CVE-2020-2585
- EPSS 1.16%
- Veröffentlicht 15.01.2020 17:15:19
- Zuletzt bearbeitet 21.11.2024 05:25:38
Vulnerability in the Java SE product of Oracle Java SE (component: JavaFX). The supported version that is affected is Java SE: 8u231. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to com...
CVE-2019-13118
- EPSS 1.21%
- Veröffentlicht 01.07.2019 02:15:09
- Zuletzt bearbeitet 21.11.2024 04:24:13
In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.
CVE-2019-11068
- EPSS 1.01%
- Veröffentlicht 10.04.2019 20:29:01
- Zuletzt bearbeitet 21.11.2024 04:20:28
libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is su...
CVE-2019-7317
- EPSS 0.99%
- Veröffentlicht 04.02.2019 08:29:00
- Zuletzt bearbeitet 21.11.2024 04:48:00
png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.
CVE-2018-2973
- EPSS 0.12%
- Veröffentlicht 18.07.2018 13:29:03
- Zuletzt bearbeitet 21.11.2024 04:04:52
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: JSSE). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Difficult to exploit vulnerability allows unau...
CVE-2018-2964
- EPSS 0.84%
- Veröffentlicht 18.07.2018 13:29:03
- Zuletzt bearbeitet 21.11.2024 04:04:51
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). Supported versions that are affected are Java SE: 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multip...
CVE-2018-2952
- EPSS 0.06%
- Veröffentlicht 18.07.2018 13:29:02
- Zuletzt bearbeitet 21.11.2024 04:04:49
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Concurrency). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171; JRockit: R28.3.18. Difficult t...
- EPSS 0.66%
- Veröffentlicht 18.07.2018 13:29:02
- Zuletzt bearbeitet 21.11.2024 04:04:47
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Java DB). Supported versions that are affected are Java SE: 6u191, 7u181 and 8u172. Difficult to exploit vulnerability allows unauthenticated attacker with network access via mul...
CVE-2018-2940
- EPSS 0.22%
- Veröffentlicht 18.07.2018 13:29:02
- Zuletzt bearbeitet 21.11.2024 04:04:47
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u191, 7u181, 8u172 and 10.0.1; Java SE Embedded: 8u171. Easily exploitable vulnerability allows u...
CVE-2018-2941
- EPSS 1.12%
- Veröffentlicht 18.07.2018 13:29:02
- Zuletzt bearbeitet 21.11.2024 04:04:47
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: JavaFX). Supported versions that are affected are Java SE: 7u181, 8u172 and 10.0.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access via mul...