CVE-2025-5662 Deserialization Vulnerability in h2oai/h2o-3

A deserialization vulnerability exists in the H2O-3 REST API POST /99/ImportSQLTable that affects all versions up to 3.46.0.7. This vulnerability allows remote code execution RCE due to improper validation of JDBC connection parameters when using a Key-Value format. The vulnerability is present i...

Security Bulletin: A vulnerability in IBM Java Runtime affects IBM Installation Manager and IBM Packaging Utility

Summary There is a vulnerability in IBM® Runtime Environment Java™ Version 8 used by IBM Installation Manager and IBM Packaging Utility. Vulnerability Details CVEID:CVE-2025-30754 DESCRIPTION: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product o...

CVE-2020-14796 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9...

GHSA-XPXV-6CCF-795W vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9...

GHSA-8GQP-9RVV-R4X9 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9...

GHSA-5MRP-958F-Q2C7 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9...

GHSA-3444-QG27-76CF vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9...

GHSA-7MQH-PJFJ-W58H vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9...

CVE-2021-35564 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9...

CVE-2024-54534 vulnerabilities

Vulnerabilities for packages: openjdk-8-openj9, openjdk-26-openj9, openjdk-17-openj9, openjdk-11-openj9, openjdk-25-openj9, openjdk-21-openj9...

RLSA-2025:10862 Important: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve scripting supports CVE-2025-30761 JDK: Better Glyp...

RLSA-2025:3845 Moderate: java-1.8.0-openjdk security update

The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security Fixes: JDK: Better TLS connection support CVE-2025-21587 JDK: Improve compiler transformations CVE-2025-30691 JDK: Enhance Buffered Image handling CVE-2025-3069...

java-1.8.0-openjdk security update

An update is available for java-1.8.0-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime...

command-injection-payload-list

It is an offensive tool for web application security. The primary CVE ID is not explicitly mentioned, but the description pertains to OS command injection vulnerabilities. The target product/service is web applications, and the vulnerability class/vector is OS command injection. Notable...

[SECURITY] Fedora 41 Update: java-25-openjdk-25.0.0.0.32-0.1.ea.fc41

The OpenJDK 25 runtime environment...

[SECURITY] Fedora 41 Update: java-latest-openjdk-24.0.2.0.12-1.rolling.fc41

The OpenJDK 24 runtime environment...

Security Bulletin: Update JRE for Older Versions of IBM SPSS Statistics

Summary Vulnerabilities related to encryption were found in older versions of the Java Runtime Environment JRE. This Interim Fix addresses those problems. The IF applies to all applicable Java SE CVEs published by Oracle as part of their April 2025 Critical Patch Update plus CVE-2025-4447...

Security Bulletin: Update JRE for Older Versions of IBM SPSS Statistics

Summary Vulnerabilities related to encryption were found in older versions of the Java Runtime Environment JRE. This Interim Fix addresses those problems. The IF applies to all applicable Java SE CVEs published by Oracle as part of their April 2025 Critical Patch Update plus CVE-2025-4447...

Important: Red Hat Security Advisory: OpenJDK 21.0.8 Security Update for Portable Linux Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...

Important: Red Hat Security Advisory: OpenJDK 21.0.8 Security Update for Windows Builds

An update is now available for OpenJDK. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References...