component for unauthorized creation, deletion or modification access to critical data...
Privilege Escalation
Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to privilege escalation attacks. Affected Libraries component allows a remote attacker to exploit this flaw. Successful attacks can result in the takeover of Java SE, Java SE Embedded...
Privilege Escalation
Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to privilege escalation. A remote unauthenticated attacker can exploit the flaw in Hotspot component to gain elevated privileges. Successful exploitation of this vulnerability can result in takeover of Java SE, Java SE Embedd...
Unauthenticated Access
oracle java SE is vulnerable to unauthenticated access vulnerability. This exists due to not validating the length of the object identifier read from the DER input in Libraries component of OpenJDK before allocating memory to store the OID. An attacker able to make a Java application decode a...
Information Disclosure
Oracle Java SE and Java SE Embedded are vulnerable to information disclosure. A remote user can exploit a flaw in the Networking component to access sensitive information...
Privilege Escalation
Oracle Java SE is vulnerable to privilege escalation attacks. An unspecified vulnerability allows a local users to affect confidentiality, integrity, and availability via vectors related to Hotspot which leads to a denial of service attacks and an information disclosure...
Privilege Escalation
Oracle Java SE is vulnerable to privilege escalation attacks. An unspecified vulnerability allows an local users to affect confidentiality, integrity, and availability via vectors related to Libraries which leads to a denial of service attacks and an information disclosure...
Information Disclosure
Oracle Java SE is vulnerable to information disclosure. An unspecified vulnerability allows an local users to affect confidentiality via vectors related to Hotspot and access sensitive information...
Privilege Escalation
Oracle Java SE is vulnerable to privilege escalation attacks. An unspecified vulnerability allows an local users to affect confidentiality, integrity, and availability via vectors related to Hotspot which leads to a denial of service attacks and an information disclosure...
Denial Of Service (DoS)
Java is vulnerable to denial of service DoS. The vulnerability exists as an unspecified vulnerability in Oracle Java. This allows a remote attacker to manipulate with an unknown input related to JAXP component causing partial denial of service conditions...
Information Disclosure
Oracle Java SE is vulnerable to information disclosure vulnerability. The vulnerability exists in the Java Runtime Environment JRE component in Oracle Java SE because the Network component does not properly perform InetAddress serialization. Remote attackers could obtain sensitive information and...
Improper Access Control
Oracle Java SE is vulnerable to improper access control. Remote unauthenticated attackers could bypass Java sandbox restrictions via the vulnerable component JAXP...