Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
microsoft java virtual machine vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2002-0058
Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 up to and including 6.1...
Sun Jre 1.2.2
Sun Jre 1.3.0
Sun Jre 1.1.8
Microsoft Virtual Machine 3802
Sun Sdk 1.1.8 007
Sun Sdk 1.2.2 010
Sun Jdk 1.1.8
Sun Sdk 1.2.2 10
Sun Sdk 1.3 02
5
CVSSv2
CVE-2002-1325
Microsoft Virtual Machine (VM) build 5.0.3805 and previous versions allows remote malicious users to determine a local user's username via a Java applet that accesses the user.dir system property, aka "User.dir Exposure Vulnerability."
Microsoft Windows 2000 Terminal Services
Microsoft Windows Nt 4.0
Microsoft Windows 98
Microsoft Windows 98se
Microsoft Windows 2000
Microsoft Windows Me
Microsoft Windows 95
Microsoft Windows Xp
10
CVSSv2
CVE-2000-0563
The URLConnection function in MacOS Runtime Java (MRJ) 2.1 and previous versions and the Microsoft virtual machine (VM) for MacOS allows a malicious web site operator to connect to arbitrary hosts using a HTTP redirection, in violation of the Java security model.
Apple Mac Os Runtime For Java
7.5
CVSSv2
CVE-2002-1260
The Java Database Connectivity (JDBC) APIs in Microsoft Virtual Machine (VM) 5.0.3805 and previous versions allow remote malicious users to bypass security checks and access database contents via an untrusted Java applet.
Microsoft Windows 2000 Terminal Services
Microsoft Windows Nt 4.0
Microsoft Windows Xp
Microsoft Windows 98se
Microsoft Windows Me
Microsoft Windows 2000
Microsoft Windows 95
Microsoft Windows 98
5.1
CVSSv2
CVE-2000-0162
The Microsoft virtual machine (VM) in Internet Explorer 4.x and 5.x allows a remote malicious user to read files via a malicious Java applet that escapes the Java sandbox, aka the "VM File Reading" vulnerability.
Microsoft Ie 4.1
Microsoft Ie 5.0
Microsoft Ie 5
Microsoft Visual Studio 6.0
Microsoft Internet Explorer 4.0
Microsoft Ie 4.0
10
CVSSv2
CVE-2002-1257
Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote malicious users to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.
Microsoft Windows 2000
Microsoft Windows 2000 Terminal Services
Microsoft Windows Me
Microsoft Windows Nt 4.0
Microsoft Windows 98
Microsoft Windows 98se
Microsoft Windows 95
Microsoft Windows Xp
5
CVSSv2
CVE-2002-1258
Two vulnerabilities in Microsoft Virtual Machine (VM) up to and including build 5.0.3805, as used in Internet Explorer and other applications, allow remote malicious users to read files via a Java applet with a spoofed location in the CODEBASE parameter in the APPLET tag, possibl...
Microsoft Windows 2000
Microsoft Windows 2000 Terminal Services
Microsoft Windows Me
Microsoft Windows Nt 4.0
Microsoft Windows 95
Microsoft Windows Xp
Microsoft Windows 98
Microsoft Windows 98se
5
CVSSv2
CVE-2012-0213
The UnhandledDataStructure function in hwpf/model/UnhandledDataStructure.java in Apache POI 3.8 and previous versions allows remote malicious users to cause a denial of service (OutOfMemoryError exception and possibly JVM destabilization) via a crafted length value in a Channel D...
Apache Poi 3.8
Apache Poi 3.5
Apache Poi 3.1
Apache Poi 3.0.2
Apache Poi 3.0
Apache Poi 2.5.1
Apache Poi 2.5
Apache Poi 1.10
Apache Poi 1.8
Apache Poi 1.0.1
Apache Poi 1.0.0
Apache Poi 0.5
Apache Poi 0.4
Apache Poi
Apache Poi 3.7
Apache Poi 3.6
Apache Poi 3.2
Apache Poi 3.0.1
Apache Poi 2.0
Apache Poi 1.5
Apache Poi 1.2.0
Apache Poi 0.12.0
4.3
CVSSv2
CVE-2011-3389
The SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet Explorer, Mozilla Firefox, Google Chrome, Opera, and other products, encrypts data by using CBC mode with chained initialization vectors, which allows man-in-the-middle malicious users...
Opera Opera Browser -
Microsoft Internet Explorer -
Microsoft Windows -
Google Chrome -
Mozilla Firefox -
Siemens Simatic Rf68xr Firmware
Siemens Simatic Rf615r Firmware
Haxx Curl
Redhat Enterprise Linux Server 5.0
Redhat Enterprise Linux Server Aus 6.2
Redhat Enterprise Linux Workstation 5.0
Redhat Enterprise Linux Desktop 6.0
Redhat Enterprise Linux Server 6.0
Redhat Enterprise Linux Workstation 6.0
Redhat Enterprise Linux Desktop 5.0
Redhat Enterprise Linux Eus 6.2
Debian Debian Linux 5.0
Debian Debian Linux 6.0
Canonical Ubuntu Linux 10.10
Canonical Ubuntu Linux 11.04
Canonical Ubuntu Linux 11.10
Canonical Ubuntu Linux 10.04
2 Github repositories
1 Article
7.5
CVSSv2
CVE-2011-3556
Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and previous versions, 5.0 Update 31 and previous versions, 1.4.2_33 and previous versions, and JRockit R28.1.4 and previous versions allows remote malicious users to ...
Sun Jre 1.7.0
Sun Jdk 1.7.0
Oracle Jrockit
Oracle Jrockit R28.0.1
Oracle Jrockit R28.0.0
Oracle Jrockit R28.1.3
Oracle Jrockit R28.1.1
Oracle Jrockit R28.1.0
Oracle Jrockit R28.0.2
Sun Jre 1.6.0
Sun Jdk 1.6.0
Sun Jdk
Sun Jre
Sun Jre 1.5.0
Sun Jdk 1.5.0
Sun Jre 1.4.2 32
Sun Jre 1.4.2 31
Sun Jre 1.4.2 30
Sun Jre 1.4.2 23
Sun Jre 1.4.2 22
Sun Jre 1.4.2 15
Sun Jre 1.4.2 14
1 EDB exploit
1 Github repository
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-33572
CVE-2024-24919
CVE-2024-0230
CVE-2024-32714
HTML injection
local file inclusion
CVE-2024-31098
CVE-2024-31244
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
NEXT »