CVE-2020-12787

Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling...

Design/Logic Flaw

Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling...

CVE-2020-12787

The CVE-2020-12787 entry concerns Microchip Atmel ATSAMA5 products in Secure Mode where an attacker can bypass applet handling security mechanisms. Connected sources corroborate the issue across Red Hat advisory and NVD entries, indicating the vulnerability affects ATSAMA5 SoCs operating in Secur...

CVE-2020-12787

Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling...

PT-2020-13267

Name of the Vulnerable Software and Affected Versions Microchip Atmel ATSAMA5 products affected versions not specified Description The issue allows an attacker to bypass existing security mechanisms related to applet handling in Secure Mode. Recommendations At the moment, there is no information...

CVE-2020-12787: Undefined Security Weakness

Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling...

Unauthorized Modification And Access

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

CVE-2020-14556

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE component: Libraries. Supported versions that are affected are Java SE: 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple...

OpenJDK: Incorrect bounds checks in NIO Buffers (Libraries, 8234841)

A flaw was found in the boundary checks in the java.nio buffer classes in the Libraries component of OpenJDK, where it is bypassed in certain cases. This flaw allows an untrusted Java application or applet o bypass Java sandbox restrictions...

Jshop applet mall program has SQL injection vulnerability

Jshop small program mall is an open source e-commerce system. Jshop applet mall program has a SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive information in the database...

Remote Code Execution (RCE)

The IcedTea-Web is vulnerable to denial of service DoS. A flaw was found in the same-origin policy implementation in the IcedTea-Web browser plug-in. A malicious Java applet could use this flaw to open network connections to hosts other than the originating host, violating the same-origin policy...

Arbitrary Code Execution

java is vulnerable to arbitrary code execution. The vulnerability exists as a flaw was found in the HotSpot component in OpenJDK. Certain bytecode instructions confused the memory management within the Java Virtual Machine JVM, resulting in an applet or application crashing...

Access Restriction Bypass

java-openjdk is vulnerable to Access restriction bypass. Due to some flaws in the Java Virtual Machine JVM and in various Java class implementations, it allows an unsigned applet or application to bypass intended access restrictions...

Privilege Escalation

java is vulnerable to privilege escalation. The vulnerability exists as an information leak was found in the JRE. An untrusted applet or application could use this flaw to extend its privileges, allowing it to read and write local files, as well as to execute local applications with the privilege...

Information Disclosure

java is vulnerable to information disclosure. The vulnerability exists as it was discovered that the JRE passed entire objects to the logging API. This could lead to sensitive information being leaked to either untrusted or lower-privileged code from an attacker-controlled applet which has access...

Privilege Escalation

java is vulnerable to privilege escalation. The vulnerability exists as a flaw in the JRE with passing arrays to the X11GraphicsDevice API was found. An untrusted applet or application could use this flaw to access and modify the list of supported graphics configurations. This flaw could also lea...

Spoofing Attack

ibm java is vulnerable to spoofing attack. A remote attacker is able to trick a user into trusting a signed applet by misrepresenting the security warning dialog...

Access Restrictions Bypass

JRE proxy is vulnerable to access restrictions bypass. An additional flaw was found in the proxy mechanism implementation. This flaw allowed an untrusted applet or application to bypass access restrictions and communicate using non-authorized socket or URL connections to hosts other than the orig...

Information Disclosure

JRE proxy implementation is vulnerable to information disclosure. Two flaws were found in the JRE proxy implementation. An untrusted applet or application could use these flaws to discover the usernames of users running applets and applications, or obtain web browser cookies and use them for...

Privilege Escalation

JRE proxy implementation is vulnerable to privilege escalation. Two flaws were found in the JRE proxy implementation. An untrusted applet or application could use these flaws to discover the usernames of users running applets and applications, or obtain web browser cookies and use them for sessio...