OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Security Bulletin: Security vulnerabilities have been identified in IBM Java Runtime and the microcode shipped with the DS8000 Hardware Management Console (HMC)

Summary The updates indicated below have been released to address the following vulnerabilities: CVE-2018-1111 - Vulnerability in the NetworkManager integration script CVE-2018-2783 - IBM Java Runtime vulnerability CVE-2018-2790 - IBM Java Runtime vulnerability CVE-2018-5391 - Improper handling o...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum LSF Process Manager

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 8 used by IBM Spectrum LSF Process Manager. These issues were disclosed as part of the IBM Java SDK updates in April 2018. Vulnerability Details If you run your own Java code using the IBM Java Runtime delivered...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6, 7 used by IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation. These issues were disclosed as part of the IBM Java SDK...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation

Summary There are multiple vulnerabilities in IBM® Runtime Environment Java™ Version 6, 7 used by IBM Platform Cluster Manager Standard Edition, IBM Platform Cluster Manager Advanced Edition, Platform HPC, and Spectrum Cluster Foundation. These issues were disclosed as part of the IBM Java SDK...

Amazon Linux 2 : java-1.7.0-openjdk (ALAS-2019-1209)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Oracle Java SE XML External Entity Injection Information Disclosure (CVE-2017-10309)

An XML external entity injection vulnerability exists in Oracle Java SE. A remote unauthenticated attacker could exploit this vulnerability to disclose sensitive information on the affected target host...

RHEL 8 : java-1.8.0-ibm (RHSA-2019:1238)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1238 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

JDK: unspecified vulnerability fixed in 8u201 (Deployment)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Deployment. The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks...

OpenJDK: memory disclosure in FileChannelImpl (Libraries, 8206290)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u201, 8u192 and 11.0.1; Java SE Embedded: 8u191. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to...

Critical: Red Hat Security Advisory: java-1.8.0-ibm security update

An update for java-1.8.0-ibm is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

OpenJDK: Slow conversion of BigDecimal to long (Libraries, 8211936)

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

Denial Of Service

IBM Java SE version 8 is vulnerable to denial of service DoS due to not reading beyond the end of bytecode array causing JVM crash...

Arbitrary Code Execution

IBM Java SE version 8 is vulnerable to arbitrary code execution fixed in 7u221 and 8u211...

Denial Of Service (DoS)

IBM Java SE version 8 is vulnerable to denial of service DoS fixed by slow conversion of BigDecimal to long...

Arbitrary Code Execution

IBM Java SE version 8 is vulnerable to arbitrary code execution due to the incorrect skeleton selection in RMI registry server-side, dispatching handling RMI, 8218453 CVE-2019-2684...

Arbitrary Code Execution

IBM Java SE version 8 is vulnerable to arbitrary code execution due to the Font layout engine out of bounds access to setCurrGlyphID...

Denial Of Service (DoS)

Oracle Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in Deployment component in the Java SE component of Oracle Java SE. An unauthenticated attacker with network access via multiple protocols could cause denial of service condition with the aid of human...

Denial Of Service (DoS)

IBM Java SE is vulnerable to denial of service DoS attacks. The vulnerability exists in the function allocsarray of the file jmemmgr.c. A remote attacker could cause an application crash via a crafted file...

Information Disclosure

Java SE is vulnerable to information disclosure vulnerability. A remote user could exploit a flaw in the Libraries component to cause unauthorized read access to a subset of Java SE accessible data...