Jre Security Vulnerabilities and Issues — Page 8 of Jre CVE List

Lucene search

OracleJre

783 matches found

CVE•added 2013/10/16 5:55 p.m.•254 views

CVE-2013-5832

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2...

9.3CVSS4.4AI score0.05159EPSS

CVE•added 2012/11/28 1:3 p.m.•253 views

CVE-2012-5373

Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via crafted input to an application that maintains a...

5CVSS8.2AI score0.01045EPSS

CVE•added 2013/04/17 6:55 p.m.•253 views

CVE-2013-1561

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.

5CVSS5.4AI score0.00584EPSS

CVE•added 2013/10/16 5:55 p.m.•253 views

CVE-2013-5800

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS.

4.3CVSS8AI score0.02159EPSS

CVE•added 2013/10/16 5:55 p.m.•253 views

CVE-2013-5819

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5818 and CVE-2013-5831.

5CVSS4.3AI score0.01834EPSS

CVE•added 2019/07/23 11:15 p.m.•253 views

CVE-2019-2766

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 7u221, 8u212, 11.0.3 and 12.0.1; Java SE Embedded: 8u211. Difficult to exploit vulnerability allows unauthenticated attacker with network access v...

3.1CVSS3.5AI score0.01448EPSS

CVE•added 2022/01/19 12:15 p.m.•253 views

CVE-2022-21366

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Oracle Java SE: 11.0.13, 17.0.1; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthentica...

5.3CVSS4.7AI score0.00139EPSS

CVE•added 2013/10/16 3:55 p.m.•252 views

CVE-2013-5775

Unspecified vulnerability in the Java SE and JavaFX components in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-5777.

7.5CVSS5.9AI score0.00912EPSS

CVE•added 2013/10/16 3:55 p.m.•252 views

CVE-2013-5787

10CVSS4.4AI score0.05159EPSS

CVE•added 2013/10/16 5:55 p.m.•252 views

CVE-2013-5846

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, and JavaFX 2.2.40 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

9.3CVSS5.7AI score0.01602EPSS

CVE•added 2019/10/16 6:15 p.m.•252 views

CVE-2019-2933

Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13; Java SE Embedded: 8u221. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multipl...

4.3CVSS3.9AI score0.00717EPSS

CVE•added 2013/06/18 10:55 p.m.•251 views

CVE-2013-2445

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect availability via unknown vectors related to Hotspot. NOTE: the previous infor...

7.8CVSS6.2AI score0.06734EPSS

CVE•added 2013/10/16 6:55 p.m.•251 views

CVE-2013-5852

7.6CVSS4.4AI score0.05159EPSS

CVE•added 2013/10/16 6:55 p.m.•251 views

CVE-2013-5854

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality via unknown vectors.

2.6CVSS5.7AI score0.00381EPSS

CVE•added 2013/04/17 6:55 p.m.•250 views

CVE-2013-2414

10CVSS5.7AI score0.0753EPSS

CVE•added 2013/04/17 6:55 p.m.•250 views

CVE-2013-2434

10CVSS5.6AI score0.01083EPSS

CVE•added 2013/06/18 10:55 p.m.•250 views

CVE-2013-2467

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 5.0 Update 45 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the Java installer.

6.9CVSS5.2AI score0.00121EPSS

CVE•added 2013/10/16 5:55 p.m.•250 views

CVE-2013-5801

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D.

5CVSS4.1AI score0.02321EPSS

CVE•added 2013/10/16 5:55 p.m.•250 views

CVE-2013-5831

5CVSS4.3AI score0.01834EPSS

CVE•added 2012/06/16 9:55 p.m.•249 views

CVE-2012-1720

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier, when running on Solaris, allows local users to affect confidentiality, integrity, and availability via unkn...

3.7CVSS5.3AI score0.00061EPSS

CVE•added 2013/06/18 10:55 p.m.•249 views

CVE-2013-2400

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-3744.

5CVSS5.5AI score0.05795EPSS

CVE•added 2013/04/17 6:55 p.m.•249 views

CVE-2013-2438

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect integrity via unknown vectors related to JavaFX.

5CVSS5.5AI score0.00707EPSS

CVE•added 2015/07/16 11:0 a.m.•249 views

CVE-2015-4732

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-2590.

10CVSS4.2AI score0.76849EPSS

In wild

CVE•added 2013/04/17 6:55 p.m.•248 views

CVE-2013-2421

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to HotSpot. NOTE: the previous information is from the...

9.3CVSS8AI score0.24508EPSS

CVE•added 2013/10/16 5:55 p.m.•248 views

CVE-2013-5812

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Deployment.

