Lucene search
K

84 matches found

SUSE Linux
SUSE Linux
added 2025/11/28 8:23 a.m.2 views

Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.1+8 October 2025 CPU Security fixes: JDK-8360937, CVE-2025-53057, bsc1252414: Enhance certificate handling JDK-8356294, CVE-2025-53066, bsc1252417: Enhance Path Factories JDK-8359454, CVE-2025-61748,...

8.7CVSS7AI score0.00068EPSS
Exploits0References14
OSV
OSV
added 2025/11/28 8:23 a.m.1 views

SUSE-SU-2025:4287-1 Security update for java-25-openjdk

This update for java-25-openjdk fixes the following issues: Update to upstream tag jdk-25.0.1+8 October 2025 CPU Security fixes: + JDK-8360937, CVE-2025-53057, bsc1252414: Enhance certificate handling + JDK-8356294, CVE-2025-53066, bsc1252417: Enhance Path Factories + JDK-8359454, CVE-2025-61748,...

7.5CVSS6.8AI score0.00068EPSS
Exploits0References7
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2021-28193

Malicious code in bioql PyPI...

5.3CVSS5.4AI score0.00079EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2025/08/20 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2021-41041

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a...

5.3CVSS5.9AI score0.00079EPSS
Exploits0References2
SUSE CVE
SUSE CVE
added 2023/02/15 3:37 a.m.1 views

SUSE CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5.3CVSS6.1AI score0.00079EPSS
Exploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2023/02/14 9:4 p.m.33 views

Security Bulletin: IBM CICS TX Advanced is vulnerable to allowing a remote attacker to bypass security restrictions (CVE-2021-41041).

Summary IBM CICS TX Advanced could allow a remote attacker to bypass security restrictions. The fix removes this vulnerability CVE-2021-41041 from IBM CICS TX Advanced. Vulnerability Details CVEID:CVE-2021-41041 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security...

5.3CVSS5.3AI score0.00079EPSS
Exploits0Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/01/20 12:0 a.m.35 views

openSUSE 15 Security Update : java-1_8_0-openj9 (SUSE-SU-2022:3092-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3092-1 advisory. - In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is trigger...

7.5CVSS6.9AI score0.10953EPSS
Exploits2References28
IBM Security Bulletins
IBM Security Bulletins
added 2022/11/16 9:5 p.m.31 views

Security Bulletin: IBM SDK, Java Technology Edition, Security Update July 2022

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, 8 that is used by Rational Application Developer®. These issues were disclosed as part of the IBM Java SDK updates up to July 2022. IBM 8 SR7 FP15 1.8.0341. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An...

5.9CVSS7.2AI score0.00438EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/10/26 2:25 p.m.39 views

Security Bulletin: IBM SDK, Java Technology Edition Quarterly CPU - Apr 2022and Jul 2022

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Versions 8 that are used by Rational Software Architect Designer and Rational Software Architect Designer for Websphere Software. These issues were disclosed as part of the IBM Java SDK updates in Apr 2022 and Jul 20...

5.9CVSS7.3AI score0.00438EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2022/09/20 8:13 a.m.54 views

CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5.3CVSS4AI score0.00079EPSS
Exploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/14 1:29 p.m.51 views

Security Bulletin: CVE-2021-41041 may affect IBM® SDK, Java™ Technology Edition

Summary CVE-2021-41041 was addressed in Eclipse OpenJ9 version 0.32 Vulnerability Details CVEID:CVE-2021-41041 DESCRIPTION: Eclipse Openj9 could allow a remote attacker to bypass security restrictions, caused by failing to throw the exception captured during bytecode verification when verificatio...

5.4AI score0.00079EPSS
Exploits0Affected Software1
NVD
NVD
added 2022/04/27 2:15 a.m.21 views

CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5.3CVSS0.00079EPSS
Exploits0References2
OSV
OSV
added 2022/04/27 2:15 a.m.24 views

CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5.3CVSS6.5AI score
Exploits0References2
OSV
OSV
added 2022/04/27 2:15 a.m.0 views

UBUNTU-CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5.3CVSS6.4AI score0.00079EPSS
Exploits0References4
Prion
Prion
added 2022/04/27 2:15 a.m.32 views

Design/Logic Flaw

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5CVSS5.1AI score0.00079EPSS
Exploits0References2Affected Software2
UbuntuCve
UbuntuCve
added 2022/04/27 2:15 a.m.39 views

CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5.3CVSS6.4AI score0.00079EPSS
Exploits0References3
CVE
CVE
added 2022/04/27 2:10 a.m.187 views

CVE-2021-41041

CVE-2021-41041 affects Eclipse OpenJ9 (Java VM) prior to 0.32.0. When bytecode verification is triggered by a MethodHandle invocation, the exception raised during verification may not be thrown, allowing unverified methods to be invoked via MethodHandles. This creates a potential for untrusted co...

5.3CVSS5.3AI score0.00079EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2022/04/27 2:10 a.m.18 views

CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified methods to be invoked using MethodHandles...

5.8AI score0.00079EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/04/27 12:0 a.m.2 views

PT-2022-11360 · Eclipse +4 · Eclipse Openj9 +4

Name of the Vulnerable Software and Affected Versions: Eclipse Openj9 versions prior to 0.32.0 Description: The issue arises when Java 8 and 11 fail to throw an exception captured during bytecode verification triggered by a MethodHandle invocation. This allows unverified methods to be invoked usi...

9.1CVSS6.5AI score0.10953EPSS
Exploits3References204
Veracode
Veracode
added 2019/05/02 5:3 a.m.22 views

Authentication Bypass

It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could possibly use these flaws to bypass Java sandbox restrictions...

9.3CVSS5.9AI score0.0787EPSS
Exploits0References20Affected Software2
Rows per page
Query Builder