58518 matches found
The vulnerability of Oracle Java SE’s 2D software platform and the Oracle GraalVM virtual machine allows a hacker to gain full control over the application.
The vulnerability of the Oracle Java SE 2D software platform and the Oracle GraalVM Enterprise Edition virtual machine is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain full control over the application...
java-21-openjdk-21.0.8.0-1.1 on GA media (moderate)
java-21-openjdk-21.0.8.0-1.1 on GA media Announcement ID: openSUSE-SU-2025:15362-1 Rating: moderate Cross-References: CVE-2025-30749 CVE-2025-30754 CVE-2025-50059 CVE-2025-50106 CVSS scores: CVE-2025-30749 SUSE : 7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H CVE-2025-30749 SUSE : 8.3...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24096)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK and Oracle GraalVM Enterprise Edition, which can ...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24099)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, which can...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24095)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise Edition, which can...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24092)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle GraalVM for JDK for Oracle Java SE, which can be exploited by attackers to cause ...
OpenJDK 8 <= 8u452 / 11.0.0 <= 11.0.27 / 17.0.0 <= 17.0.15 / 21.0.0 <= 21.0.7 / 24.0.0 <= 24.0.1 Multiple Vulnerabilities (2025-07-15)
The version of OpenJDK installed on the remote host is 8 prior to 8u452 / 11.0.0 prior to 11.0.27 / 17.0.0 prior to 17.0.15 / 21.0.0 prior to 21.0.7 / 24.0.0 prior to 24.0.1. It is, therefore, affected by multiple vulnerabilities as referenced in the 2025-07-15 advisory. Please Note: Java CVEs do...
DLA-4245-1 libcommons-fileupload-java - security update
Bulletin has no description...
Unspecified Vulnerability in Oracle Database Server (CNVD-2025-24078)
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. Oracle Database Server has a security vulnerability in Oracle Database Server JDBC that...
The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE lies in its deserialization mechanism’s flaws, allowing attackers to execute arbitrary code.
The vulnerability of the corporate platform for creating, managing, and processing electronic forms, documents, and business processes within Adobe Experience Manager AEM Forms on JEE is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability could allow a maliciou...
Unspecified Vulnerability in Oracle Database Server (CNVD-2025-24077)
Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in the Java VM of Oracle Database Server, which can be...
Unspecified Vulnerability in Oracle Java SE (CNVD-2025-24098)
Oracle Java SE is a U.S. Oracle Oracle company for the development and deployment of desktop, server and embedded devices and real-time environments in the Java application. A security vulnerability exists in Oracle Java SE for Oracle Java SE, Oracle GraalVM for JDK, and Oracle GraalVM Enterprise...
RHEL 7 / 8 / 9 : java-11-openjdk ELS (RHSA-2025:10865)
The remote Redhat Enterprise Linux 7 / 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:10865 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. This...
AlmaLinux 9 : java-1.8.0-openjdk (ALSA-2025:10862)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:10862 advisory. JDK: Better Glyph drawing CVE-2025-30749 JDK: Enhance TLS protocol support CVE-2025-30754 JDK: Improve scripting supports CVE-2025-30761 JDK: Better Glyp...
DLA-4246-1 libowasp-esapi-java - security update
Bulletin has no description...
Debian dla-4243 : libbatik-java - security update
The remote Debian 11 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-4243 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4243-1 [email protected]...
Security Bulletin: Update JRE for Older Versions of IBM SPSS Statistics
Summary Vulnerabilities related to encryption were found in older versions of the Java Runtime Environment JRE. This Interim Fix addresses those problems. The IF applies to all applicable Java SE CVEs published by Oracle as part of their April 2025 Critical Patch Update plus CVE-2025-4447...
Security Bulletin: Update JRE for Older Versions of IBM SPSS Statistics
Summary Vulnerabilities related to encryption were found in older versions of the Java Runtime Environment JRE. This Interim Fix addresses those problems. The IF applies to all applicable Java SE CVEs published by Oracle as part of their April 2025 Critical Patch Update plus CVE-2025-4447...
Thinkgem JeeSite 代码注入漏洞
Thinkgem JeeSite is an open source Java EE enterprise-class rapid development platform for China Zhuo Yuan Thinkgem company . The platform includes system permissions components , data permissions components , data dictionary components , core tools components , view manipulation components ,...