CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4220 matches found

Microsoft CVE•added 2022/01/22 8:0 a.m.•4 views

Vulnerability in the Oracle Java SE Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 7u321 8u311 11.0.13 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java SE Oracle GraalVM Enterprise Edition. Successful attacks of this vulnerability can result in unauthorized update insert or delete access to some of Oracle Java SE Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments typically in clients running sandboxed Java Web Start applications or sandboxed Java applets that load and run untrusted code (e.g. code that comes from the internet) and rely on the Java sandbox for security. This vulnerability can also be exploited by using APIs in the specified Component e.g. through a web service which supplies

...

4.3CVSS6AI score0.00083EPSS

Exploits0

Positive Technologies•added 2022/01/21 12:0 a.m.•1 views

PT-2022-13109 · Loguru · Loguru

Name of the Vulnerable Software and Affected Versions: loguru versions prior to 0.6.0 Description: The issue concerns a lack of sanitization on log serialization, which can lead to arbitrary code execution. The function in question is intended for internal use only but is not restricted. This iss...

7AI score

Exploits0References15

Tenable Nessus•added 2022/01/20 12:0 a.m.•73 views

RHEL 8 : java-17-openjdk (RHSA-2022:0161)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0161 advisory. The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fixe...

5.3CVSS6.5AI score0.05612EPSS

Exploits0References33

OSV•added 2022/01/19 12:15 p.m.•1 views

DEBIAN-CVE-2022-21341

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are affected are Oracle Java SE: 7u321, 8u311, 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability...

5.3CVSS5.7AI score0.00143EPSS

Exploits0References1