Lucene search
+L

374 matches found

Prion
Prion
added 2010/04/21 2:30 p.m.31 views

Buffer overflow

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors relate...

9.3CVSS7.2AI score0.03071EPSS
SaveExploits0References5Affected Software24
Cvelist
Cvelist
added 2010/04/21 2:00 p.m.49 views

CVE-2009-4776

Buffer overflow in Hitachi Cosminexus V4 through V8, Processing Kit for XML, and Developer's Kit for Java, as used in products such as uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition 7 and 8, allows remote attackers to have an unknown impact via vectors relate...

6.7AI score0.03071EPSS
SaveExploits0References5
OpenVAS
OpenVAS
added 2009/11/09 12:00 a.m.33 views

IBM Runtimes for Java Technology XML4J Unspecified Vulnerability

This host is installed with IBM Runtime for Java Technology and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: gbibmjavajrexml4junspecifiedvuln.nasl 7699 2017-11-08 12:10:34Z santu $ IBM Runtimes for Java Technology XML4J Unspecified Vulnerability Authors: Nikita MR...

7.5CVSS1AI score0.01664EPSS
SaveExploits0References3
Packet Storm
Packet Storm
added 2009/10/27 12:00 a.m.56 views

Apple QTJava toQTPointer() Arbitrary Memory Access

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Apple QTJava toQTPointer Arbitra...

7.6CVSS0.6AI score0.83804EPSS
SaveExploits5
Packet Storm
Packet Storm
added 2009/01/21 12:00 a.m.55 views

Oracle Containers For Java Traversal

Server Version Info: Oracle-Application-Server-10g/10.1.3.1.0 Oracle-HTTP-Server PoC: http://OC4J/web-app/foobar/%c0%ae%c0%ae/WEB-INF/web.xml Related: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2938 Explaination: The "%c0%ae%c0%ae" is interpreted as: ".." because on Java's side:...

4.3CVSS0.2AI score0.99708EPSS
SaveExploits23
Prion
Prion
added 2007/07/15 9:30 p.m.32 views

Code injection

The JDirect support in QuickTime for Java in Apple Quicktime before 7.2 exposes certain dangerous interfaces, which allows remote attackers to execute arbitrary code via crafted Java applets...

9.3CVSS7.5AI score0.06876EPSS
SaveExploits1References9Affected Software1
seebug.org
seebug.org
added 2006/12/20 12:00 a.m.52 views

Apple Mac OS X Quicktime For Java信息泄露漏洞

Apple Mac OS X是苹果家族机器所使用的操作系统。 Mac OS X Quicktime For Java实现上存在漏洞,远程攻击者可能利用此漏洞获取用户本地图形相关的信息。 Java Applet可以使用Mac OS X所捆绑的QuickTime for Java通过嵌入的QuickTime对象获得在屏幕上所渲染的图形,并将图形上传到Web站点。如果结合Quartz Composer使用这个工具的话,就可能捕获包含有本地信息的图形。 Apple Mac OS X 10.4.8 Apple MacOS X Server 10.4.8...

7AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2006/11/06 12:00 a.m.13 views

Solaris 9 (i386) : 118619-01

The remote host is missing Sun Security Patch number 118619-01 NSS for Java JSS 3.1.2.3 SunOS 5.8x86 5.9x86: genesis patch. Date this patch was last updated by Sun : Wed Feb 16 01:48:15 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

0.2AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2006/11/06 12:00 a.m.17 views

Solaris 8 (i386) : 118619-01

The remote host is missing Sun Security Patch number 118619-01 NSS for Java JSS 3.1.2.3 SunOS 5.8x86 5.9x86: genesis patch. Date this patch was last updated by Sun : Wed Feb 16 01:48:15 MST 2005 You should install this patch for your system to be up-to-date. %NASLMINLEVEL 999999 @DEPRECATED@ This...

0.2AI score
SaveExploits0
Cvelist
Cvelist
added 2005/04/21 4:00 a.m.33 views

CVE-2001-1441

Cross-site scripting XSS vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message...

6AI score0.02693EPSS
SaveExploits1References3
CVE
CVE
added 2005/04/21 4:00 a.m.60 views

CVE-2001-1441

CVE-2001-1441 describes a cross-site scripting (XSS) vulnerability in VisualAge for Java 3.5 Professional . The issue allows remote attackers to trigger JavaScript in other clients by crafting a URL that injects a script into the resulting error message. According to the NVD entry, the vulnerabil...

6.8CVSS6.3AI score0.02693EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2001/07/02 4:00 a.m.19 views

CVE-2001-1441

Cross-site scripting XSS vulnerability in VisualAge for Java 3.5 Professional allows remote attackers to execute JavaScript on other clients via the URL, which injects the script in the resulting error message...

6.8CVSS6AI score0.02693EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2001/02/02 5:00 a.m.40 views

CVE-2001-0068

Mac OS Runtime for Java MRJ 2.2.3 allows remote attackers to use malicious applets to read files outside of the CODEBASE context via the ARCHIVE applet parameter...

6.7AI score0.01529EPSS
SaveExploits0References2
securityvulns
securityvulns
added 2000/12/19 12:00 a.m.55 views

Дырки в Mac OS Runtime for Java

Некорректное исопльзование аттрибутов CODEBASE и ARCHIVE повзояет скомпрометировать клиента...

1AI score
SaveExploits0References1Affected Software1
Rows per page
Query Builder