VYPR

Openjdk

by Oracle Corporation

Source repositories

CVEs (106)

  • CVE-2013-0431MedKEVJan 31, 2013
    Openjdk
    OpenJDK
    risk 0.63cvss 5.3epss 0.90

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different…

  • CVE-2020-14583HigJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2805HigApr 15, 2020
    Fedoraproject
    Fedora
    risk 0.54cvss 8.3epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2803HigApr 15, 2020
    Fedoraproject
    Fedora
    risk 0.54cvss 8.3epss 0.06

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u251, 8u241, 11.0.6 and 14; Java SE Embedded: 8u241. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2020-2604HigJan 15, 2020
    McAfee
    Epolicy Orchestrator
    risk 0.53cvss 8.1epss 0.05

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker…

  • CVE-2021-20264HigOct 6, 2021
    Oracle Corporation
    Openjdk
    risk 0.51cvss 7.8epss 0.00

    An insecure modification flaw in the /etc/passwd file was found in the openjdk-1.8 and openjdk-11 containers. This flaw allows an attacker with access to the container to modify the /etc/passwd and escalate their privileges. The highest threat from this vulnerability is to…

  • CVE-2022-21476HigApr 19, 2022
    NetApp
    Hci Management Node
    risk 0.49cvss 7.5epss 0.04

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 7u331, 8u321, 11.0.14, 17.0.2, 18; Oracle GraalVM Enterprise Edition: 20.3.5, 21.3.1 and 22.0.0.2.…

  • CVE-2021-35560HigOct 20, 2021
    NetApp
    Oncommand Insight
    risk 0.49cvss 7.5epss 0.05

    Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u301. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE.…

  • CVE-2021-2388HigJul 21, 2021
    Oracle Corporation
    GraalVM Enterprise Edition
    risk 0.49cvss 7.5epss 0.04

    Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 8u291, 11.0.11, 16.0.1; Oracle GraalVM Enterprise Edition: 20.3.2 and 21.1.0. Difficult to exploit vulnerability…

  • CVE-2020-2816HigApr 15, 2020
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.49cvss 7.5epss 0.03

    Vulnerability in the Java SE product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 11.0.6 and 14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Java SE. Successful attacks of…

  • CVE-2024-20952HigJan 16, 2024
    NetApp
    Oncommand Insight
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u391, 8u391-perf, 11.0.21, 17.0.9, 21.0.1; Oracle GraalVM for JDK: 17.0.9,…

  • CVE-2023-21930HigApr 18, 2023
    NetApp
    Oncommand Insight
    risk 0.48cvss 7.4epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u361, 8u361-perf, 11.0.18, 17.0.6, 20; Oracle GraalVM Enterprise Edition: 20.3.9, 21.3.5 and 22.3.1.…

  • CVE-2020-14593HigJul 15, 2020
    Fedoraproject
    Fedora
    risk 0.48cvss 7.4epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u261, 8u251, 11.0.7 and 14.0.1; Java SE Embedded: 8u251. Easily exploitable vulnerability allows unauthenticated attacker with network…

  • CVE-2021-32553HigJun 12, 2021
    Openjdk
    OpenJDK
    risk 0.47cvss 7.3epss 0.00

    It was discovered that read_file() in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users.

  • CVE-2020-2601MedJan 15, 2020
    NetApp
    Steelstore Cloud Integrated Storage
    risk 0.45cvss 6.8epss 0.04

    Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u241, 8u231, 11.0.5 and 13.0.1; Java SE Embedded: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with…

  • CVE-2022-34169HigJul 19, 2022
    Apache
    Xalan Java
    risk 0.44cvss 7.5epss 0.81

    The Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets. This can be used to corrupt Java class files generated by the internal XSLTC compiler and execute arbitrary Java bytecode. Users are recommended to update…

  • CVE-2021-35567MedOct 20, 2021
    Fedoraproject
    Fedora
    risk 0.44cvss 6.8epss 0.03

    Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 8u301, 11.0.12, 17; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Easily exploitable vulnerability allows…

  • CVE-2022-21541MedJul 19, 2022
    Fedoraproject
    Fedora
    risk 0.39cvss 5.9epss 0.03

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 7u343, 8u333, 11.0.15.1, 17.0.3.1, 18.0.1.1; Oracle GraalVM Enterprise Edition: 20.3.6, 21.3.2 and…

  • CVE-2021-35550MedOct 20, 2021
    Fedoraproject
    Fedora
    risk 0.39cvss 5.9epss 0.07

    Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.12; Oracle GraalVM Enterprise Edition: 20.3.3 and 21.2.0. Difficult to exploit vulnerability allows…

  • CVE-2021-3537MedMay 14, 2021
    Xmlsoft
    Libxml2
    risk 0.39cvss 5.9epss 0.03

    A vulnerability found in libxml2 in versions before 2.9.11 shows that it did not propagate errors while parsing XML mixed content, causing a NULL dereference. If an untrusted XML document was parsed in recovery mode and post-validated, the flaw could be used to crash the…

Page 1 of 6