Oracle

Jdk

779 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.1

CVE-2019-2745

  • EPSS 0.08%
  • Veröffentlicht 23.07.2019 23:15:38
  • Zuletzt bearbeitet 21.11.2024 04:41:28

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 7u221, 8u212 and 11.0.3. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrast...

5.3

CVE-2019-13118

  • EPSS 1.03%
  • Veröffentlicht 01.07.2019 02:15:09
  • Zuletzt bearbeitet 21.11.2024 04:24:13

In numbers.c in libxslt 1.1.33, a type holding grouping characters of an xsl:number instruction was too narrow and an invalid character/length combination could be passed to xsltNumberFormatDecimal, leading to a read of uninitialized stack data.

8.1

CVE-2019-2697

  • EPSS 4.16%
  • Veröffentlicht 23.04.2019 19:32:56
  • Zuletzt bearbeitet 21.11.2024 04:41:23

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protoc...

8.1

CVE-2019-2698

  • EPSS 7.17%
  • Veröffentlicht 23.04.2019 19:32:56
  • Zuletzt bearbeitet 21.11.2024 04:41:23

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: 2D). Supported versions that are affected are Java SE: 7u211 and 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protoc...

9

CVE-2019-2699

  • EPSS 1.16%
  • Veröffentlicht 23.04.2019 19:32:56
  • Zuletzt bearbeitet 21.11.2024 04:41:23

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Windows DLL). The supported version that is affected is Java SE: 8u202. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protoc...

5.9

CVE-2019-2684

  • EPSS 1.96%
  • Veröffentlicht 23.04.2019 19:32:55
  • Zuletzt bearbeitet 21.11.2024 04:41:21

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Difficult to exploit vulnerability allows unauthen...

7.5

CVE-2019-2602

  • EPSS 0.17%
  • Veröffentlicht 23.04.2019 19:32:50
  • Zuletzt bearbeitet 21.11.2024 04:41:11

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u211, 8u202, 11.0.2 and 12; Java SE Embedded: 8u201. Easily exploitable vulnerability allows unau...

9.8

CVE-2019-11068

  • EPSS 0.99%
  • Veröffentlicht 10.04.2019 20:29:01
  • Zuletzt bearbeitet 21.11.2024 04:20:28

libxslt through 1.1.33 allows bypass of a protection mechanism because callers of xsltCheckRead and xsltCheckWrite permit access even upon receiving a -1 error code. xsltCheckRead can return -1 for a crafted URL that is not actually invalid and is su...

5.3

CVE-2019-7317

Exploit
  • EPSS 0.57%
  • Veröffentlicht 04.02.2019 08:29:00
  • Zuletzt bearbeitet 21.11.2024 04:48:00

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.

3.1

CVE-2019-2449

  • EPSS 2.42%
  • Veröffentlicht 16.01.2019 19:30:32
  • Zuletzt bearbeitet 21.11.2024 04:40:53

Vulnerability in the Java SE component of Oracle Java SE (subcomponent: Deployment). The supported version that is affected is Java SE: 8u192. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protoco...