Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2025/12/13 8:2 p.m.1 views

CVE-2025-66453

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...

6.9CVSS6.7AI score0.00115EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/12/04 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2025-66453

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker...

7.5CVSS7.2AI score0.00115EPSS
Exploits0References3
Vulnrichment
Vulnrichment
added 2025/12/03 7:31 p.m.1 views

CVE-2025-66453 Rhino vulnerable high CPU usage and potential DoS when passing specific numbers to toFixed() function

Rhino is an open-source implementation of JavaScript written entirely in Java. Prior to 1.8.1, 1.7.15.1, and 1.7.14.1, when an application passed an attacker controlled float poing number into the toFixed function, it might lead to high CPU consumption and a potential Denial of Service. Small...

6.9CVSS6.3AI score0.00115EPSS
Exploits0References1
Zero Day Initiative
Zero Day Initiative
added 2013/02/11 12:0 a.m.38 views

Oracle Java NativeJavaConstructor Class Serialization Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists due to insufficient checks...

7.5CVSS4.3AI score0.10133EPSS
Exploits0References1
seebug.org
seebug.org
added 2011/12/01 12:0 a.m.72 views

Oracle Java Applet Rhino脚本引擎远程代码执行漏洞

Bugtraq ID: 50218 CVE ID:CVE-2011-3544 Sun Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案。 Java处理Rhino JavaScript错误存在缺陷,Java中的内置javascript引擎没有对javascript错误对象执行充分过滤,结果导致不可信代码以特权上下文运行 Sun SDK Windows Production Release 1.4.2 24 Sun SDK Windows Production Release 1.4.2 15 Sun SDK Windows...

10CVSS0.2AI score0.92545EPSS
Exploits13
0day.today
0day.today
added 2010/02/09 12:0 a.m.12 views

JDownloader concept included execution vulnerability

Exploit for unknown platform in category web applications ==================================================== JDownloader concept included execution vulnerability ==================================================== - -- Product JDownloader1 is an open source download manager for One-Click-...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2010/02/09 12:0 a.m.27 views

JDownloader Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Product JDownloader1 is an open source download manager for One-Click- Filehoster like Rapidshare or Megaupload. The Click'n'Load2 interface allows external applications and websites to send URLs to the local running JDownloader. With Click'n'Loa...

0.1AI score
Exploits0
Rows per page
Query Builder