958 matches found
Improper Restriction of XML External Entity Reference in Apace Derby
XML external entity XXE vulnerability in the SqlXmlUtil code in Apache Derby before 10.12.1.1, when a Java Security Manager is not in place, allows context-dependent attackers to read arbitrary files or cause a denial of service resource consumption via vectors involving XmlVTI and the XML dataty...
SUSE-SU-2022:1513-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols bsc1198672. - CVE-2022-21434: Fixed Oracle Java SE compromission via unauthenticated attacker with network acces...
SUSE-SU-2022:1474-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2022-21426: Fixed Oracle Java SE compromission via unauthenticated attacker with network access via multiple protocols bsc1198672. - CVE-2022-21434: Fixed Oracle Java SE compromission via unauthenticated attacker with network acces...
java-17-openjdk security and bug fix update
1:17.0.3.0.6-2 - Add JDK-8284920 fix for XPath regression - Related: rhbz2073575 1:17.0.3.0.6-2 - JDK-8275082 should be listed as also resolving JDK-8278008 & CVE-2022-21476 - Related: rhbz2073575 1:17.0.3.0.6-1 - JDK-8283911 patch no longer needed now we're GA... - Resolves: rhbz2073575...
SUSE-SU-2022:1026-1 Security update for java-1_8_0-ibm
This update for java-180-ibm fixes the following issues: Update Java 8.0 to Service Refresh 7 Fix Pack 5 bsc1197126. Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-2022-21277,...
SUSE-SU-2022:1025-1 Security update for java-1_7_1-ibm
This update for java-171-ibm fixes the following issues: Update Java 7.1 to Service Refresh 7 Fix Pack 5 bsc1197126. Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-2022-21277,...
SUSE-SU-2022:14926-1 Security update for java-1_7_0-ibm
This update for java-170-ibm fixes the following issues: Update Java 7.0 to Service Refresh 11 Fix Pack 5 bsc1197126. Including fixes for the following vulnerabilities: CVE-2022-21366, CVE-2022-21365, CVE-2022-21360, CVE-2022-21349, CVE-2022-21341, CVE-2022-21340, CVE-2022-21305, CVE-2022-21277,...
OPENSUSE-SU-2022:0873-1 Security update for java-1_8_0-openjdk
This update for java-180-openjdk fixes the following issues: Update to version jdk8u322 icedtea-3.22.0 Including the following security fixes: - CVE-2022-21248, bsc1194926: Enhance cross VM serialization - CVE-2022-21283, bsc1194937: Better String matching - CVE-2022-21293, bsc1194935: Improve...
OPENSUSE-SU-2022:0816-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. bnc1194926 - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. bnc1194930 - CVE-2022-21282: Fixed Insufficient URI chec...
SUSE-SU-2022:0816-1 Security update for java-11-openjdk
This update for java-11-openjdk fixes the following issues: - CVE-2022-21248: Fixed incomplete deserialization class filtering in ObjectInputStream. bnc1194926 - CVE-2022-21277: Fixed incorrect reading of TIFF files in TIFFNullDecompressor. bnc1194930 - CVE-2022-21282: Fixed Insufficient URI chec...
Mageia: Security Advisory (MGASA-2018-0234)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
java-1.8.0-openjdk security and bug fix update
1:1.8.0.322.b06-2 - Fix FIPS issues in native code and with initialisation of java.security.Security - Related: rhbz2039366 1:1.8.0.322.b06-1 - Update to aarch64-shenandoah-jdk8u322-b06 EA - Update release notes for 8u322-b06. - Switch to GA mode for final release. - Require tzdata 2021e as of...
Important: Red Hat Security Advisory: parfait:0.5 security update
An update for the parfait:0.5 module is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...
CVE-2022-21277
CVE-2022-21277 affects Oracle Java SE and Oracle GraalVM Enterprise Edition via ImageIO, with additional related CVEs (CVE-2022-21248, CVE-2022-21282, CVE-2022-21283, CVE-2022-21291, CVE-2022-21293, CVE-2022-21294, CVE-2022-21299, CVE-2022-21305, CVE-2022-21341, CVE-2022-21360, CVE-2022-21365, CV...
SUSE-SU-2022:14875-1 Security update for java-1_7_1-ibm
This update for java-171-ibm fixes the following issues: - Update to Java 7.1 Service Refresh 5 Fix Pack 0 - CVE-2021-41035: before version 0.29.0, the openj9 JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods. bsc1194198, bsc1192052 - CVE-2021-3558...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44228Apache Log4j Remote Code Execution） all log...
Pac4j data forgery problem vulnerability
Pac4j is a simple yet powerful Java security engine. Used to authenticate users, obtain their profiles and manage authorization to protect Web applications and Web services.Pac4j has a data forgery problem vulnerability that stems from the product not using a valid algorithm when validating ID...
The vulnerability of the JNDI component of the Apache Log4j2 logging library allows a perpetrator to execute arbitrary code.
The vulnerability of the JNDI component of the Apache Log4j2 logging library is related to errors during data deserialization. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...
Apache Log4j vulnerability
A critical security vulnerability has been identified in Apache Log4j library. The vulnerability has been assigned CVE-2021-44228. Apache Log4j JNDI Java Naming and Directory Interface features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and...