Oracle / Java
179 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2018-2790 | OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969) | LOW | 3.1 | Apr 19, 2018 |
| CVE-2018-2678 | OpenJDK: unbounded memory allocation in BasicAttributes deserialization (JNDI, 8191142) | MEDIUM | 4.3 | Jan 18, 2018 |
| CVE-2018-2677 | OpenJDK: unbounded memory allocation during deserialization (AWT, 8190289) | MEDIUM | 4.3 | Jan 18, 2018 |
| CVE-2018-2675 | Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanc… | LOW | 3.7 | Jan 18, 2018 |
| CVE-2018-2663 | OpenJDK: ArrayBlockingQueue deserialization to an inconsistent state (Libraries, 8189284) | MEDIUM | 4.3 | Jan 18, 2018 |
| CVE-2018-2657 | JDK: unspecified vulnerability fixed in 6u181 and 7u171 (Serialization) | MEDIUM | 5.3 | Jan 18, 2018 |
| CVE-2018-2641 | OpenJDK: GTK library loading use-after-free (AWT, 8185325) | MEDIUM | 6.1 | Jan 18, 2018 |
| CVE-2018-2639 | JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment) | HIGH | 8.3 | Jan 18, 2018 |
| CVE-2018-2638 | JDK: unspecified vulnerability fixed in 8u161 and 9.0.4 (Deployment) | HIGH | 8.3 | Jan 18, 2018 |
| CVE-2018-2637 | OpenJDK: SingleEntryRegistry incorrect setup of deserialization filter (JMX, 8186998) | HIGH | 7.4 | Jan 18, 2018 |
| CVE-2018-2634 | OpenJDK: use of global credentials for HTTP/SPNEGO (JGSS, 8186600) | MEDIUM | 6.8 | Jan 18, 2018 |
| CVE-2018-2633 | OpenJDK: LDAPCertStore insecure handling of LDAP referrals (JNDI, 8186606) | HIGH | 8.3 | Jan 18, 2018 |
| CVE-2018-2618 | OpenJDK: insufficient strength of key agreement (JCE, 8185292) | MEDIUM | 5.9 | Jan 18, 2018 |
| CVE-2018-2603 | OpenJDK: DerValue unbounded memory allocation (Libraries, 8182387) | MEDIUM | 5.3 | Jan 18, 2018 |
| CVE-2018-2602 | OpenJDK: loading of classes from untrusted locations (I18n, 8182601) | MEDIUM | 4.5 | Jan 18, 2018 |
| CVE-2018-2599 | OpenJDK: DnsClient missing source port randomization (JNDI, 8182125) | MEDIUM | 4.8 | Jan 18, 2018 |
| CVE-2018-2588 | OpenJDK: LdapLoginModule insufficient username encoding in LDAP query (LDAP, 8178449) | MEDIUM | 4.3 | Jan 18, 2018 |
| CVE-2018-2582 | OpenJDK: insufficient validation of the invokeinterface instruction (Hotspot, 8174962) | MEDIUM | 6.5 | Jan 18, 2018 |
| CVE-2018-2579 | OpenJDK: unsynchronized access to encryption key data (Libraries, 8172525) | LOW | 3.7 | Jan 18, 2018 |
| CVE-2017-10388 | OpenJDK: use of unprotected sname in Kerberos client (Libraries, 8178794) | HIGH | 7.5 | Oct 19, 2017 |
| CVE-2017-10386 | Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanc… | MEDIUM | 4.8 | Oct 19, 2017 |
| CVE-2017-10380 | Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanc… | MEDIUM | 4.7 | Oct 19, 2017 |
| CVE-2017-10357 | OpenJDK: unbounded memory allocation in ObjectInputStream deserialization (Serialization, 8181597) | MEDIUM | 5.3 | Oct 19, 2017 |
| CVE-2017-10356 | OpenJDK: weak protection of key stores against brute forcing (Security, 8181692) | MEDIUM | 6.2 | Oct 19, 2017 |
| CVE-2017-10355 | OpenJDK: no default network operations timeouts in FtpClient (Networking, 8181612) | MEDIUM | 5.3 | Oct 19, 2017 |
Showing 101 to 125 of 179 CVEs