Jdk Security Vulnerabilities and Issues — Page 8 of Jdk CVE List

Lucene search

OracleJdk

771 matches found

CVE•added 2013/04/17 6:55 p.m.•257 views

CVE-2013-1561

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.

5CVSS5.4AI score0.00584EPSS

CVE•added 2013/10/16 5:55 p.m.•257 views

CVE-2013-5800

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS.

4.3CVSS8AI score0.02159EPSS

CVE•added 2013/10/16 5:55 p.m.•257 views

CVE-2013-5832

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2...

9.3CVSS4.4AI score0.05159EPSS

CVE•added 2013/10/16 5:55 p.m.•257 views

CVE-2013-5846

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

9.3CVSS5.7AI score0.01602EPSS

CVE•added 2019/07/23 11:15 p.m.•257 views

CVE-2019-2766

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access v...

3.1CVSS3.5AI score0.01448EPSS

CVE•added 2013/06/18 10:55 p.m.•256 views

CVE-2013-2445

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous infor...

7.8CVSS6.2AI score0.06734EPSS

CVE•added 2013/10/16 3:55 p.m.•256 views

CVE-2013-5775

Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-5777.

7.5CVSS5.9AI score0.00912EPSS

CVE•added 2013/10/16 3:55 p.m.•256 views

CVE-2013-5787

10CVSS4.4AI score0.05159EPSS

CVE•added 2013/10/16 5:55 p.m.•256 views

CVE-2013-5819

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5831.

5CVSS4.3AI score0.01834EPSS

CVE•added 2013/04/17 6:55 p.m.•255 views

CVE-2013-2414

10CVSS5.7AI score0.0753EPSS

CVE•added 2013/04/17 6:55 p.m.•255 views

CVE-2013-2434

10CVSS5.6AI score0.01083EPSS

CVE•added 2013/10/16 5:55 p.m.•255 views

CVE-2013-5801

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.

5CVSS4.1AI score0.02321EPSS

CVE•added 2013/10/16 5:55 p.m.•255 views

CVE-2013-5831

5CVSS4.3AI score0.01834EPSS

CVE•added 2019/10/16 6:15 p.m.•255 views

CVE-2019-2933

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

4.3CVSS3.9AI score0.00698EPSS

CVE•added 2022/01/19 12:15 p.m.•255 views

CVE-2022-21366

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthentica...

5.3CVSS4.7AI score0.00139EPSS

CVE•added 2013/04/17 6:55 p.m.•254 views

CVE-2013-2438

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect integrity via unknown vectors related to JavaFX.

5CVSS5.5AI score0.00707EPSS

CVE•added 2013/06/18 10:55 p.m.•254 views

CVE-2013-2467

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 5.0 Update 45 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Java installer.

6.9CVSS5.2AI score0.00121EPSS

CVE•added 2013/10/16 6:55 p.m.•254 views

CVE-2013-5852

7.6CVSS4.4AI score0.05159EPSS

CVE•added 2013/10/16 6:55 p.m.•254 views

CVE-2013-5854

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality via unknown vectors.

2.6CVSS5.7AI score0.00381EPSS

CVE•added 2012/06/16 9:55 p.m.•253 views

CVE-2012-1720

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier, when running on Solaris, allows local users to affect confidentiality, integrity, and availability via unkn...

3.7CVSS5.3AI score0.00061EPSS

CVE•added 2013/06/18 10:55 p.m.•253 views

CVE-2013-2400

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744.

5CVSS5.5AI score0.05795EPSS

CVE•added 2013/04/17 6:55 p.m.•253 views

CVE-2013-2421

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the...

9.3CVSS8AI score0.24508EPSS

CVE•added 2013/10/16 5:55 p.m.•252 views

CVE-2013-5812

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

6.4CVSS4.2AI score0.04198EPSS

CVE•added 2022/01/19 12:15 p.m.•251 views

CVE-2022-21349

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated atta...

5.3CVSS4.7AI score0.00061EPSS

CVE•added 2013/04/17 6:55 p.m.•250 views

CVE-2013-2425

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.

