Lucene search
+L

534 matches found

RedhatCVE
RedhatCVE
added 2021/02/14 9:28 p.m.29 views

CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

9.8CVSS4.7AI score0.01532EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2021/02/02 12:46 p.m.29 views

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect Connect:Direct Web Service

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8.0.6.5, used by Connect : Direct web service. Connect:Direct Web Services has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-11771 DESCRIPTION: Eclipse OpenJ9 could allow a local attacker ...

8.4CVSS1.8AI score0.0045EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2021/01/22 12:0 a.m.7 views

Eclipse OpenJ9 Buffer Overflow Vulnerability (CNVD-2021-08893)

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A buffer overflow vulnerability exists in Eclipse OpenJ9 versions prior to 0.23, which stems from a stack-based buffer overflow that can occur when the virtual machine ...

9.8CVSS7.1AI score0.01532EPSS
SaveExploits0References1
NVD
NVD
added 2021/01/21 5:15 a.m.23 views

CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

9.8CVSS9.8AI score0.01532EPSS
SaveExploits0References1
OSV
OSV
added 2021/01/21 5:15 a.m.32 views

CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

9.8CVSS7.3AI score
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2021/01/21 5:15 a.m.33 views

CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

9.8CVSS6.6AI score0.01532EPSS
SaveExploits0References2
OSV
OSV
added 2021/01/21 5:15 a.m.3 views

UBUNTU-CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

9.8CVSS6.5AI score0.01532EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2021/01/21 4:55 a.m.34 views

CVE-2020-27221

In Eclipse OpenJ9 up to and including version 0.23, there is potential for a stack-based buffer overflow when the virtual machine or JNI natives are converting from UTF-8 characters to platform encoding...

9.7AI score0.01532EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2021/01/21 12:0 a.m.9 views

Eclipse OpenJ9 缓冲区错误漏洞

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A buffer overflow vulnerability exists in Eclipse OpenJ9 versions prior to 0.23, which stems from a stack-based buffer overflow that can occur when the virtual machine ...

9.8CVSS6.8AI score0.02272EPSS
SaveExploits0References73
RedhatCVE
RedhatCVE
added 2021/01/04 5:53 a.m.38 views

CVE-2019-11772

In Eclipse OpenJ9 prior to 0.15, the String.getBytesint, int, byte, int method does not verify that the provided byte array is non-null nor that the provided index is in bounds when compiled by the JIT. This allows arbitrary writes to any 32-bit address or beyond the end of a byte array within Ja...

9.8CVSS2.8AI score0.02098EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2020/11/17 10:40 a.m.49 views

Security Bulletin: An unspecified vulnerability in Java SE or Oracle Java SE could allow an unauthenticated attacker

Summary An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause low confidentiality impact, low integrity impact, and no availability impact. An unspecified vulnerability in Java SE related to the 2D component could allow an...

8.3CVSS2.2AI score0.0435EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/10/28 7:7 p.m.35 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 used by Content Collector for Email, Content Collector for File Systems, Content Collector for Microsoft SharePoint and Content Collector for IBM Connections. Vulnerability Details CVEID: CVE-2020-14621...

5.8CVSS0.4AI score0.0435EPSS
SaveExploits0Affected Software1
RedhatCVE
RedhatCVE
added 2020/08/05 6:13 p.m.28 views

CVE-2019-17639

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...

5CVSS2.6AI score0.01504EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/24 10:49 p.m.16 views

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling Connect:Direct FTP+

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8.0.5.30, used by IBM Sterling Connect:Direct FTP+. IBM Sterling Connect:Direct FTP+ has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-4473 DESCRIPTION: Multiple binaries in IBM SDK, Java...

8.4CVSS1.5AI score0.0045EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/24 10:49 p.m.14 views

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime Affect IBM Sterling Connect:Direct File Agent

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Sterling Connect:Direct File Agent. IBM Sterling Connect:Direct File Agent has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-4473 DESCRIPTION: Multiple binaries in IBM SDK, Ja...

8.4CVSS0.8AI score0.0045EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/24 10:19 p.m.30 views

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling External Authentication Server

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 1.8 used by IBM Sterling External Authentication Server. IBM Sterling External Authentication Server has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-4473 DESCRIPTION: Multiple binaries in...

8.4CVSS1.1AI score0.0045EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/24 10:19 p.m.19 views

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling Connect:Direct for UNIX

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 8.0.5.30, used by IBM Sterling Connect:Direct for UNIX. IBM Sterling Connect:Direct for UNIX has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2019-4473 DESCRIPTION: Multiple binaries in IBM SD...

8.4CVSS0.4AI score0.0045EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/24 10:19 p.m.41 views

Security Bulletin: Multiple Vulnerabilities in IBM Java Runtime Affect IBM Sterling Connect:Direct for Microsoft Windows

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Versions 7 and 8 used by IBM Sterling Connect:Direct for Microsoft Windows. IBM Sterling Connect:Direct for Microsoft Windows has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2018-1656 DESCRIPTION: The...

7.8CVSS0.5AI score0.04513EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2020/07/24 6:36 p.m.31 views

Security Bulletin: Multiple IBM Runtime Environments Java Technology Edition vulnerabilities affect IBM Transformation Extender

Summary There are vulnerabilities in IBM Runtime Environments Java Technology Edition, Versions 7 and 8, IBM SDK, Java Technology Edition Version 8 and Eclipse Open J9 that affect IBM Transformation Extender. Vulnerability Details CVEID: CVE-2019-11771 DESCRIPTION: Eclipse OpenJ9 could allow a...

8.4CVSS0.9AI score0.0045EPSS
SaveExploits0Affected Software1
CNVD
CNVD
added 2020/07/22 12:0 a.m.2 views

Eclipse OpenJ9 Information Disclosure Vulnerability

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. A security vulnerability exists in Eclipse OpenJ9 versions prior to 0.21 Power. An attacker could exploit the vulnerability to obtain sensitive information...

5.3CVSS9.2AI score0.01504EPSS
SaveExploits0References1
Rows per page
Query Builder