Lucene search

K
SunJre1.3.1

56 matches found

cve
cve
added 2003/04/02 5:0 a.m.41 views

CVE-2002-0076

Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, a...

7.5CVSS7.2AI score0.01144EPSS
cve
cve
added 2005/11/30 11:3 a.m.41 views

CVE-2005-3904

Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.

7.5CVSS7.4AI score0.10002EPSS
cve
cve
added 2007/10/06 12:17 a.m.41 views

CVE-2007-5239

Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not properly enforce access restrictions for untrusted (1) applications and (2) applets, which allows user-assisted remote att...

4CVSS6.2AI score0.01538EPSS
cve
cve
added 2005/11/30 11:3 a.m.40 views

CVE-2005-3907

Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.

7.5CVSS7.3AI score0.08015EPSS
cve
cve
added 2005/11/30 11:3 a.m.39 views

CVE-2005-3906

Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vul...

7.5CVSS7.4AI score0.11508EPSS
cve
cve
added 2005/07/14 4:0 a.m.35 views

CVE-2002-2072

java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged method with a null argument.

5CVSS7AI score0.04791EPSS
Total number of security vulnerabilities56