Lucene search
K

950 matches found

RedHat Linux
RedHat Linux
added 2015/07/17 8:4 a.m.4 views

OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX...

10CVSS6.8AI score0.0797EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/07/17 8:3 a.m.3 views

OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI...

10CVSS6.8AI score0.09686EPSS
Exploits0References5
OSV
OSV
added 2015/07/16 12:0 a.m.0 views

UBUNTU-CVE-2015-4733

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI...

10CVSS6.1AI score0.09686EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2015/07/15 12:35 p.m.3 views

OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI...

10CVSS6.8AI score0.09686EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/07/15 12:1 p.m.2 views

OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI...

10CVSS6.8AI score0.09686EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/07/15 12:1 p.m.4 views

OpenJDK: improper permission checks in MBeanServerInvocationHandler (JMX, 8076397)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; Java SE Embedded 7u75; and Java SE Embedded 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX...

10CVSS6.8AI score0.0797EPSS
Exploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/07/10 5:50 a.m.2 views

LINE@ vulnerable to script injection

Overview LINE@ provided by LINE Corporation is an application used to communicate with others. LINE@ is vulnerable to MITM man-in-the-middle attacks since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle...

5.9CVSS6.5AI score0.00115EPSS
Exploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/07/10 12:0 a.m.30 views

JVN#22546110: LINE@ vulnerable to script injection

LINE@ provided by LINE Corporation is an application used to communicate with others. LINE@ is vulnerable to MITM man-in-the-middle attacks since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker...

5.9CVSS5.3AI score0.00115EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2015/05/08 12:0 a.m.58 views

MySQL Enterprise Monitor < 2.3.14 Apache Struts Multiple Vulnerabilities

According to its self-reported version, the MySQL Enterprise Monitor running on the remote host is affected by the multiple vulnerabilities in the bundled version of Apache Struts : - Input validation errors exist that allows the execution of arbitrary Object-Graph Navigation Language OGNL...

10CVSS7.2AI score0.94325EPSS
Exploits19References6
CNVD
CNVD
added 2015/05/07 12:0 a.m.2 views

HP ThinPro OS /usr/bin/hpobl elevation of privilege vulnerability

HP ThinPro OS is a thin client operating system. A vulnerability in HP ThinPro OS /usr/bin/hpobl when invoking Firefox after setup allows attackers to exploit the vulnerability to gain access to the device with root privileges...

7AI score
Exploits0References1
myhack58
myhack58
added 2015/04/01 12:0 a.m.226 views

JBoss JMXInvokerServlet JMXInvoker 0.3 remote command execution vulnerability-vulnerability warning-the black bar safety net

/ JBoss JMXInvokerServlet Remote Command Execution JMXInvoker.java v0. 3 - Luca Carettoni @ikki This code exploits a common misconfiguration in the JBoss Application Server 4. x, 5. x, .... Whenever the JMX Invoker is exposed with the default configuration, a malicious "MarshalledInvocation"...

0.2AI score
Exploits0
OpenVAS
OpenVAS
added 2015/03/25 12:0 a.m.11 views

IT-Grundschutz M4.023: Sicherer Aufruf ausführbarer Dateien

IT-Grundschutz M4.023: Sicherer Aufruf ausführbarer Dateien. Stand: 14. Ergänzungslieferung 14. EL. OpenVAS Vulnerability Test $Id: GSHBM4023.nasl 7883 2017-11-23 11:22:59Z emoss $ IT-Grundschutz, 14. EL, Maßnahme 4.023 Authors: Thomas Rotter Copyright: Copyright c 2015 Greenbone Networks GmbH,...

0.2AI score
Exploits0References1
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/03/20 12:0 a.m.29 views

JVN#41281927: LINE vulnerable to script injection

LINE provided by LINE Corporation is an application used to communicate with others. LINE is vulnerable to MITM man-in-the-middle attacks since the application allows non-SSL/TLS communications. As a result, any API may be invoked from a script injected by a MITM man-in-the-middle attacker. Impac...

5.9CVSS5.3AI score0.00115EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2015/02/24 1:44 p.m.2 views

OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)

An improper permission check issue was discovered in the RMI component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

10CVSS6.8AI score0.09938EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/02/24 1:20 p.m.2 views

OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)

An improper permission check issue was discovered in the RMI component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

10CVSS6.8AI score0.09938EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/02/05 7:34 p.m.2 views

OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)

An improper permission check issue was discovered in the RMI component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

10CVSS6.8AI score0.09938EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/02/05 7:29 p.m.2 views

OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)

An improper permission check issue was discovered in the RMI component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

10CVSS6.8AI score0.09938EPSS
Exploits0References5
OpenVAS
OpenVAS
added 2015/02/02 12:0 a.m.17 views

Debian Security Advisory DSA 3149-1 (condor - security update)

Florian Weimer, of Red Hat Product Security, discovered an issue in condor, a distributed workload management system. Upon job completion, it can optionally notify a user by sending an email; the mailx invocation used in that process allowed for any authenticated user able to submit jobs, to...

8.9AI score0.01138EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2015/01/26 6:10 p.m.3 views

OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)

An improper permission check issue was discovered in the RMI component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

10CVSS6.8AI score0.09938EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2015/01/22 9:34 p.m.3 views

OpenJDK: incorrect context class loader use in RMI transport (RMI, 8055309)

An improper permission check issue was discovered in the RMI component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Java sandbox restrictions...

10CVSS6.8AI score0.09938EPSS
Exploits0References5
Rows per page
Query Builder