309 matches found
OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508...
OpenJDK: maximum XML name limit not applied to namespace URIs (JAXP, 8148872)
Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508...
JDK: unspecified vulnerability fixed in 7u111 and 8u101 (JavaFX)
Unspecified vulnerability in Oracle Java SE 7u101 and 8u92 allows remote attackers to affect availability via vectors related to JavaFX...
Unspecified Vulnerability in Oracle Database Server Portable Clusterware
Oracle Database Server is an object-relational database management system. It provides an open, comprehensive, and integrated approach to information management. A security vulnerability exists in the Portable Clusterware component of Oracle Database Server versions 11.2.0.4, 12.1.0.2, which can ...
The vulnerability of the OpenSSL software allows a malicious attacker to compromise the confidentiality, integrity, and accessibility of protected information.
The state of the race function in sslparseserverhellotlsext in t1lib.c of OpenSSL, when multiprocessing and session resumption are used, allows remote SSL servers to cause service interruptions such as memory reallocation and unexpected termination of applications, or otherwise affect the system ...
The vulnerability of the Cisco Wireless LAN Controller 2100 software allows a malicious individual to cause service failure.
The vulnerability in the implementation of IGMP for Cisco Wireless LAN Controllers WLCs, when the IGMPv3 Snooping feature is enabled, allows malicious actors operating remotely to trigger service interruptions such as reading beyond the boundaries and rebooting the device by using a specially...
The vulnerabilities of PDF viewer programs such as Adobe Reader, Adobe Reader Document Cloud, and PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat allow attackers to cause service interruptions or execute arbitrary codes.
The vulnerabilities of PDF viewer programs such as Adobe Reader and Adobe Reader Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are due to buffer overflow vulnerabilities. Exploiting these vulnerabilities can allow attackers to execute arbitra...
CVE-2016-0420
Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allows remote attackers to affect availability via unknown vectors related to Monitoring and Diagnostics...
OpenJDK: incorrect String object deserialization in IIOPInputStream (CORBA, 8076387)
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA...
UBUNTU-CVE-2015-4882
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect availability via vectors related to CORBA...
CVE-2015-6744
Basware Banking Maksuliikenne before 8.90.07.X relies on the client to enforce 1 login verification, 2 audit trail creation, and 3 account locking, which allows remote attackers to "disrupt security-critical functions" by "dropping network traffic." NOTE: this identifier was SPLIT from...
OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)
Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security...
The vulnerability of the ICMP-MIB protocol implementation in the Net-SNMP software suite for the Linux operating system allows a hacker to induce a service failure.
The vulnerability of the ICMP-MIB protocol implementation in the Net-SNMP software suite for the Linux operating system is related to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...
UBUNTU-CVE-2015-2568
Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges...
Design/Logic Flaw
Arbiter 1094B GPS Substation Clock allows remote attackers to cause a denial of service disruption via crafted radio transmissions that spoof GPS satellite broadcasts...
lcms: insufficient ICC profile version validation (OpenJDK 2D, 8031335)
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D...
OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that...
JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)
Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect availability via unknown vectors related to Deployment...
OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)
Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that...
OpenJDK: insufficient checks of KDC replies (JGSS, 8014341)
Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect availability via vectors related to JGSS...