Export limit exceeded: 26203 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 42

Export CSV
CVE-2013-5458

JDK: unspecified sandbox bypass (XML)

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 2.0 · 9.3 Critical EPSS 5.4% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras
CVE-2012-4821

JDK: getDeclaredMethods() and setAccessible() code execution

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via "insecure use" of the (1) java.lang.Class getDeclaredMethods or nd (2) java.lang.reflect.AccessibleObject setAccessible() methods.

CVSS 2.0 · 9.3 Critical EPSS 6.9% KEV · Not listed
Vendors
Ibm Redhat Tivoli Storage Productivity Center
Products
Java Lotus Domino Lotus Notes and 14 more
CVE-2013-3012

JDK: Unspecified security fixes (July 2013)

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3011.

CVSS 2.0 · 9.3 Critical EPSS 4.4% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras
CVE-2013-4002

OpenJDK: XML parsing Denial of Service (JAXP, 8017298)

XMLscanner.java in Apache Xerces2 Java Parser before 2.12.0, as used in the Java Runtime Environment (JRE) in IBM Java 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 as well as Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, Java SE Embedded 7u40 and earlier, and possibly other products allows remote attackers to cause a denial of service via vectors related to XML attribute names.

CVSS 2.0 · 7.1 High EPSS 24.7% KEV · Not listed
Vendors
Apache Canonical Hp and 7 more
Products
Xerces2 Java Ubuntu Linux Hp-ux and 28 more
CVE-2013-4041

JDK: unspecified sandbox bypass (JVM)

Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors.

CVSS 2.0 · 6.8 Medium EPSS 2.8% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Network Satellite Rhel Extras
CVE-2013-5456

JDK: unspecified sandbox bypass (ORB)

The com.ibm.rmi.io.SunSerializableFactory class in IBM Java SDK 7.0.0 before SR6 allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code via vectors related to deserialization inside the AccessController doPrivileged block.

CVSS 2.0 · 9.3 Critical EPSS 6.0% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras
CVE-2011-3387

java-1.4.2-ibm: DoS via class file parser in IBM Java 1.4.2.SR13.FP9

The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file, related to validation of a length field at the wrong time, a different vulnerability than CVE-2011-0311.

CVSS 2.0 · 4.0 Medium EPSS 1.8% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras Rhel Extras Sap
CVE-2011-0311

IBM JDK Class file parsing denial-of-service

The class file parser in IBM Java before 1.4.2 SR13 FP9, as used in IBM Runtimes for Java Technology 5.0.0 before SR13 and 6.0.0 before SR10, allows remote authenticated users to cause a denial of service (JVM segmentation fault, and possibly memory consumption or an infinite loop) via a crafted attribute length field in a class file, which triggers a buffer over-read.

CVSS 2.0 · 3.5 Low EPSS 1.8% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Runtimes For Java Technology Rhel Extras and 1 more
CVE-2012-4820

JDK: java.lang.reflect.Method invoke() code execution

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, when running under a security manager, allows remote attackers to gain privileges by modifying or removing the security manager via vectors related to "insecure use of the java.lang.reflect.Method invoke() method."

CVSS 2.0 · 9.3 Critical EPSS 5.1% KEV · Not listed
Vendors
Ibm Redhat Tivoli Storage Productivity Center
Products
Java Lotus Domino Lotus Notes and 15 more
CVE-2012-4822

JDK: java.lang.class code execution

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allow remote attackers to execute arbitrary code via vectors related to "insecure use [of] multiple methods in the java.lang.class class."

CVSS 2.0 · 9.3 Critical EPSS 6.9% KEV · Not listed
Vendors
Ibm Redhat Tivoli Storage Productivity Center
Products
Java Lotus Domino Lotus Notes and 15 more
CVE-2012-4823

JDK: java.lang.ClassLoder defineClass() code execution

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and earlier, Java 6 SR11 and earlier, Java 5 SR14 and earlier, and Java 142 SR13 FP13 and earlier; as used in IBM Rational Host On-Demand, Rational Change, Tivoli Monitoring, Smart Analytics System 5600, Tivoli Remote Control 5.1.2, WebSphere Real Time, Lotus Notes & Domino, Tivoli Storage Productivity Center, and Service Deliver Manager; and other products from other vendors such as Red Hat, allows remote attackers to execute arbitrary code via vectors related to "insecure use of the java.lang.ClassLoder defineClass() method."

CVSS 2.0 · 9.3 Critical EPSS 6.9% KEV · Not listed
Vendors
Ibm Redhat Tivoli Storage Productivity Center
Products
Java Lotus Domino Lotus Notes and 15 more
CVE-2013-0485

JDK: unspecified flaw (Libraries)

Unspecified vulnerability in IBM Java SDK 7 before SR4-FP1, 6 before SR13-FP1, 5.0 before SR16-FP1, and 1.4.2 before SR13-FP16 has unknown impact and attack vectors related to Class Libraries.

CVSS 2.0 · 10.0 Critical EPSS 2.4% KEV · Not listed
Vendors
Ibm
Products
Java
CVE-2013-3006

JDK: Unspecified security fixes (July 2013)

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3008.

CVSS 2.0 · 9.3 Critical EPSS 4.0% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras
CVE-2013-3007

JDK: Unspecified security fixes (July 2013)

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.

CVSS 2.0 · 9.3 Critical EPSS 4.0% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras
CVE-2013-3008

JDK: Unspecified security fixes (July 2013)

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3006.

CVSS 2.0 · 9.3 Critical EPSS 4.0% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras
CVE-2013-3009

JDK: Unspecified security fixes (July 2013)

The com.ibm.CORBA.iiop.ClientDelegate class in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 improperly exposes the invoke method of the java.lang.reflect.Method class, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to the AccessController doPrivileged block.

CVSS 2.0 · 9.3 Critical EPSS 4.4% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras
CVE-2013-3010

JDK: Unspecified security fixes (July 2013)

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 6.0.1 before 6.0.1 SR6 and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3007.

CVSS 2.0 · 9.3 Critical EPSS 4.0% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras
CVE-2013-3011

JDK: Unspecified security fixes (July 2013)

Unspecified vulnerability in the Java Runtime Environment (JRE) in IBM Java 1.4.2 before 1.4.2 SR13-FP18, 5.0 before 5.0 SR16-FP3, 6 before 6 SR14, 6.0.1 before 6.0.1 SR6, and 7 before 7 SR5 allows remote attackers to affect confidentiality, availability, and integrity via unknown vectors, a different vulnerability than CVE-2013-3009 and CVE-2013-3012.

CVSS 2.0 · 9.3 Critical EPSS 4.4% KEV · Not listed
Vendors
Ibm Redhat
Products
Java Rhel Extras
CVE-2019-4473

JDK: Insecure RPATH in multiple binaries on AIX

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Ibm
Products
Java