OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

JDK: unspecified vulnerability fixed in 8u201 (Deployment)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks...

Denial Of Service

IBM Java SE version 8 is vulnerable to denial of service DoS due to not reading beyond the end of bytecode array causing JVM crash...

Denial Of Service (DoS)

IBM Java SE version 8 is vulnerable to denial of service DoS fixed by slow conversion of BigDecimal to long...

Arbitrary Code Execution

IBM Java SE version 8 is vulnerable to arbitrary code execution due to the incorrect skeleton selection in RMI registry server-side, dispatching handling RMI, 8218453 CVE-2019-2684...

Arbitrary Code Execution

IBM Java SE version 8 is vulnerable to arbitrary code execution fixed in 7u221 and 8u211...

Arbitrary Code Execution

IBM Java SE version 8 is vulnerable to arbitrary code execution due to the Font layout engine out of bounds access to setCurrGlyphID...

Denial Of Service (DoS)

IBM Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in the function allocsarray of the file jmemmgr.c. A remote attacker could cause an application crash via a crafted file...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in Deployment component in the Java SE component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols could cause denial of service condition with the aid of human...

Information Disclosure

Java SE is vulnerable to information disclosure vulnerability. A remote user could exploit a flaw in the Libraries component to cause unauthorized read access to a subset of Java SE accessible data...

Authorization Bypass

IBM Java SE is vulnerable to authorization bypass attacks. The vulnerability exists in an unknown functionality of the component JSSE. Unauthenticated attacker with network access via SSL/TLS could perform unauthorized creation, deletion or modification access to critical data or all Java SE, Jav...

Directory Traversal

IBM Java SE is vulnerable to directory traversal vulnerability. This occurs when extracting compressed dump files since the IBM SDK does not not protect against path traversal attacks...

Information Disclosure

IBM Java SE is vulnerable to information disclosure vulnerability. This exists in some unknown functionality of the component Libraries. An unauthenticated attacker with network access via multiple protocols could read to a subset of Java SE, Java SE Embedded accessible data with the aid of human...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation. The vulnerability exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE due to an unknown part of the component Scripting. An unauthenticated attacker with network access via multiple protocols could compromise Java SE,...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation. A remote unauthenticated attacker could exploit the flawed Utility component and cause unauthorized update, insert or delete access to some of Java SE accessible data...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation vulnerability. The vulnerability exists in the Java SE, Java SE Embedded component of Oracle Java SE due to an unknown code block of the component Hotspot. An unauthenticated attacker with network access via multiple protocols could compromise...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service attacks. A remote unauthenticated attacker could exploit a flaw in the Sound component to cause partial denial of service conditions...

Information Disclosure

Oracle Java SE is vulnerable to information disclosure vulnerability. The vulnerability exists in an unknown function of the component Networking. An unauthenticated attacker with network access via multiple protocols could compromise Java SE, Java SE Embedde with the aid of human interaction oth...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE due to an unknown functionality of the component JSSE. An unauthenticated attacker with network access via SSL/TLS could compromise Java SE...