Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

java se development kit vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2009-1099
Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and previous versions, and 6 Update 12 and previous versions, allows remote malicious users to access files or execute arbitrary code via crafted glyph descriptions in a Typ...
Sun Java Runtime Environment 6.0Sun Java Se Development KitSun Java Runtime Environment 5.0
7.5
CVSSv2
CVE-2009-1105
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote malicious users to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, a...
Sun Java
6.4
CVSSv2
CVE-2009-1103
Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and previous versions; 6 Update 12 and previous versions; 1.4.2_19 and previous versions; and 1.3.1_24 and previous versions allows remote malicious use...
Sun Java
4.3
CVSSv2
CVE-2009-1107
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and previous versions, and 5.0 Update 17 and previous versions, allows remote malicious users to trick a user into trusting a signed applet via unknown vectors that misrepresent the s...
Sun Java
6.4
CVSSv2
CVE-2009-1102
Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and previous versions allows remote malicious users to access files and execute arbitrary code via unknown vectors related to "code generation.&qu...
Sun Java
5.8
CVSSv2
CVE-2009-1104
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and previous versions; 6 Update 12 and previous versions; and 1.4.2_19 and previous versions does not prevent Javascript that is loaded from the localhost from connecting to other p...
Sun Java
7.5
CVSSv2
CVE-2021-3517
There is a flaw in the xml entity encoding functionality of libxml2 in versions prior to 2.9.11. An attacker who is able to supply a crafted file to be processed by an application linked with the affected functionality of libxml2 could trigger an out-of-bounds read. The most like...
Xmlsoft Libxml2Redhat Jboss Core Services -Redhat Enterprise Linux 8.0Fedoraproject Fedora 33Fedoraproject Fedora 34Debian Debian Linux 9.0Netapp Snapmanager -Netapp Oncommand Workflow Automation -Netapp Oncommand Insight -Netapp Ontap Select Deploy Administration Utility -Netapp Clustered Data Ontap -Netapp E-series Santricity Storage Manager -Netapp Clustered Data Ontap Antivirus Connector -Netapp Snapdrive -Netapp Solidfire -Netapp Hci Management Node -Netapp Active Iq Unified Manager -Netapp Santricity Unified Manager -Netapp Manageability Software Development Kit -Netapp E-series Santricity Web Services -Netapp E-series Santricity Os ControllerNetapp Hci H410c Firmware -
2.1
CVSSv2
CVE-2012-1717
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and previous versions, 6 update 32 and previous versions, 5 update 35 and previous versions, and 1.4.2_37 and previous versions allows local users to affect confidentiality via ...
Oracle JreOracle Jre 1.5.0Oracle Jre 1.6.0Oracle Jre 1.7.0Oracle JdkOracle Jdk 1.5.0Oracle Jdk 1.6.0Oracle Jdk 1.7.0Redhat Enterprise Linux Server 5.0Redhat Enterprise Linux For Scientific Computing 6.0Redhat Enterprise Linux For Power Big Endian 5.0Redhat Enterprise Linux Server Aus 6.2Redhat Enterprise Linux Workstation 5.0Redhat Enterprise Linux For Ibm Z Systems 5.0Redhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0Redhat Enterprise Linux Desktop 5.0Redhat Enterprise Linux Eus 6.2Redhat Enterprise Linux Server From Rhui 6.0Redhat Satellite With Embedded Oracle 5.5Redhat Icedtea6
6.4
CVSSv2
CVE-2009-1106
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote malicious users to bypass intended access restrictions and connect to arbitrary sites via unknown vector...
Sun Jdk 1.6.0Sun Jre 1.6.0
10
CVSSv2
CVE-2009-1095
Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and previous versions, and 6 Update 12 and previous versions, allows remote malicious users to access files or execute arbitrary code via a JAR file with crafted Pack20...
Sun Jdk 1.5.0Sun Jre 1.5.0Sun JreSun JdkSun Jre 1.6.0Sun Jdk 1.6.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-38028CVE-2024-32406CVE-2024-25624IMAPCVE-2024-2310CVE-2024-0874CVE-2024-20359XXEremote code execution
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook