Lucene search
+L

4409 matches found

Veracode
Veracode
added 2019/05/02 5:41 a.m.34 views

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...

9.8CVSS5.3AI score0.9986EPSS
SaveExploits1References20Affected Software1
Veracode
Veracode
added 2019/05/02 5:40 a.m.35 views

Sandbox Restrictions Bypass

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Ja...

9.8CVSS4.6AI score0.9986EPSS
SaveExploits1References29Affected Software4
Veracode
Veracode
added 2019/05/02 5:40 a.m.37 views

Sandbox Restrictions Bypass

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Multiple flaws were discovered in the 2D, CORBA, JMX, Libraries and RMI components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass Ja...

9.8CVSS4.6AI score0.9986EPSS
SaveExploits1References30Affected Software4
Veracode
Veracode
added 2019/05/02 5:19 a.m.51 views

Authentication Bypass

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Multiple flaws were discovered in the CORBA, Libraries, RMI, Serialization, and 2D components in OpenJDK. An untrusted Java application or applet could use these flaws t...

10CVSS7.6AI score0.09991EPSS
SaveExploits0References36Affected Software5
Veracode
Veracode
added 2019/05/02 5:13 a.m.53 views

Sandbox Protection Bypass

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause t...

10CVSS5.5AI score0.06408EPSS
SaveExploits1References39Affected Software4
Veracode
Veracode
added 2019/05/02 5:12 a.m.36 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple flaws were discovered in the Libraries, 2D, and Hotspot components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain...

6.8CVSS4.7AI score0.04102EPSS
SaveExploits0References36Affected Software3
Veracode
Veracode
added 2019/05/02 5:12 a.m.51 views

Privilege Escalation

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple flaws were discovered in the Libraries, 2D, and Hotspot components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain...

6.8CVSS4.7AI score0.04102EPSS
SaveExploits0References32Affected Software3
Veracode
Veracode
added 2019/05/02 5:2 a.m.30 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07571EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
added 2019/05/02 5:2 a.m.37 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07571EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
added 2019/05/02 5:2 a.m.37 views

Denial Of Service (DoS)

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.5AI score0.07571EPSS
SaveExploits0References14Affected Software1
Veracode
Veracode
added 2019/05/02 5:2 a.m.41 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.07571EPSS
SaveExploits0References17Affected Software2
Veracode
Veracode
added 2019/05/02 4:58 a.m.44 views

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS6.6AI score0.17606EPSS
SaveExploits0References19Affected Software1
Veracode
Veracode
added 2019/05/02 4:58 a.m.44 views

Arbitrary Code Execution

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS7.6AI score0.10117EPSS
SaveExploits1References19Affected Software3
Veracode
Veracode
added 2019/05/02 4:45 a.m.24 views

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and Software Development Kit is susceptible to sandbox restriction bypass. Due to the flaws in ImagingLib and the image attribute, channel, layout and raster processing in the 2D component, it does not prevent an untrusted Java application or applet to trigger...

5.8CVSS8.8AI score0.04128EPSS
SaveExploits0References20Affected Software1
Veracode
Veracode
added 2019/05/02 4:45 a.m.45 views

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and Software Development Kit is susceptible to sandbox restriction bypass. Due to the flaws in ImagingLib and the image attribute, channel, layout and raster processing in the 2D component, it does not prevent an untrusted Java application or applet to trigger...

7.5CVSS6AI score0.06746EPSS
SaveExploits0References26Affected Software2
Veracode
Veracode
added 2019/05/02 4:44 a.m.29 views

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and OpenJDK 7 Software Development Kit is vulnerable to sandbox restrictions bypass. It is due to improper method-invocation restrictions by the MethodUtil trampoline class allowing remote attackers to bypass the Java sandbox...

10CVSS8.9AI score0.06917EPSS
SaveExploits0References31Affected Software3
Veracode
Veracode
added 2019/05/02 4:44 a.m.32 views

Improper Access Control

OpenJDK is vulnerable to improper access control. The vulnerability exists in the Java Runtime Environment JRE component in Oracle Java SE. A remote attacker could affect confidentiality, integrity, and availability via unknown vectors related to 2D...

10CVSS8.7AI score0.08778EPSS
SaveExploits0References38Affected Software3
Veracode
Veracode
added 2019/05/02 4:44 a.m.25 views

Improper Access Control

OpenJDK is vulnerable to improper access control. Vulnerability exists in the Java Runtime Environment JRE component in Oracle Java SE. An attacker can exploit this issue to execute arbitrary code in the context of the current user to affect confidentiality, integrity, and availability via unknow...

10CVSS9.2AI score0.08778EPSS
SaveExploits0References38Affected Software3
Veracode
Veracode
added 2019/05/02 4:41 a.m.28 views

Denial Of Service (DoS)

java-1.6.0-ibm is vulnerable to denial of service DoS due to unspecified vulnerability in the Java Runtime Environment JRE component...

5CVSS8.6AI score0.03588EPSS
SaveExploits1References28Affected Software2
Veracode
Veracode
added 2019/05/02 4:41 a.m.28 views

Information Disclosure

java-1.6.0-ibm is vulnerable to information disclosure due to unspecified vulnerability in the Java Runtime Environment JRE component...

7.5CVSS8.4AI score0.02867EPSS
SaveExploits1References33Affected Software2
Rows per page
Query Builder