CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

2258 matches found

Veracode•added 2019/05/02 5:13 a.m.•48 views

Sandbox Protection Bypass

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could possibly cause t...

10CVSS5.5AI score0.07224EPSS

Exploits1References39Affected Software4

Veracode•added 2019/05/02 5:12 a.m.•34 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple flaws were discovered in the Libraries, 2D, and Hotspot components in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain...

6.8CVSS4.7AI score0.04102EPSS

Exploits0References36Affected Software3

Veracode•added 2019/05/02 5:2 a.m.•28 views

Information Disclosure

The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. An input validation flaw was discovered in the medialib library in the 2D component. A specially crafted image could trigger Java Virtual Machine memory corruption when...

10CVSS8.6AI score0.0751EPSS

Exploits0References10Affected Software1

Veracode•added 2019/05/02 5:2 a.m.•38 views

Information Disclosure

10CVSS8.6AI score0.0751EPSS

Exploits0References17Affected Software2

Veracode•added 2019/05/02 5:1 a.m.•40 views

Arbitrary Code Execution

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Detailed vulnerability descriptions are linked from the IBM Security...

10CVSS5.5AI score0.08383EPSS

Exploits3References24Affected Software1

Veracode•added 2019/05/02 5:1 a.m.•33 views

Sandbox Restrictions Bypass

10CVSS5.5AI score0.08383EPSS

Exploits3References21Affected Software1

Veracode•added 2019/05/02 5:1 a.m.•36 views

Sandbox Restrictions Bypass

10CVSS5.5AI score0.08383EPSS

Exploits3References22Affected Software1

Veracode•added 2019/05/02 4:58 a.m.•23 views

Sandbox Restrictions Bypass

10CVSS6.6AI score0.17606EPSS

Exploits0References21Affected Software1

Veracode•added 2019/05/02 4:58 a.m.•26 views

Sandbox Restrictions Bypass

10CVSS6.6AI score0.17606EPSS

Exploits0References18Affected Software1

Veracode•added 2019/05/02 4:58 a.m.•42 views

Sandbox Restrictions Bypass

10CVSS6.6AI score0.17606EPSS

Exploits0References19Affected Software1

Veracode•added 2019/05/02 4:58 a.m.•33 views

Arbitrary Code Execution

10CVSS7.6AI score0.10117EPSS

Exploits1References19Affected Software3

Veracode•added 2019/05/02 4:45 a.m.•33 views

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and Software Development Kit is susceptible to sandbox restriction bypass. Due to the flaws in ImagingLib and the image attribute, channel, layout and raster processing in the 2D component, it does not prevent an untrusted Java application or applet to trigger...

7.5CVSS6AI score0.06746EPSS

Exploits0References26Affected Software2

Veracode•added 2019/05/02 4:45 a.m.•21 views

Sandbox Restrictions Bypass

5.8CVSS8.8AI score0.04128EPSS

Exploits0References20Affected Software1

Veracode•added 2019/05/02 4:44 a.m.•34 views

Permission Check Bypass

OpenJDK 7 Java Runtime Environment and OpenJDK 7 Software Development Kit is vulnerable to permission check bypass. The attack is due to incorrect setter access check in MethodHandles.java, allowing an attacker to set value of a final field...

3.7CVSS8.6AI score0.85333EPSS

Exploits6References19Affected Software1

Veracode•added 2019/05/02 4:44 a.m.•24 views

Sandbox Restrictions Bypass

OpenJDK 7 Java Runtime Environment and OpenJDK 7 Software Development Kit is vulnerable to sandbox restrictions bypass. It is due to improper method-invocation restrictions by the MethodUtil trampoline class allowing remote attackers to bypass the Java sandbox...

10CVSS8.9AI score0.06788EPSS

Exploits0References31Affected Software3

Veracode•added 2019/05/02 4:43 a.m.•29 views

Information Disclosure

10CVSS9.1AI score0.11515EPSS

Exploits0References21Affected Software1

Veracode•added 2019/05/02 4:41 a.m.•31 views

Information Disclosure

10CVSS5.7AI score0.68532EPSS

Exploits5References42Affected Software1

Veracode•added 2019/05/02 4:41 a.m.•32 views

Arbitrary Code Execution

10CVSS5.7AI score0.68532EPSS

Exploits5References25Affected Software1

Tenable Nessus•added 2019/04/25 12:0 a.m.•67 views

SUSE SLED12 Security Update : ntfs-3g_ntfsprogs (SUSE-SU-2019:1000-1)

This update for ntfs-3gntfsprogs fixes the following issues : Security issues fixed : CVE-2019-9755: Fixed a heap-based buffer overflow which could lead to local privilege escalation bsc1130165. Note that Tenable Network Security has extracted the preceding description block directly from the SUS...

7CVSS6.6AI score0.00531EPSS

Exploits0References4

BDU FSTEC•added 2019/04/25 12:0 a.m.•2 views

The vulnerability of the Outside In Filters sub-component of Oracle’s software development kit (SDK) allows a malicious actor to gain unauthorized access to protected information or cause partial service disruption.

The vulnerability of the Outside In Filters sub-component of the Oracle Outside In Technology SDK is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information or cause a partial servic...

7.5CVSS7.2AI score0.01218EPSS

Exploits0References2Affected Software1

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by