Oracle / Java SE
14 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-21147 | OpenJDK: RangeCheckElimination array index overflow (8323231) | HIGH | 7.4 | Jul 16, 2024 |
| CVE-2024-21140 | OpenJDK: Range Check Elimination (RCE) pre-loop limit overflow (8320548) | MEDIUM | 4.8 | Jul 16, 2024 |
| CVE-2021-41041 | java-11-openj9,java-1_8_0-openj9: unverified methods can be invoked using MethodHandles | MEDIUM | 5.3 | Apr 27, 2022 |
| CVE-2022-21496 | OpenJDK: URI parsing inconsistencies (JNDI, 8278972) | MEDIUM | 5.3 | Apr 19, 2022 |
| CVE-2022-21443 | OpenJDK: Missing check for negative ObjectIdentifier (Libraries, 8275151) | LOW | 3.7 | Apr 19, 2022 |
| CVE-2021-35578 | OpenJDK: Unexpected exception raised during TLS handshake (JSSE, 8267729) | MEDIUM | 5.3 | Oct 20, 2021 |
| CVE-2021-35560 | JDK: unspecified vulnerability fixed in 8u311 (Deployment) | HIGH | 7.5 | Oct 20, 2021 |
| CVE-2021-35559 | OpenJDK: Excessive memory allocation in RTFReader (Swing, 8265580) | MEDIUM | 5.3 | Oct 20, 2021 |
| CVE-2021-21349 | A Server-Side Forgery Request can be activated unmarshalling with XStream to access data streams from an arbitrary URL referencing a resource in an intranet or… | HIGH | 8.6 | Mar 22, 2021 |
| CVE-2019-10219 | hibernate-validator: safeHTML validator allows XSS | MEDIUM | 6.1 | Nov 8, 2019 |
| CVE-2019-7317 | libpng: use-after-free in png_image_free in png.c | MEDIUM | 5.3 | Feb 4, 2019 |
| CVE-2017-3289 | OpenJDK: insecure class construction (Hotspot, 8167104) | CRITICAL | 9.6 | Jan 27, 2017 |
| CVE-2017-3272 | OpenJDK: insufficient protected field access checks in atomic field updaters (Libraries, 8165344) | CRITICAL | 9.6 | Jan 27, 2017 |
| CVE-2017-3262 | JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control) | MEDIUM | 5.3 | Jan 27, 2017 |
| CVE-2017-3260 | OpenJDK: menu handling memory corruption (AWT, 8164143) | HIGH | 8.3 | Jan 27, 2017 |
| CVE-2017-3259 | JDK: unspecified vulnerability fixed in 6u141, 7u131, and 8u121 (Deployment) | LOW | 3.7 | Jan 27, 2017 |
| CVE-2017-3253 | OpenJDK: imageio PNGImageReader failed to honor ignoreMetadata for iTXt and zTXt chunks (2D, 8166988) | HIGH | 7.5 | Jan 27, 2017 |
| CVE-2017-3241 | OpenJDK: untrusted input deserialization in RMI registry and DCG (RMI, 8156802) | CRITICAL | 9.0 | Jan 27, 2017 |
| CVE-2017-3231 | OpenJDK: URLClassLoader insufficient access control checks (Networking, 8151934) | MEDIUM | 4.3 | Jan 27, 2017 |
| CVE-2016-8328 | JDK: unspecified vulnerability fixed in 8u121 (Java Mission Control) | LOW | 3.7 | Jan 27, 2017 |
| CVE-2016-5552 | OpenJDK: incorrect URL parsing in URLStreamHandler (Networking, 8167223) | MEDIUM | 5.3 | Jan 27, 2017 |
| CVE-2016-5549 | OpenJDK: ECDSA implementation timing attack (Libraries, 8168724) | MEDIUM | 6.5 | Jan 27, 2017 |
| CVE-2016-5548 | OpenJDK: DSA implementation timing attack (Libraries, 8168728) | MEDIUM | 6.5 | Jan 27, 2017 |
| CVE-2016-5547 | OpenJDK: missing ObjectIdentifier length check (Libraries, 8168705) | MEDIUM | 5.3 | Jan 27, 2017 |
| CVE-2016-5546 | OpenJDK: incorrect ECDSA signature extraction from the DER input (Libraries, 8168714) | HIGH | 7.5 | Jan 27, 2017 |
Showing 1 to 14 of 14 CVEs