Lucene search
+L

1517 matches found

OSV
OSV
added 2019/07/31 12:5 a.m.2 views

USN-4080-1 openjdk-8 vulnerabilities

Keegan Ryan discovered that the ECC implementation in OpenJDK was not sufficiently resilient to side-channel attacks. An attacker could possibly use this to expose sensitive information. CVE-2019-2745 It was discovered that OpenJDK did not sufficiently validate serial streams before deserializing...

5.8CVSS6.9AI score0.09393EPSS
SaveExploits3References8
Tenable Nessus
Tenable Nessus
added 2019/07/25 12:0 a.m.222 views

CentOS 6 : java-1.8.0-openjdk (CESA-2019:1811)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

5.8CVSS6.6AI score0.04351EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2019/07/25 12:0 a.m.228 views

CentOS 7 : java-1.8.0-openjdk (CESA-2019:1815)

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

5.8CVSS6.6AI score0.04351EPSS
SaveExploits0References7
Cent OS
Cent OS
added 2019/07/24 8:29 p.m.262 views

java security update

CentOS Errata and Security Advisory CESA-2019:1815 An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

5.8CVSS6.7AI score0.04351EPSS
SaveExploits0References7
Cent OS
Cent OS
added 2019/07/24 8:27 p.m.223 views

java security update

CentOS Errata and Security Advisory CESA-2019:1839 An update for java-1.7.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

5.8CVSS6.7AI score0.04351EPSS
SaveExploits0References7
Cent OS
Cent OS
added 2019/07/24 8:25 p.m.205 views

java security update

CentOS Errata and Security Advisory CESA-2019:1810 An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

5.8CVSS6.7AI score0.04351EPSS
SaveExploits0References7
Cent OS
Cent OS
added 2019/07/24 8:18 p.m.232 views

java security update

CentOS Errata and Security Advisory CESA-2019:1811 An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detaile...

5.8CVSS6.7AI score0.04351EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2019/07/24 12:0 a.m.27 views

Oracle Linux 7 : java-1.7.0-openjdk (ELSA-2019-1839)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2019-1839 advisory. 1:1.7.0.231-2.6.19.1.0.1 - Update DISTRONAME in specfile 1:1.7.0.231-2.6.19.1 - Add missing hyphen in tapset filename. - Resolves: rhbz1724452...

5.8CVSS6.7AI score0.04351EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2019/07/23 12:0 a.m.34 views

Scientific Linux Security Update : java-1.8.0-openjdk on SL6.x i386/x86_64 (20190722)

Security Fixes : - OpenJDK: Side-channel attack risks in Elliptic Curve EC cryptography Security, 8208698 CVE-2019-2745 - OpenJDK: Insufficient checks of suppressed exceptions in deserialization Utilities, 8212328 CVE-2019-2762 - OpenJDK: Unbounded memory allocation during deserialization in...

5.8CVSS6.5AI score0.04351EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2019/07/23 12:0 a.m.29 views

RHEL 8 : java-1.8.0-openjdk (RHSA-2019:1816)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1816 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...

5.8CVSS6.9AI score0.04351EPSS
SaveExploits0References15
Tenable Nessus
Tenable Nessus
added 2019/07/23 12:0 a.m.34 views

RHEL 8 : java-11-openjdk (RHSA-2019:1817)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1817 advisory. The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fixe...

5.8CVSS6.8AI score0.04351EPSS
SaveExploits0References17
RedHat Linux
RedHat Linux
added 2019/07/22 12:58 p.m.106 views

Moderate: Red Hat Security Advisory: java-11-openjdk security update

An update for java-11-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

5.8CVSS6.7AI score0.04351EPSS
SaveExploits0References8
RedHat Linux
RedHat Linux
added 2019/07/22 12:57 p.m.128 views

Moderate: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

5.8CVSS6.7AI score0.04351EPSS
SaveExploits0References7
Veracode
Veracode
added 2019/07/10 4:47 a.m.18 views

Directory Traversal

localhost-now is vulnerable to directory traversal. A remote attacker is able to read arbitrary files on the server using the ../ characters due to a lack of validation in the URL...

7.5CVSS7.3AI score0.0221EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2019/06/27 5:15 p.m.8 views

CVE-2019-5839

Excessive data validation in URL parser in Google Chrome prior to 75.0.3770.80 allowed a remote attacker who convinced a user to input a URL to bypass website URL validation via a crafted URL...

4.3CVSS8.3AI score
SaveExploits0References9
CVE
CVE
added 2019/06/27 4:13 p.m.314 views

CVE-2019-5839

CVE-2019-5839 affects Google Chrome (Chromium) prior to 75.0.3770.80. The issue is excessive data validation in the URL parser, enabling a remote attacker who lures a user to input a crafted URL to bypass website URL validation. Root cause: improper validation in the URL parsing logic. Impact, pe...

4.3CVSS5AI score0.01252EPSS
SaveExploits0References9Affected Software1
Veracode
Veracode
added 2019/06/17 1:49 a.m.12 views

URL Validation Bypass

jquery-mobile is vulnerable to URL validation bypass. Forward and Back slashes are not properly handled, which would allow remote attackers to bypass access controls or URL checks due to incorrect parsing of URLs, e.g. http://[email protected]/ is incorrectly considered the same domain as...

6.8AI score
SaveExploits0
Veracode
Veracode
added 2019/06/11 6:20 a.m.33 views

CRLF Injection

Twisted is vulnerable to CRLF injection. It does not validate URL in the request sent by HTTP clients, allowing an attacker to inject malicious characters such as CRLF...

6.1CVSS6.6AI score0.02523EPSS
SaveExploits1References10Affected Software258
Debian CVE
Debian CVE
added 2019/06/03 4:24 p.m.30 views

CVE-2019-12308

An issue was discovered in Django 1.11 before 1.11.21, 2.1 before 2.1.9, and 2.2 before 2.2.2. The clickable Current URL value displayed by the AdminURLFieldWidget displays the provided value without validating it as a safe URL. Thus, an unvalidated value stored in the database, or a value provid...

6.1CVSS6.7AI score0.02382EPSS
SaveExploits0
Cvelist
Cvelist
added 2019/05/17 6:47 p.m.23 views

CVE-2019-12161

WPO WebPageTest 19.04 allows SSRF because ValidateURL in www/runtest.php does not consider octal encoding of IP addresses such as 0300.0250 as a replacement for 192.168...

8.7AI score0.01068EPSS
SaveExploits0References1
Rows per page
Query Builder