Lucene search
+L

2202 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/08/19 11:26 p.m.38 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Tivoli Storage Productivity Center October 2014 CPU

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with IBM Tivoli Storage Productivity Center. This also includes a fix for the Padding Oracle On Downgraded Legacy Encryption POODLE SSLv3 vulnerability CVE-2014-3566. These issues were disclosed as par...

10CVSS4AI score0.99999EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2022/08/19 11:26 p.m.32 views

Security Bulletin: Multiple vulnerabilities in IBM Java SDK affect Tivoli Storage Productivity Center July 2014 CPU

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition that is shipped with Tivoli Storage Productivity Center. These issues were disclosed as part of the IBM Java SDK updates in July 2014. Vulnerability Details The following advisories are included in the IBM® SDK Java™...

10CVSS4.8AI score0.05577EPSS
SaveExploits0Affected Software1
OSV
OSV
added 2022/08/19 11:05 a.m.20 views

OESA-2022-1849 openjdk-11 security update

The OpenJDK runtime environment. Security Fixes: The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. T...

7.5CVSS6.6AI score0.81039EPSS
SaveExploits2References4
OpenVAS
OpenVAS
added 2022/08/18 12:00 a.m.28 views

Huawei EulerOS: Security Advisory for java-1.8.0-openjdk (EulerOS-SA-2022-2272)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.8AI score0.04046EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/08/18 12:00 a.m.11 views

The vulnerability of the Hotspot component in Java SE software platforms, specifically the Oracle GraalVM Enterprise Edition virtual machine, allows attackers to gain access to data.

The vulnerability of the Hotspot component in Java SE software platforms, specifically the Oracle GraalVM Enterprise Edition virtual machine, is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data throug...

5.3CVSS6.3AI score0.03693EPSS
SaveExploits0References12Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/08/18 12:00 a.m.10 views

The vulnerability of the Hotspot component in Java SE software platforms, specifically the Oracle GraalVM Enterprise Edition virtual machine, allows attackers to create, delete, or alter access to data.

The vulnerability of the Hotspot component in Java SE software platforms, as well as in the Oracle GraalVM Enterprise Edition virtual machine, is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to create, delete, or modify access to data...

5.9CVSS6.5AI score0.02575EPSS
SaveExploits0References12Affected Software9
Tenable Nessus
Tenable Nessus
added 2022/08/17 12:00 a.m.51 views

SUSE SLES12: java-1_8_0-openjdk / java-1_8_0-openjdk-demo / etc (SUSE-SU-2022:2819-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2819-1 advisory. - Updated to version jdk8u345 icedtea-3.24.0 - CVE-2022-21540: Fixed a potential Java sandbox bypass bsc1201694. - CVE-2022-21541:...

7.5CVSS7AI score0.81039EPSS
SaveExploits2References11
OSV
OSV
added 2022/08/12 3:15 p.m.11 views

CVE-2022-20308

In hostapd, there is a possible insecure configuration due to an insecure default value. This could lead to remote denial of service of the wifi hotspot with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

7.5CVSS5.9AI score0.00575EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/12 3:15 p.m.8 views

CVE-2022-20308

In hostapd, there is a possible insecure configuration due to an insecure default value. This could lead to remote denial of service of the wifi hotspot with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-13Android ID:...

7.5CVSS7.2AI score0.00575EPSS
SaveExploits0References2
CVE
CVE
added 2022/08/11 3:23 p.m.62 views

CVE-2022-20308

CVE-2022-20308 affects hostapd in Android 13, where an insecure default value in hostapd leads to remote denial of service of the Wi‑Fi hotspot without extra privileges or user interaction. The issue is described as an insecure configuration default that can be exploited remotely to cause DoS. Pu...

7.5CVSS7.4AI score0.00575EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/08/11 12:00 a.m.8 views

PT-2022-6950 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-13 Description: The issue is related to an insecure default value in hostapd, which could lead to a remote denial of service of the wifi hotspot. No additional execution privileges are needed, and user interaction is...

7.8CVSS7.3AI score0.00575EPSS
SaveExploits0References4
OSV
OSV
added 2022/08/10 11:05 a.m.7 views

OESA-2022-1814 openjdk-latest security update

The OpenJDK runtime environment. Security Fixes: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult ...

5.3CVSS7.2AI score0.07395EPSS
SaveExploits0References6
OSV
OSV
added 2022/08/10 11:05 a.m.7 views

OESA-2022-1813 openjdk-1.8.0 security update

The OpenJDK runtime environment 8. Security Fixes: Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Hotspot. Supported versions that are affected are Java SE: 7u311, 8u301; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to explo...

7.5CVSS7.2AI score0.159EPSS
SaveExploits0References25
Tenable Nessus
Tenable Nessus
added 2022/08/10 12:00 a.m.51 views

SUSE SLED15: java-11-openjdk / java-11-openjdk-accessibility / etc (SUSE-SU-2022:2707-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2707-1 advisory. Update to upstream tag jdk-11.0.16+8 July 2022 CPU - CVE-2022-21540: Improve class compilation...

7.5CVSS6.8AI score0.81039EPSS
SaveExploits2References10
NVD
NVD
added 2022/08/05 4:15 p.m.24 views

CVE-2022-33714

Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting value related to mobile hotspot...

6.2CVSS0.00091EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2022/08/05 4:15 p.m.13 views

CVE-2022-33714

Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting value related to mobile hotspot...

6.2CVSS5.8AI score0.00091EPSS
SaveExploits0References2
OSV
OSV
added 2022/08/05 4:15 p.m.10 views

CVE-2022-33714

Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting value related to mobile hotspot...

3.3CVSS5.8AI score0.00091EPSS
SaveExploits0References1
Prion
Prion
added 2022/08/05 4:15 p.m.23 views

Improper access control

Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting value related to mobile hotspot...

1.7CVSS4.1AI score0.00091EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/08/05 3:18 p.m.85 views

CVE-2022-33714

CVE-2022-33714 affects Samsung devices’ SemWifiApBroadcastReceiver prior to the SMR Aug-2022 Release 1. The issue is described as an improper access control that allows an attacker to reset a setting value related to the mobile hotspot. Publicly stated impact is limited to local access scenarios;...

6.2CVSS4AI score0.00091EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/08/05 3:18 p.m.30 views

CVE-2022-33714

Improper access control vulnerability in SemWifiApBroadcastReceiver prior to SMR Aug-2022 Release 1 allows attacker to reset a setting value related to mobile hotspot...

6.2CVSS6.4AI score0.00091EPSS
SaveExploits0References1
Rows per page
Query Builder