Lucene search
K

98 matches found

OSV
OSV
added 2026/05/06 6:52 a.m.4 views

CLSA-2026-1777645704 java-17-openjdk: Fix of 2 CVEs

Update to jdk-17.0.19+10 RHSA-2026:9686 - Set fipsver to 62c0f885e30 - CVE-2026-22016: fix JAXP component vulnerability allowing unauthenticated remote attackers to gain unauthorized access to sensitive data in Java SE - CVE-2026-34282: fix Hotspot component vulnerability allowing unauthorized...

7.5CVSS7.3AI score0.00154EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.5 views

PT-2026-37805

Vulnerability in Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java...

3.7CVSS6.8AI score0.00144EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2026/05/06 12:0 a.m.3 views

PT-2026-38012

Vulnerability in Oracle Java SE component: Hotspot. Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Oracle Java...

3.7CVSS6.8AI score0.00144EPSS
Exploits0References6
IBM Security Bulletins
IBM Security Bulletins
added 2026/01/30 4:55 p.m.9 views

Security Bulletin: Multiple vulnerabilities in IBM® SDK Java™ affect IBM Cloud Pak System

Summary Multiple vulnerabilities in the IBM® SDK, Java™ Technology Edition were addressed in IBM Cloud Pak System version 2.3.6.1. Vulnerability Details CVEID:CVE-2025-30754 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Orac...

7.8CVSS6.1AI score0.00559EPSS
Exploits0Affected Software1
RedhatCVE
RedhatCVE
added 2026/01/09 12:13 p.m.6 views

CVE-2018-9382

In multiple functions of WifiServiceImpl.java, there is a possible way to activate Wi-Fi hotspot from a non-owner profile due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for...

7.8CVSS7.1AI score0.00019EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2016-2590

Malware in sbrugna...

8.8CVSS8.9AI score0.01576EPSS
Exploits1References7
EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2016-4632

Malware in sbrugna...

9.6CVSS9.2AI score0.03532EPSS
Exploits0References33
EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2011-0876

Malware in sbrugna...

10CVSS8.9AI score0.03598EPSS
Exploits0References29
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2016-6517

Malware in sbrugna...

8.3CVSS8.6AI score0.03916EPSS
Exploits0References37
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2013-2391

Malware in sbrugna...

7.8CVSS7.3AI score0.06734EPSS
Exploits0References29
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2016-2589

Malware in sbrugna...

4.1CVSS5.1AI score0.0023EPSS
Exploits1References7
IBM Security Bulletins
IBM Security Bulletins
added 2025/09/11 6:20 p.m.8 views

Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments

Summary IBM java SDK is used by Linux KVM Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...

5.3CVSS5.2AI score0.00303EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2025/09/11 6:17 p.m.2 views

Security Bulletin: Multiple Vulnerabilities of IBM Java SDK affect VMware Agent from IBM Tivoli Monitoring for Virtual Environments.

Summary IBM java SDK is used by VMware Agent from IBM Tivoli Monitoring for Virtual Environments. Vulnerability Details CVEID:CVE-2024-21235 DESCRIPTION: Vulnerability in Java SE component: Hotspot. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

5.3CVSS5.2AI score0.00303EPSS
Exploits0Affected Software1
OSV
OSV
added 2025/07/29 2:30 p.m.10 views

CLSA-2025-1753799434 java-1.8.0-openjdk: Fix of 19 CVEs

Security fixes from OpenJDK 8u452-b09: - CVE-2025-21587: JSSE issue allowing remote access or modification of sensitive data - CVE-2025-30698: allows limited data access and partial DoS via untrusted Java code - CVE-2025-30691: allows limited data access via untrusted code using compiler APIs -...

7.4CVSS6.9AI score0.00977EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/04/23 4:48 p.m.7 views

CVE-2025-2765 CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability

CarlinKit CPC200-CCPA Wireless Hotspot Hard-Coded Credentials Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass authentication on affected installations of CarlinKit CPC200-CCPA devices. Authentication is not required to exploit this vulnerability...

7.6CVSS0.00014EPSS
Exploits0References1
Broadcom
Broadcom
added 2025/02/13 12:0 a.m.6 views

AZUL Zulu Java Multiple Vulnerabilities - July 2024

CVE-ID Component Base Score CVE-2024-21131 Hotspot 3.7 CVE-2024-21138 Hotspot 3.7 CVE-2024-21140 Hotspot 4.8 CVE-2024-21145 2D 4.8 CVE-2024-21147 Hotspot 7.4 CVE-2024-21144 Concurrency 3.7 CVE-2024-27983 Oracle GrallVM for JDK 8.2 More details can be found at...

8.2CVSS6.9AI score0.75933EPSS
Exploits1
OSV
OSV
added 2025/02/05 4:27 a.m.2 views

USN-7254-1 openjdk-21 vulnerability

It was discovered that the Hotspot component of OpenJDK 21 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information...

4.8CVSS6.7AI score0.002EPSS
Exploits0References2
OSV
OSV
added 2025/02/05 4:26 a.m.1 views

USN-7253-1 openjdk-17 vulnerability

It was discovered that the Hotspot component of OpenJDK 17 did not properly handle API access under certain circumstances. An unauthenticated attacker could possibly use this issue to access unauthorized resources and expose sensitive information...

4.8CVSS6.7AI score0.002EPSS
Exploits0References2
Redos
Redos
added 2025/01/14 12:0 a.m.12 views

ROS-20250114-06

A vulnerability in the Serialization component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK and Oracle Java SE software platform is related to incorrect clearing or freeing of resources. resources. Exploitation of the vulnerability could allow an attacker acting...

4.8CVSS4.8AI score0.00171EPSS
Exploits0
SUSE Linux
SUSE Linux
added 2024/12/06 3:40 p.m.2 views

Security update for java-1_8_0-ibm

This update for java-180-ibm fixes the following issues: Updated to Java 8.0 Service Refresh 8 Fix Pack 35 with Oracle October 15 2024 CPU bsc1232064: - CVE-2024-21208: Fixed partial DoS in component Networking bsc1231702,JDK-8328286 - CVE-2024-21210: Fixed unauthorized update, insert or delete...

6.3CVSS6.5AI score0.00171EPSS
Exploits0References22
Rows per page
Query Builder