434 matches found
The vulnerability of the Java Platform software platform allows a remote attacker to compromise the confidentiality of protected information.
The vulnerability of the Java SE software platform allows a malicious actor to compromise data confidentiality by using the Swing subcomponent...
Vulnerability of the Java Platform software platform, allowing a remote attacker to compromise the integrity of protected information
The vulnerability of the Java SE software platform allows a malicious actor to compromise data integrity by using a sub-component called Deployment...
Vulnerability of the Java Runtime Environment software platform, which allows a malicious attacker to compromise data confidentiality and integrity
Vulnerability of the Java Runtime Environment, related to program components. Exploiting this vulnerability allows a malicious attacker to compromise data confidentiality and integrity by using the Beans component...
Arbitrary File Upload Vulnerability in Cost Accounting Practical Training Teaching Platform of Xiamen NetZhong.com Software Co.
Cost accounting practical training teaching platform of Xiamen NetZone Software Co. There is a file upload vulnerability in the cost accounting training platform that can be exploited by an attacker to upload arbitrary files and gain control of the site...
The vulnerability of the Java Platform software platform allows a perpetrator to load arbitrary files onto a computer.
The vulnerability of the Java Platform-related software platform is associated with the manipulation of intersite requests. Exploiting this vulnerability allows a malicious actor to download arbitrary files onto a computer by transmitting links to those files at the time of application installati...
Vulnerability of the Java Platform software platform, which allows attackers to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to affect the integrity, availability, and confidentiality of information by manipulating the CORBA system...
OpenJDK: logging of RMI connection secrets (JMX, 8130710)
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66, and Java SE Embedded 8u65 allows remote authenticated users to affect confidentiality via vectors related to JMX...
Vulnerability of Jrockit and Java Platform software platforms, which allow attackers to cause partial service interruptions
The vulnerability of the JAXP sub-component in JRockit and Java Platform-related software platforms is associated with errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to cause a partial service failure through network packets via the Java Web Start...
Vulnerability of the Java Platform software platform, which allows attackers to manipulate the accessibility of information
The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through the use of Java Web Start or Java applets...
Vulnerability of the Java Platform software platform, allowing attackers to modify data
The vulnerability of the Java Platform software platform’s sub-component is related to errors in the code. Exploiting this vulnerability allows a malicious actor to modify data remotely through an Java Web Start application or Java applet...
用友某集团平台存在设计缺陷可任意删除文件致系统崩溃
简要描述: 任意删除文件 详细说明: 目标系统:http://ufsdp.ufida.com/ 因为系统的logo被我测试时删除了,所以界面看起来有点丑 这一切都源于扫描器发现的一个文件 http://ufsdp.ufida.com/UploadFile.aspx 漏洞证明: UploadFile.aspx经过测试没法上传shell,但是我发现上传后,会出现已上传文件的列表,以及删除文件的X 即访问如下链接就可以达到删除logo的目的 http://ufsdp.ufida.com/UploadFile.aspx?d=../../Images/logo.gif 所以,如果访问...
The vulnerability of the Java Platform software platform allows a perpetrator to compromise the confidentiality of information.
The vulnerability of the Java Platform-related software platform is associated with errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the confidentiality of information...
The vulnerability of the Java Platform software platform allows a perpetrator to compromise the integrity, accessibility, and confidentiality of information.
The vulnerability of the Java Platform-related software platform is associated with errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to compromise the integrity, accessibility, and confidentiality of information...
CVE-2015-3103
CVE-2015-3103 concerns Adobe Flash Player and is supported by connected sources that identify it as a race condition leading to a use-after-free. The issue affects Flash Player on Windows, OS X, and Linux, with the vulnerability triggered by a COM object initialization/deinitialization sequence t...
Adobe Flash Player Memory Misreference Vulnerability (CNVD-2015-02498)
Adobe Flash Player is a cross-platform, browser-based multimedia player product from Adobe. The product supports cross-screen and browser viewing of applications, content and videos. A memory misreference vulnerability exists in Adobe Flash Player. An attacker could exploit this vulnerability to...
CVE-2015-0395
Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...
OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot...
JDK: unspecified vulnerability fixed in 7u65 and 8u11 (Deployment)
Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-4220...
Zend Java Bridge - Remote Code Execution (ZDI-11-113)
No description provided by source. / Zend Java Bridge v3.1 - Remote Code Execution ZDI-11-113 Copyright c 2010 Luca Carettoni ZJB.java v0.2 - 4 August 2010 Usage java -jar zjb.jar IP PORT 'CMD' Default: 10001/tcp Version affected Zend Server v5.0.2, Zend Server Community Edition v5.0.2 and previo...
Abyss Web Server 1.0 Encoded Backslash Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5547/info A directory traversal vulnerability has been reported for Abyss Web Server. The issue is related to the failure to properly process the backslash '', encoded as '%5c', character, which may be used as a directory...