RHEL 7 : java-1.7.0-oracle (RHSA-2018:0100)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0100 advisory. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update upgrades...

RHEL 7 : java-1.8.0-oracle (RHSA-2018:0099)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0099 advisory. Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update upgrades...

OpenJDK: HTTP client insufficient check for newline in URLs (Networking, 8176751)

It was found that the HttpURLConnection and HttpsURLConnection classes in the Networking component of OpenJDK failed to check for newline characters embedded in URLs. An attacker able to make a Java application perform an HTTP request using an attacker provided URL could possibly inject additiona...

CVE-2017-17383

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

CVE-2017-17383

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

Design/Logic Flaw

Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624...

RHEL 7 : java-1.8.0-ibm (RHSA-2017:3264)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3264 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java SE ...

sAINT - A Spyware Generator for Windows systems written in Java

sAINT is a Spyware Generator for Windows systems written in Java. Features Keylogger Take Screenshot Webcam Capture Persistence Tested On KaliLinux - ROLLING EDITION How To Use Install dependencies you need Maven and JDK 8 package installed $ apt install maven default-jdk default-jre openjdk-8-jd...

GLSA-201710-31 : Oracle JDK/JRE: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201710-31 Oracle JDK/JRE: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Oracles Java SE. Please review the referenced CVE identifiers for details. Impact : A remote attacker could cause a Denial of...

Oracle JDK/JRE: Multiple vulnerabilities

Background Java Platform, Standard Edition Java SE lets you develop and deploy Java applications on desktops and servers, as well as in today’s demanding embedded environments. Java offers the rich user interface, performance, versatility, portability, and security that today’s applications...

RHEL 7 : java-1.8.0-oracle (RHSA-2017:2999)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2999 advisory. Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update upgrades...

Oracle Java SE Multiple Vulnerabilities (October 2017 CPU) (Unix)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is prior to 9 Update 1, 8 Update 151, 7 Update 161, or 6 Update 171. It is, therefore, affected by multiple vulnerabilities related to the following components : - 2D Little CMS 2 - Deployment - Hotspot -...

GLSA-201709-22 : Oracle JDK/JRE, IcedTea: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201709-22 Oracle JDK/JRE, IcedTea: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Oracles JRE, JDK and IcedTea. Please review the referenced CVE identifiers for details. Impact : A remote attacker could...

Oracle JDK/JRE, IcedTea: Multiple vulnerabilities

Background Java Platform, Standard Edition Java SE lets you develop and deploy Java applications on desktops and servers, as well as in today’s demanding embedded environments. Java offers the rich user interface, performance, versatility, portability, and security that today’s applications...

Oracle Java JDKJRE 1.8.0.131 Apache Xerces 2.11.0 - PDFDocx Server Side Denial of Service

Oracle Java JDKJRE 1.8.0.131 Apache Xerces 2.11.0 - PDFDocx Server Side Denial of Service Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in Oracle Java JDK/JRE 1.8.0.131 and previous versions packages and Apache Xerces 2.11.0 The vulnerabilities are: Oracle...

Oracle Java JDK/JRE < 1.8.0.131 / Apache Xerces 2.11.0 - 'PDF/Docx' Server Side Denial of Service

Vulnerabilities Summary The following advisory describes two 2 vulnerabilities found in Oracle Java JDK/JRE 1.8.0.131 and previous versions packages and Apache Xerces 2.11.0 The vulnerabilities are: Oracle JDK/JRE Concurrency-Related Denial of Service java.net.URLConnection with no...

RHEL 6 / 7 : java-1.8.0-ibm (RHSA-2017:2469)

The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:2469 advisory. IBM Java SE version 8 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update upgrades IBM Java...

Fedora 25 : 1:java-1.8.0-openjdk (2017-735e2ae663)

Updated to latest security fxes. http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622 .html - search Java SE Risk Matrix yah, href is no longer an option obviously... Disabled autokarmatism as I need to run JDK testsuite over weekend. ---- restored support for system NSS comment...

Fedora 26 : 1:java-1.8.0-openjdk (2017-fe57cf60c3)

Updated to latest security fxes. http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622 .html - search Java SE Risk Matrix yah, href is no longer an option obviously... Disabled autokarmatism as I need to run JDK testsuite over weekend. Note that Tenable Network Security has...

Fedora 24 : 1:java-1.8.0-openjdk (2017-605557de96)

Updated to latest security fxes. http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622 .html - search Java SE Risk Matrix yah, href is no longer an option obviously... Disabled autokarmatism as I need to run JDK testsuite over weekend. Note that Tenable Network Security has...