Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4,046

Export CSV
CVE-2011-3557

OpenJDK: RMI registry privileged code execution (RMI, 7083012)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability, related to RMI, a different vulnerability than CVE-2011-3556.

CVSS 2.0 · 6.8 Medium EPSS 3.5% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Jrockit Enterprise Linux Network Satellite and 4 more
CVE-2011-3558

OpenJDK: Hotspot unspecified issue (Hotspot, 7070134)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to HotSpot.

CVSS 2.0 · 5.0 Medium EPSS 2.5% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Rhel Extras Jdk and 1 more
CVE-2011-3560

OpenJDK: missing checkSetFactory calls in HttpsURLConnection (JSSE, 7096936)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity, related to JSSE.

CVSS 2.0 · 6.4 Medium EPSS 2.6% KEV · Not listed
Vendors
Redhat Sun
Products
Enterprise Linux Network Satellite Rhel Extras and 3 more
CVE-2011-3561

JDK: unspecified vulnerability fixed in 6u29 (Deployment)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

CVSS 2.0 · 1.8 Low EPSS 1.4% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Javafx Jdk Jre and 4 more
CVE-2011-3563

OpenJDK: JavaSound incorrect bounds check (Sound, 7088367)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote attackers to affect confidentiality and availability via unknown vectors related to Sound.

CVSS 2.0 · 6.4 Medium EPSS 3.7% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Jre Enterprise Linux Network Satellite and 3 more
CVE-2011-3571

OpenJDK: AtomicReferenceArray insufficient array type check (Concurrency, 7082299)

Unspecified vulnerability in the Virtual Desktop Infrastructure (VDI) component in Oracle Virtualization 3.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Session. NOTE: this CVE identifier was accidentally used for a Concurrency issue in Java Runtime Environment, but that issue has been reassigned to CVE-2012-0507.

CVSS 2.0 · 3.6 Low EPSS 1.6% KEV · Not listed
Vendors
Oracle Redhat
Products
Virtualization Enterprise Linux Rhel Extras
CVE-2011-4369

acroread: unspecified vulnerability in PRC component (APSB11-30)

Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unknown vectors, as exploited in the wild in December 2011.

CVSS 2.0 · 10.0 Critical EPSS 7.5% KEV · Not listed
Vendors
Adobe Apple Microsoft and 2 more
Products
Acrobat Acrobat Reader Mac Os X and 3 more
CVE-2011-4370

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4372 and CVE-2011-4373.

CVSS 2.0 · 7.5 High EPSS 6.2% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Reader Macos and 2 more
CVE-2011-4371

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.

CVSS 2.0 · 7.5 High EPSS 6.2% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Reader Macos and 2 more
CVE-2011-4372

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4373.

CVSS 3.1 · 9.8 Critical EPSS 12.6% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Reader Macos and 2 more
CVE-2011-4373

acroread: multiple unspecified flaws (APSB12-08, APSB12-01)

Adobe Reader and Acrobat before 9.5, and 10.x before 10.1.2, on Windows and Mac OS X allow attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-4370 and CVE-2011-4372.

CVSS 3.1 · 9.8 Critical EPSS 30.3% KEV · Not listed
Vendors
Adobe Apple Microsoft and 1 more
Products
Acrobat Reader Macos and 2 more
CVE-2011-4374

acroread: multiple code execution flaws (APSB11-24)

Integer overflow in Adobe Reader 9.x before 9.4.6 on Linux allows attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 4.0% KEV · Not listed
Vendors
Adobe Apple Microsoft and 2 more
Products
Acrobat Reader Macos and 3 more
CVE-2011-5035

GlassFish: hash table collisions CPU usage DoS (oCERT-2011-003)

Oracle Glassfish 2.1.1, 3.0.1, and 3.1.1, as used in Communications Server 2.0, Sun Java System Application Server 8.1 and 8.2, and possibly other products, computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters, aka Oracle security ticket S0104869.

CVSS 2.0 · 5.0 Medium EPSS 68.2% KEV · Not listed
Vendors
Oracle Redhat
Products
Glassfish Server Enterprise Linux Network Satellite and 1 more
CVE-2012-0497

OpenJDK: insufficient checking of the graphics rendering object (2D, 7112642)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, and 6 Update 30 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Jre Enterprise Linux Network Satellite and 2 more
CVE-2012-0498

JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Jre Network Satellite Rhel Extras and 1 more
CVE-2012-0499

JDK: unspecified vulnerability fixed in 6u31 and 7u3 (2D)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and JavaFX 2.0.2 and earlier; allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0 · 10.0 Critical EPSS 6.2% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Javafx Jre Network Satellite and 3 more
CVE-2012-0500

JDK: unspecified vulnerability fixed in 6u31 and 7u3 (Deployment)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0 · 10.0 Critical EPSS 58.0% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Javafx Jre Network Satellite and 2 more
CVE-2012-0501

OpenJDK: off-by-one bug in ZIP reading code (JRE, 7118283)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect availability via unknown vectors.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Jre Enterprise Linux Network Satellite and 2 more
CVE-2012-0502

OpenJDK: KeyboardFocusManager focus stealing (AWT, 7110683)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and availability, related to AWT.

CVSS 2.0 · 6.4 Medium EPSS 2.8% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Jre Enterprise Linux Network Satellite and 3 more
CVE-2012-0503

OpenJDK: unrestricted use of TimeZone.setDefault() (i18n, 7110687)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability, related to I18n.

CVSS 2.0 · 7.5 High EPSS 2.8% KEV · Not listed
Vendors
Oracle Redhat Sun
Products
Jre Enterprise Linux Network Satellite and 3 more