Lucene search
K

29 matches found

Tenable Nessus
Tenable Nessus
added 2022/04/29 12:0 a.m.38 views

IBM Java 7.0 < 7.0.10.70 / 7.1 < 7.1.4.70 / 8.0 < 8.0.6.15

The version of IBM Java installed on the remote host is prior to 7.0 7.0.10.70 / 7.1 7.1.4.70 / 8.0 8.0.6.15. It is, therefore, affected by a vulnerability as referenced in the IBM Security Update August 2020 advisory. - In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the...

5.3CVSS6.6AI score0.00632EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2020/12/16 3:21 p.m.1 views

JDK: Information disclosure via calls to System.arraycopy() with invalid length

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...

5.3CVSS5.8AI score0.00632EPSS
Exploits0References4
Veracode
Veracode
added 2020/08/11 2:19 a.m.21 views

Information Disclosure

java is vulnerable to information disclosure. The vulnerability exists through calls to System.arraycopy with invalid length...

5.3CVSS1.4AI score0.00632EPSS
Exploits0References3Affected Software1
RedHat Linux
RedHat Linux
added 2020/08/10 3:17 p.m.1 views

JDK: Information disclosure via calls to System.arraycopy() with invalid length

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...

5.3CVSS5.8AI score0.00632EPSS
Exploits0References4
RedhatCVE
RedhatCVE
added 2020/08/05 6:13 p.m.24 views

CVE-2019-17639

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...

5CVSS2.6AI score0.00632EPSS
Exploits0References3
OSV
OSV
added 2020/07/15 10:15 p.m.20 views

CVE-2019-17639

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...

5.3CVSS6.6AI score
Exploits0References1
NVD
NVD
added 2020/07/15 10:15 p.m.14 views

CVE-2019-17639

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...

5.3CVSS0.00632EPSS
Exploits0References1
Prion
Prion
added 2020/07/15 10:15 p.m.17 views

Design/Logic Flaw

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...

5CVSS6.2AI score0.00632EPSS
Exploits0References1Affected Software1
CVE
CVE
added 2020/07/15 9:19 p.m.162 views

CVE-2019-17639

CVE-2019-17639 affects Eclipse OpenJ9 on Power platforms, where calling System.arraycopy with a length longer than the source or destination can cause the current method to return prematurely with an undefined return value. The code may then use whatever is in the return register as if it matches...

5.3CVSS6.2AI score0.00632EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/07/15 9:19 p.m.18 views

CVE-2019-17639

In Eclipse OpenJ9 prior to version 0.21 on Power platforms, calling the System.arraycopy method with a length longer than the length of the source or destination array can, in certain specially crafted code patterns, cause the current method to return prematurely with an undefined return value...

6.3AI score0.00632EPSS
Exploits0References1
Veracode
Veracode
added 2020/04/10 12:48 a.m.27 views

Arbitary Code Execution

java is vulnerable to arbitrsry code execution. The System.arraycopy operation incorrectly handled large index values, potentially causing array corruption in an untrusted applet or application...

5.1CVSS6AI score0.03647EPSS
Exploits0References32Affected Software1
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.40 views

Huawei EulerOS: Security Advisory for java-1.7.0-openjdk (EulerOS-SA-2016-1080)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.6CVSS7.2AI score0.06252EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2017/07/13 12:0 a.m.33 views

Virtuozzo 7 : java-1.6.0-openjdk / java-1.6.0-openjdk-demo / etc (VZLSA-2017-0061)

An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives...

9.6CVSS6.9AI score0.06252EPSS
Exploits0References7
Tenable Nessus
Tenable Nessus
added 2017/01/13 12:0 a.m.61 views

CentOS 5 / 6 / 7 : java-1.6.0-openjdk (CESA-2017:0061)

An update for java-1.6.0-openjdk is now available for Red Hat Enterprise Linux 5, Red Hat Enterprise Linux 6, and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives...

9.6CVSS7AI score0.06252EPSS
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2016/11/21 12:0 a.m.254 views

Amazon Linux AMI : java-1.7.0-openjdk (ALAS-2016-771)

It was discovered that the Libraries component of OpenJDK did not restrict the set of algorithms used for JAR integrity verification. This flaw could allow an attacker to modify content of the JAR file that used weak signing key or hash algorithm. CVE-2016-5542 A flaw was found in the way the JMX...

9.6CVSS7AI score0.06252EPSS
Exploits0References6
OSV
OSV
added 2016/11/17 10:29 p.m.0 views

USN-3130-1 openjdk-7 vulnerabilities

It was discovered that OpenJDK did not restrict the set of algorithms used for Jar integrity verification. An attacker could use this to modify without detection the content of a JAR file, affecting system integrity. CVE-2016-5542 It was discovered that the JMX component of OpenJDK did not...

9.6CVSS6.8AI score0.06252EPSS
Exploits0References6
RedHat Linux
RedHat Linux
added 2016/11/07 1:27 p.m.2 views

OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)

It was discovered that the Hotspot component of OpenJDK did not properly check arguments of the System.arraycopy function in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's memory and completely bypass Java sandbox restrictions...

9.6CVSS7.3AI score0.06252EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2016/10/20 12:48 p.m.1 views

OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)

It was discovered that the Hotspot component of OpenJDK did not properly check arguments of the System.arraycopy function in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's memory and completely bypass Java sandbox restrictions...

9.6CVSS7.3AI score0.06252EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2016/10/20 12:47 p.m.3 views

OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)

It was discovered that the Hotspot component of OpenJDK did not properly check arguments of the System.arraycopy function in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's memory and completely bypass Java sandbox restrictions...

9.6CVSS7.3AI score0.06252EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2016/10/20 12:37 p.m.2 views

OpenJDK: incomplete type checks of System.arraycopy arguments (Hotspot, 8160591)

It was discovered that the Hotspot component of OpenJDK did not properly check arguments of the System.arraycopy function in certain cases. An untrusted Java application or applet could use this flaw to corrupt virtual machine's memory and completely bypass Java sandbox restrictions...

9.6CVSS7.3AI score0.06252EPSS
Exploits0References5
Rows per page
Query Builder