10CVSS5.5AI score0.03526EPSS

CVE•added 2013/10/16 5:55 p.m.•250 views

CVE-2013-5844

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

9.3CVSS5.7AI score0.01602EPSS

CVE•added 2015/07/16 11:0 a.m.•250 views

CVE-2015-4732

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590.

10CVSS4.2AI score0.76849EPSS

In wild

CVE•added 2013/04/17 6:55 p.m.•249 views

CVE-2013-2416

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

4.3CVSS5.5AI score0.37623EPSS

Web

CVE•added 2013/04/17 6:55 p.m.•249 views

CVE-2013-2439

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related...

6.9CVSS5.2AI score0.00106EPSS

CVE•added 2015/07/16 11:0 a.m.•249 views

CVE-2015-4733

10CVSS4AI score0.14837EPSS

CVE•added 2013/04/17 6:55 p.m.•248 views

CVE-2013-2428

10CVSS5.6AI score0.0753EPSS

CVE•added 2019/11/08 3:15 p.m.•248 views

CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

6.5CVSS6AI score0.01852EPSS

CVE•added 2017/10/19 5:29 p.m.•247 views

CVE-2017-10355

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker w...

5.3CVSS5.3AI score0.06888EPSS

Web

CVE•added 2018/07/18 1:29 p.m.•246 views

CVE-2018-2973

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/...

5.9CVSS6.2AI score0.00265EPSS

CVE•added 2017/12/29 10:29 p.m.•244 views

CVE-2013-4578

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.

5.3CVSS4.7AI score0.0029EPSS

CVE•added 2022/01/19 12:15 p.m.•244 views

CVE-2022-21277

5.3CVSS4.7AI score0.00139EPSS

CVE•added 2015/07/16 10:59 a.m.•240 views

CVE-2015-2601

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

5CVSS4.8AI score0.02499EPSS

CVE•added 2015/07/16 10:59 a.m.•234 views

CVE-2015-2625

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.

2.6CVSS4.8AI score0.01864EPSS

CVE•added 2018/07/18 1:29 p.m.•234 views

CVE-2018-2940

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via m...

4.3CVSS4.2AI score0.00082EPSS

CVE•added 2015/07/16 10:59 a.m.•233 views

CVE-2015-2628

10CVSS3.9AI score0.09577EPSS

CVE•added 2015/07/16 11:0 a.m.•233 views

CVE-2015-4749

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.

4.3CVSS4.9AI score0.04374EPSS

CVE•added 2020/07/15 6:15 p.m.•229 views

CVE-2020-14562

Vulnerability in the Java SE product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks of ...

5.3CVSS5AI score0.00225EPSS

CVE•added 2013/07/23 11:3 a.m.•227 views

CVE-2013-4002

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlie...

7.1CVSS6.7AI score0.01422EPSS

CVE•added 2016/10/25 2:30 p.m.•225 views

CVE-2016-5542

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.

4.3CVSS6AI score0.01399EPSS

CVE•added 2018/07/13 4:29 p.m.•219 views

CVE-2018-14048

An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.

6.5CVSS7.4AI score0.00764EPSS

CVE•added 2018/04/19 2:29 a.m.•219 views

CVE-2018-2790

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via mult...

3.1CVSS3.9AI score0.00268EPSS

CVE•added 2020/07/15 6:15 p.m.•219 views

CVE-2020-14573

Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.7 and 14.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks o...

4.3CVSS3.9AI score0.00189EPSS

CVE•added 2022/10/18 9:15 p.m.•219 views

CVE-2022-21618

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated at...

5.3CVSS4.8AI score0.00158EPSS

CVE•added 2017/01/27 10:59 p.m.•217 views

CVE-2017-3252

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with netw...

5.8CVSS5.8AI score0.00381EPSS

CVE•added 2015/07/16 10:59 a.m.•215 views

CVE-2015-2621

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.

5CVSS3.9AI score0.02337EPSS

Total number of security vulnerabilities771