Oracle / Java
179 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2017-10115 | OpenJDK: DSA implementation timing attack (JCE, 8175106) | HIGH | 7.5 | Aug 8, 2017 |
| CVE-2017-10114 | JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX) | HIGH | 8.3 | Aug 8, 2017 |
| CVE-2017-10111 | OpenJDK: incorrect range checks in LambdaFormEditor (Libraries, 8184185) | CRITICAL | 9.6 | Aug 8, 2017 |
| CVE-2017-10110 | OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098) | CRITICAL | 9.6 | Aug 8, 2017 |
| CVE-2017-10109 | OpenJDK: unbounded memory allocation in CodeSource deserialization (Serialization, 8174113) | MEDIUM | 5.3 | Aug 8, 2017 |
| CVE-2017-10108 | OpenJDK: unbounded memory allocation in BasicAttribute deserialization (Serialization, 8174105) | MEDIUM | 5.3 | Aug 8, 2017 |
| CVE-2017-10107 | OpenJDK: insufficient access control checks in ActivationID (RMI, 8173697) | CRITICAL | 9.6 | Aug 8, 2017 |
| CVE-2017-10105 | JDK: unspecified vulnerability fixed in 6u161, 7u151, and 8u141 (Deployment) | MEDIUM | 4.3 | Aug 8, 2017 |
| CVE-2017-10104 | Vulnerability in the Java Advanced Management Console component of Oracle Java SE (subcomponent: Server). The supported version that is affected is Java Advanc… | HIGH | 7.4 | Aug 8, 2017 |
| CVE-2017-10102 | OpenJDK: incorrect handling of references in DGC (RMI, 8163958) | CRITICAL | 9.0 | Aug 8, 2017 |
| CVE-2017-10101 | OpenJDK: unrestricted access to com.sun.org.apache.xml.internal.resolver (JAXP, 8173286) | CRITICAL | 9.6 | Aug 8, 2017 |
| CVE-2017-10096 | OpenJDK: insufficient access control checks in XML transformations (JAXP, 8172469) | CRITICAL | 9.6 | Aug 8, 2017 |
| CVE-2017-10090 | OpenJDK: insufficient access control checks in AsynchronousChannelGroupImpl (8172465, Libraries) | CRITICAL | 9.6 | Aug 8, 2017 |
| CVE-2017-10089 | OpenJDK: insufficient access control checks in ServiceRegistry (ImageIO, 8172461) | CRITICAL | 9.6 | Aug 8, 2017 |
| CVE-2017-10087 | OpenJDK: insufficient access control checks in ThreadPoolExecutor (Libraries, 8172204) | CRITICAL | 9.6 | Aug 8, 2017 |
| CVE-2017-10086 | JDK: unspecified vulnerability fixed in 7u151 and 8u141 (JavaFX) | CRITICAL | 9.6 | Aug 8, 2017 |
| CVE-2017-10081 | OpenJDK: incorrect bracket processing in function signature handling (Hotspot, 8170966) | MEDIUM | 4.3 | Aug 8, 2017 |
| CVE-2017-10078 | OpenJDK: Nashorn incompletely blocking access to Java APIs (Scripting, 8171539) | HIGH | 8.1 | Aug 8, 2017 |
| CVE-2017-10074 | OpenJDK: integer overflows in range check loop predicates (Hotspot, 8173770) | HIGH | 8.3 | Aug 8, 2017 |
| CVE-2017-10067 | OpenJDK: JAR verifier incorrect handling of missing digest (Security, 8169392) | HIGH | 7.5 | Aug 8, 2017 |
| CVE-2017-10053 | OpenJDK: reading of unprocessed image data in JPEGImageReader (2D, 8169209) | MEDIUM | 5.3 | Aug 8, 2017 |
| CVE-2017-3544 | OpenJDK: newline injection in the SMTP client (Networking, 8171533) | LOW | 3.7 | Apr 24, 2017 |
| CVE-2017-3539 | OpenJDK: MD5 allowed for jar verification (Security, 8171121) | LOW | 3.1 | Apr 24, 2017 |
| CVE-2017-3533 | OpenJDK: newline injection in the FTP client (Networking, 8170222) | LOW | 3.7 | Apr 24, 2017 |
| CVE-2017-3526 | OpenJDK: incomplete XML parse tree size enforcement (JAXP, 8169011) | MEDIUM | 5.9 | Apr 24, 2017 |
Showing 151 to 175 of 179 CVEs