Latest oracle java se Vulnerabilities

● CVE-2021-41041

In Eclipse Openj9 before version 0.32.0, Java 8 & 11 fail to throw the exception captured during bytecode verification when verification is triggered by a MethodHandle invocation, allowing unverified ...

Eclipse Openj9<0.32.0

Oracle Java SE=8

Oracle Java SE=11

● CVE-2022-21496

An unspecified vulnerability in Java SE related to the JNDI component could allow an unauthenticated attacker to cause no confidentiality impact, low integrity impact, and no availability impact.

redhat/java<11-openjdk-1:11.0.15.0.9-2.el7_9

redhat/java<1.8.0-openjdk-1:1.8.0.332.b09-1.el7_9

redhat/java<1.7.1-ibm-1:1.7.1.5.10-1jpp.1.el7

redhat/java<1.8.0-ibm-1:1.8.0.7.10-1jpp.1.el7

redhat/java<11-openjdk-1:11.0.15.0.9-2.el8_5

redhat/java<17-openjdk-1:17.0.3.0.6-2.el8_5

and 48 more

● CVE-2022-21443

An unspecified vulnerability in Java SE related to the Libraries component could allow an unauthenticated attacker to cause a denial of service resulting in a low availability impact using unknown att...

redhat/java<11-openjdk-1:11.0.15.0.9-2.el7_9

redhat/java<1.8.0-openjdk-1:1.8.0.332.b09-1.el7_9

redhat/java<1.7.1-ibm-1:1.7.1.5.10-1jpp.1.el7

redhat/java<1.8.0-ibm-1:1.8.0.7.10-1jpp.1.el7

redhat/java<11-openjdk-1:11.0.15.0.9-2.el8_5

redhat/java<17-openjdk-1:17.0.3.0.6-2.el8_5

and 50 more

● CVE-2021-32000

A UNIX Symbolic Link (Symlink) Following vulnerability in the clone-master-clean-up.sh script of clone-master-clean-up in SUSE Linux Enterprise Server 12 SP3, SUSE Linux Enterprise Server 15 SP1; open...

Oracle Java SE=12-sp3

Oracle Java SE=15-sp1

SUSE openSUSE Factory

● CVE-2021-2369

A flaw was found in the way the Library component of OpenJDK handled JAR files containing multiple MANIFEST.MF files. Such JAR files could cause signature verification process to return an incorrect ...

Oracle GraalVM=20.3.2

Oracle GraalVM=21.1.0

Oracle Java SE=7u301

Oracle Java SE=8u291

Oracle JDK=11.0.11

Oracle JDK=16.0.1

and 7 more

● CVE-2021-31998

A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their...

Opensuse Inn<=2.4.2-170.21.3.1

Oracle Java SE=11-sp3

Opensuse Inn<2.6.2

openSUSE Backports SLE=15.0-sp2

openSUSE Leap=15.2

● CVE-2021-21349

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability which may allow a remote attacker to request data from internal resourc...

debian/libxstream-java

redhat/xstream<1.4.16

Xstream Project Xstream<1.4.16

Debian Debian Linux=9.0

Debian Debian Linux=10.0

Debian Debian Linux=11.0

and 33 more

● CVE-2019-10219

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This...

redhat/eap7-apache-cxf<0:3.2.11-1.redhat_00001.1.el6ea

redhat/eap7-glassfish-jsf<0:2.3.5-6.SP3_redhat_00004.1.el6ea

redhat/eap7-hal-console<0:3.0.19-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate<0:5.3.14-1.Final_redhat_00001.1.el6ea

redhat/eap7-hibernate-validator<0:6.0.18-1.Final_redhat_00001.1.el6ea

redhat/eap7-jackson-annotations<0:2.9.10-1.redhat_00003.1.el6ea

and 779 more

● CVE-2019-7317

A use-after-free vulnerability was discovered in the png_image_free function in the libpng library. This could lead to denial of service or a potentially exploitable crash when a malformed image is pr...

debian/libpng1.6<=1.6.28-1<=1.6.36-3<=1.6.36-2

Mozilla Thunderbird<60.7

Mozilla Firefox ESR<60.7

Mozilla Firefox<67

Libpng Libpng>=1.6.0<1.6.37

Debian Debian Linux=8.0

and 99 more

Latest oracle java se Vulnerabilities

Company

Resources

Contact