oracle jdk 1.9.0 vulnerabilities and exploits

(subscribe to this query)

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Javadoc). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Java SE. Succ...

Oracle Jdk 1.6.0 Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 1.9.0 Oracle Jre 1.6.0 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Oracle Jre 1.9.0 Netapp Active Iq Unified Manager Netapp Cloud Backup -Netapp E-series Santricity Management Plug-ins -Netapp E-series Santricity Os Controller

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JAXP). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network acc...

Oracle Jdk 1.6.0 Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 1.9.0 Oracle Jre 1.6.0 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Oracle Jre 1.9.0 Redhat Satellite 5.8 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Eus 7.4

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144; JRockit: R28.3.15. Easily exploitable vulnerability allows unauthent...

Oracle Jdk 1.6.0 Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 1.9.0 Oracle Jre 1.6.0 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Oracle Jre 1.9.0 Redhat Satellite 5.8 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Eus 7.4

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Hotspot). Supported versions that are affected are Java SE: 6u161, 7u151, 8u144 and 9; Java SE Embedded: 8u144. Easily exploitable vulnerability allows unauthenticated attacker with network ...

Oracle Jdk 1.6.0 Oracle Jdk 1.7.0 Oracle Jdk 1.8.0 Oracle Jdk 1.9.0 Oracle Jre 1.6.0 Oracle Jre 1.7.0 Oracle Jre 1.8.0 Oracle Jre 1.9.0 Redhat Satellite 5.8 Redhat Enterprise Linux Desktop 6.0 Redhat Enterprise Linux Desktop 7.0 Redhat Enterprise Linux Eus 7.4

1 Article

XStream is a simple library to serialize objects to XML and back again. In affected versions this vulnerability may allow a remote malicious user to load and execute arbitrary code from a remote host only by manipulating the processed input stream. A user is only affected if usin...

Xstream Project Xstream Debian Debian Linux 9.0 Debian Debian Linux 10.0 Debian Debian Linux 11.0 Fedoraproject Fedora 33 Fedoraproject Fedora 34 Fedoraproject Fedora 35 Netapp Snapmanager -Oracle Business Activity Monitoring 12.2.1.4.0 Oracle Commerce Guided Search 11.3.2 Oracle Communications Billing And Revenue Management Elastic Charging Engine 11.3 Oracle Communications Billing And Revenue Management Elastic Charging Engine 12.0

In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionality it is possible for a user to provide a specially crafted SpEL as a routing-expression that may result in remote code execution and access to local resources.

Vmware Spring Cloud Function Oracle Banking Branch 14.5 Oracle Banking Cash Management 14.5 Oracle Banking Corporate Lending Process Management 14.5 Oracle Banking Credit Facilities Process Management 14.5 Oracle Banking Electronic Data Exchange For Corporates 14.5 Oracle Banking Liquidity Management 14.2 Oracle Banking Liquidity Management 14.5 Oracle Banking Origination 14.5 Oracle Banking Supply Chain Finance 14.5 Oracle Banking Trade Finance Process Management 14.5 Oracle Banking Virtual Account Management 14.5

43 Github repositories3 Articles

A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) via data binding. The specific exploit requires the application to run on Tomcat as a WAR deployment. If the application is deployed as a Spring Boot executable jar, i.e....

Vmware Spring Framework Cisco Cx Cloud Agent Oracle Communications Cloud Native Core Automated Test Suite 1.9.0 Oracle Communications Cloud Native Core Automated Test Suite 22.1.0 Oracle Communications Cloud Native Core Console 1.9.0 Oracle Communications Cloud Native Core Console 22.1.0 Oracle Communications Cloud Native Core Network Exposure Function 22.1.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 1.10.0 Oracle Communications Cloud Native Core Network Function Cloud Native Environment 22.1.0 Oracle Communications Cloud Native Core Network Repository Function 1.15.0 Oracle Communications Cloud Native Core Network Repository Function 22.1.0 Oracle Communications Cloud Native Core Network Slice Selection Function 1.8.0

128 Github repositories7 Articles

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

Redhat Hibernate Validator Redhat Hibernate Validator 6.1.0 Redhat Fuse 1.0 Redhat Jboss Data Grid -Redhat Jboss Enterprise Application Platform -Redhat Openshift Application Runtimes -Redhat Single Sign-on -Redhat Jboss Enterprise Application Platform 7.2 Redhat Jboss Enterprise Application Platform 7.3 Netapp Active Iq Unified Manager -Netapp Management Services For Element Software And Netapp Hci -Netapp Snapcenter Plug-in -

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook