Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 9

Export CSV
CVE-2016-0264

JDK: buffer overflow vulnerability in the IBM JVM

Buffer overflow in the Java Virtual Machine (JVM) in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) allows remote attackers to execute arbitrary code via unspecified vectors.

CVSS 3.1 · 5.6 Medium EPSS 3.9% KEV · Not listed
Vendors
Ibm Redhat Suse
Products
Java Sdk Enterprise Linux Desktop Enterprise Linux Hpc Node Supplementary and 12 more
CVE-2016-0363

JDK: insecure use of invoke method in CORBA component, incorrect CVE-2013-3009 fix

The com.ibm.CORBA.iiop.ClientDelegate class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) uses the invoke method of the java.lang.reflect.Method class in an AccessController doPrivileged block, which allows remote attackers to call setSecurityManager and bypass a sandbox protection mechanism via vectors related to a Proxy object instance implementing the java.lang.reflect.InvocationHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-3009.

CVSS 3.0 · 8.1 High EPSS 4.0% KEV · Not listed
Vendors
Ibm Novell Redhat
Products
Java Sdk Suse Linux Enterprise Module For Legacy Software Suse Linux Enterprise Server and 12 more
CVE-2016-0376

JDK: insecure deserialization in CORBA, incorrect CVE-2013-5456 fix

The com.ibm.rmi.io.SunSerializableFactory class in IBM SDK, Java Technology Edition 6 before SR16 FP25 (6.0.16.25), 6 R1 before SR8 FP25 (6.1.8.25), 7 before SR9 FP40 (7.0.9.40), 7 R1 before SR3 FP40 (7.1.3.40), and 8 before SR3 (8.0.3.0) does not properly deserialize classes in an AccessController doPrivileged block, which allows remote attackers to bypass a sandbox protection mechanism and execute arbitrary code as demonstrated by the readValue method of the com.ibm.rmi.io.ValueHandlerPool.ValueHandlerSingleton class, which implements the javax.rmi.CORBA.ValueHandler interface. NOTE: this vulnerability exists because of an incomplete fix for CVE-2013-5456.

CVSS 3.0 · 8.1 High EPSS 5.7% KEV · Not listed
Vendors
Ibm Novell Redhat
Products
Java Sdk Suse Linux Enterprise Module For Legacy Software Suse Linux Enterprise Server and 12 more
CVE-2013-5906

JDK: unspecified vulnerability fixed in 5.0u71, 6u71 and 7u51 (Install)

Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install, a different vulnerability than CVE-2013-5905.

CVSS 2.0 · 5.1 Medium EPSS 6.3% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 10 more
CVE-2013-5870

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX.

CVSS 2.0 · 6.8 Medium EPSS 4.8% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 9 more
CVE-2014-0418

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0415, and CVE-2014-0424.

CVSS 2.0 · 5.1 Medium EPSS 6.3% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 10 more
CVE-2014-0382

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect availability via unknown vectors related to JavaFX.

CVSS 2.0 · 4.3 Medium EPSS 4.9% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 9 more
CVE-2013-5895

JDK: multiple unspecified vulnerabilities fixed in 7u51 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u45 and JavaFX 2.2.45 allows remote attackers to affect confidentiality via unknown vectors related to JavaFX.

CVSS 2.0 · 5.0 Medium EPSS 5.7% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 9 more
CVE-2013-5904

JDK: unspecified vulnerability fixed in 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0 · 6.8 Medium EPSS 4.9% KEV · Not listed
Vendors
Hp Oracle Redhat
Products
Hp-ux Jdk Jre and 8 more