6.4CVSS4.2AI score0.04198EPSS

CVE•added 2015/07/16 11:0 a.m.•248 views

CVE-2015-4733

10CVSS4AI score0.14837EPSS

CVE•added 2022/01/19 12:15 p.m.•247 views

CVE-2022-21349

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 7u321, 8u311; Oracle GraalVM Enterprise Edition: 20.3.4 and 21.3.0. Easily exploitable vulnerability allows unauthenticated atta...

5.3CVSS4.7AI score0.00061EPSS

CVE•added 2013/10/16 5:55 p.m.•246 views

CVE-2013-5844

Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

9.3CVSS5.7AI score0.01602EPSS

CVE•added 2013/04/17 6:55 p.m.•245 views

CVE-2013-2416

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment.

4.3CVSS5.5AI score0.37623EPSS

Web

CVE•added 2013/04/17 6:55 p.m.•245 views

CVE-2013-2425

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install.

10CVSS5.5AI score0.03526EPSS

CVE•added 2013/04/17 6:55 p.m.•245 views

CVE-2013-2428

10CVSS5.6AI score0.0753EPSS

CVE•added 2013/04/17 6:55 p.m.•245 views

CVE-2013-2439

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, 5.0 Update 41 and earlier, and JavaFX 2.2.7 and earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related...

6.9CVSS5.2AI score0.00106EPSS

CVE•added 2017/10/19 5:29 p.m.•243 views

CVE-2017-10355

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthenticated attacker w...

5.3CVSS5.3AI score0.06888EPSS

Web

CVE•added 2018/07/18 1:29 p.m.•243 views

CVE-2018-2973

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SSL/...

5.9CVSS6.2AI score0.00265EPSS

CVE•added 2022/01/19 12:15 p.m.•242 views

CVE-2022-21277

5.3CVSS4.7AI score0.00139EPSS

CVE•added 2017/12/29 10:29 p.m.•239 views

CVE-2013-4578

jarsigner in OpenJDK and Oracle Java SE before 7u51 allows remote attackers to bypass a code-signing protection mechanism and inject unsigned bytecode into a signed JAR file by leveraging improper file validation.

5.3CVSS4.7AI score0.0029EPSS

CVE•added 2015/07/16 10:59 a.m.•239 views

CVE-2015-2601

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, JRockit R28.3.6, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

5CVSS4.8AI score0.02499EPSS

CVE•added 2015/07/16 10:59 a.m.•233 views

CVE-2015-2625

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JSSE.

2.6CVSS4.8AI score0.01864EPSS

CVE•added 2015/07/16 10:59 a.m.•232 views

CVE-2015-2628

10CVSS3.9AI score0.09577EPSS

CVE•added 2015/07/16 11:0 a.m.•232 views

CVE-2015-4749

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.

4.3CVSS4.9AI score0.04374EPSS

CVE•added 2018/07/18 1:29 p.m.•231 views

CVE-2018-2940

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows unauthenticated attacker with network access via m...

4.3CVSS4.2AI score0.00082EPSS

CVE•added 2013/07/23 11:3 a.m.•226 views

CVE-2013-4002

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlie...

7.1CVSS6.7AI score0.01422EPSS

CVE•added 2016/10/25 2:30 p.m.•221 views

CVE-2016-5542

Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect integrity via vectors related to Libraries.

4.3CVSS6AI score0.01399EPSS

CVE•added 2012/02/15 10:55 p.m.•220 views

CVE-2012-0499

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and JavaFX 2.0.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availabil...

10CVSS5.5AI score0.10203EPSS

CVE•added 2018/07/13 4:29 p.m.•219 views

CVE-2018-14048

An issue has been found in libpng 1.6.34. It is a SEGV in the function png_free_data in png.c, related to the recommended error handling for png_read_image.

6.5CVSS7.4AI score0.00764EPSS

CVE•added 2022/10/18 9:15 p.m.•217 views

CVE-2022-21618

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JGSS). Supported versions that are affected are Oracle Java SE: 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 21.3.3 and 22.2.0. Easily exploitable vulnerability allows unauthenticated at...

5.3CVSS4.8AI score0.00158EPSS

CVE•added 2018/04/19 2:29 a.m.•215 views

CVE-2018-2790

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via mult...

3.1CVSS3.9AI score0.00268EPSS

CVE•added 2015/07/16 10:59 a.m.•214 views

CVE-2015-2621

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33, allows remote attackers to affect confidentiality via vectors related to JMX.

5CVSS3.9AI score0.02337EPSS

CVE•added 2013/01/14 10:55 p.m.•212 views

CVE-2012-3174

Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Refle...

10CVSS6.6AI score0.93506EPSS

In wild

CVE•added 2017/01/27 10:59 p.m.•212 views

CVE-2017-3252

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with netw...

5.8CVSS5.8AI score0.00381EPSS

Total number of security vulnerabilities783