Oracle / Openjdk
98 CVEs
| CVE ID | Description | Severity | CVSS | Published |
|---|---|---|---|---|
| CVE-2024-20952 | OpenJDK: RSA padding issue and timing side-channel attack against TLS (8317547) | HIGH | 7.4 | Jan 16, 2024 |
| CVE-2023-21968 | OpenJDK: missing check for slash characters in URI-to-path conversion (8298667) | LOW | 3.7 | Apr 18, 2023 |
| CVE-2023-21967 | OpenJDK: certificate validation issue in TLS session negotiation (8298310) | MEDIUM | 5.9 | Apr 18, 2023 |
| CVE-2023-21954 | OpenJDK: incorrect enqueue of references in garbage collector (8298191) | MEDIUM | 5.9 | Apr 18, 2023 |
| CVE-2023-21939 | OpenJDK: Swing HTML parsing issue (8296832) | MEDIUM | 5.3 | Apr 18, 2023 |
| CVE-2023-21938 | OpenJDK: incorrect handling of NULL characters in ProcessBuilder (8295304) | LOW | 3.7 | Apr 18, 2023 |
| CVE-2023-21937 | OpenJDK: missing string checks for NULL characters (8296622) | LOW | 3.7 | Apr 18, 2023 |
| CVE-2023-21930 | OpenJDK: improper connection handling during TLS handshake (8294474) | HIGH | 7.4 | Apr 18, 2023 |
| CVE-2022-34169 | Apache Xalan Java XSLT library is vulnerable to an integer truncation issue when processing malicious XSLT stylesheets | HIGH | 7.5 | Jul 19, 2022 |
| CVE-2022-21541 | OpenJDK: improper restriction of MethodHandle.invokeBasic() (Hotspot, 8281866) | MEDIUM | 5.9 | Jul 19, 2022 |
| CVE-2022-21540 | OpenJDK: class compilation issue (Hotspot, 8281859) | MEDIUM | 5.3 | Jul 19, 2022 |
| CVE-2022-21476 | OpenJDK: Defective secure validation in Apache Santuario (Libraries, 8278008) | HIGH | 7.5 | Apr 19, 2022 |
| CVE-2022-21366 | OpenJDK: Excessive memory allocation in TIFF*Decompressor (ImageIO, 8274096) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21365 | OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21360 | OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21349 | OpenJDK: Unaligned memory access in ContextualGlyphSubstProc2 (2D, 8273748) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21341 | OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21340 | OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21305 | OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21299 | OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21296 | OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21294 | OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21293 | OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21291 | OpenJDK: Incorrect marking of writeable fields (Hotspot, 8270386) | MEDIUM | 5.3 | Jan 19, 2022 |
| CVE-2022-21283 | OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813) | MEDIUM | 5.3 | Jan 19, 2022 |
Showing 1 to 25 of 98 CVEs