Lucene search
K

93 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2009-2708

Malware in sbrugna...

6.8CVSS6.3AI score0.01336EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2005-2531

Malware in sbrugna...

10CVSS6.4AI score0.02454EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 6:9 a.m.4 views

SUSE CVE-2008-0657

Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants...

10CVSS7.3AI score0.02839EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:7 a.m.5 views

SUSE CVE-2008-3106

Unspecified vulnerability in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted 1 application or 2 applet, a different...

4.3CVSS7AI score0.03342EPSS
Exploits0References7
SUSE CVE
SUSE CVE
added 2023/02/15 6:7 a.m.4 views

SUSE CVE-2008-3109

Unspecified vulnerability in scripting language support in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants itself...

7.5CVSS6.8AI score0.03467EPSS
Exploits0References4
SUSE CVE
SUSE CVE
added 2023/02/15 6:3 a.m.4 views

SUSE CVE-2009-2676

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE for Business in SDK and JRE 1.4.221 and earlier; allows remote attackers to create or modify arbitrary files via vecto...

6.8CVSS6.9AI score0.03645EPSS
Exploits1References6
SUSE CVE
SUSE CVE
added 2023/02/15 6:3 a.m.6 views

SUSE CVE-2009-2690

The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted 1 applet or 2 application...

5CVSS6.4AI score0.02579EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2020/04/21 4:34 p.m.4 views

OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)

A flaw was found in the boundary checks in the java.nio buffer classes in the Libraries component of OpenJDK, where it is bypassed in certain cases. This flaw allows an untrusted Java application or applet o bypass Java sandbox restrictions...

8.3CVSS7.4AI score0.0623EPSS
Exploits0References4
Veracode
Veracode
added 2020/04/10 12:44 a.m.15 views

Privilege Escalation

java is vulnerable to privilege escalation. The vulnerability exists as an information leak was found in the JRE. An untrusted applet or application could use this flaw to extend its privileges, allowing it to read and write local files, as well as to execute local applications with the privilege...

7.5CVSS3.4AI score0.02666EPSS
Exploits0References11Affected Software1
Veracode
Veracode
added 2020/04/10 12:44 a.m.22 views

Privilege Escalation

java is vulnerable to privilege escalation. The vulnerability exists as a flaw in the JRE with passing arrays to the X11GraphicsDevice API was found. An untrusted applet or application could use this flaw to access and modify the list of supported graphics configurations. This flaw could also lea...

7.5CVSS3AI score0.02342EPSS
Exploits0References11Affected Software1
Veracode
Veracode
added 2020/04/10 12:35 a.m.29 views

Access Restrictions Bypass

JRE proxy is vulnerable to access restrictions bypass. An additional flaw was found in the proxy mechanism implementation. This flaw allowed an untrusted applet or application to bypass access restrictions and communicate using non-authorized socket or URL connections to hosts other than the orig...

7.5CVSS3.1AI score0.04838EPSS
Exploits0References39Affected Software2
Veracode
Veracode
added 2020/04/10 12:35 a.m.28 views

Privilege Escalation

JRE proxy implementation is vulnerable to privilege escalation. Two flaws were found in the JRE proxy implementation. An untrusted applet or application could use these flaws to discover the usernames of users running applets and applications, or obtain web browser cookies and use them for sessio...

7.5CVSS4.2AI score0.04564EPSS
Exploits0References34Affected Software2
Veracode
Veracode
added 2019/01/15 8:56 a.m.23 views

Sandbox Restrictions Bypass

openjdk is vulnerable to sandbox restrictions bypass. Improper permission checks allow an untrusted Java application or applet to bypass Java sandbox restrictions and perform unauthorized actions...

9.3CVSS6AI score0.05233EPSS
Exploits1References16Affected Software1
RedHat Linux
RedHat Linux
added 2016/10/20 12:48 p.m.3 views

OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)

A flaw was found in the way the JMX component of OpenJDK handled classloaders. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions...

4.3CVSS7.3AI score0.03122EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2016/10/20 12:37 p.m.7 views

OpenJDK: insufficient classloader consistency checks in ClassLoaderWithRepository (JMX, 8157739)

A flaw was found in the way the JMX component of OpenJDK handled classloaders. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions...

4.3CVSS7.3AI score0.03122EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2016/07/18 1:51 p.m.3 views

OpenJDK: incorrect boundary check in JPEG decoder (AWT, 8139017)

An out-of-bounds write flaw was found in the JPEG image format decoder in the AWT component in OpenJDK. A specially crafted JPEG image could cause a Java application to crash or, possibly execute arbitrary code. An untrusted Java application or applet could use this flaw to bypass Java sandbox...

10CVSS7.3AI score0.14446EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2016/03/24 11:58 p.m.9 views

OpenJDK: missing type safety checks for MethodHandle calls across class loaders, incorrect CVE-2013-5838 fix (Hotspot, 8151666)

An improper type safety check was discovered in the Hotspot component. An untrusted Java application or applet could use this flaw to bypass Java Sandbox restrictions...

9.3CVSS7.4AI score0.05786EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2015/07/22 7:33 p.m.2 views

ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)

An information leak flaw was found in the 2D component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions...

5CVSS6.6AI score0.05325EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/02/05 7:35 p.m.4 views

OpenJDK: incorrect class loader permission check in ClassLoader getParent() (Libraries, 8055314)

An improper permission check issue was discovered in the Libraries component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

10CVSS6.1AI score0.04577EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/02/05 7:34 p.m.3 views

OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)

An improper permission check issue was discovered in the RMI component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

10CVSS6.8AI score0.07153EPSS
Exploits0References5
Rows per page
Query Builder