CVSS: 9.8EPSS: 10%CPEs: 1EXPL: 1CVE-2003-0896 – Sun Java Virtual Machine 1.x - Slash Path Security Model Circumvention
https://notcve.org/view.php?id=CVE-2003-0896
25 Oct 2003 — The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method. El método loadClass de la clase sun.applet.AppletClassLoader en la Máquina Virtual de Java (JVM) en Sun SDK y JRE 1.4.1_03 y anteriores... • https://www.exploit-db.com/exploits/23276 •
CVSS: 7.5EPSS: 2%CPEs: 2EXPL: 3CVE-2002-2072 – Sun Java Virtual Machine 1.2.2/1.3.1 - Segmentation Violation
https://notcve.org/view.php?id=CVE-2002-2072
31 Dec 2002 — java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged method with a null argument. • https://www.exploit-db.com/exploits/21259 •
CVSS: 9.8EPSS: 0%CPEs: 17EXPL: 0CVE-2002-0076
https://notcve.org/view.php?id=CVE-2002-0076
19 Mar 2002 — Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, (2) Netscape 6.2.1 and earlier, and possibly other implementations that use vulnerable versions of SDK or JDK, aka a variant of the "Virtual Machine Verifier" vulnerability. El verificador de bytecode del "Java Runtime Enviroment" (entorno de eje... • http://sunsolve.sun.com/pub-cgi/retrieve.pl?doctype=coll&doc=secbull/218 •
CVSS: 8.1EPSS: 0%CPEs: 11EXPL: 0CVE-2002-0058
https://notcve.org/view.php?id=CVE-2002-0058
07 Mar 2002 — Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and earlier, (2) Microsoft VM build 3802 and earlier as used in Internet Explorer 4.x and 5.x, and possibly other implementations that use vulnerable versions of SDK or JDK. Esta vulnerabilidad en el "Java Runtime Enviroment" (entorno de e... • http://marc.info/?l=bugtraq&m=101534535304228&w=2 •
CVSS: 9.1EPSS: 0%CPEs: 24EXPL: 1CVE-2001-1480
https://notcve.org/view.php?id=CVE-2001-1480
31 Dec 2001 — Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard. • http://cert.uni-stuttgart.de/archive/bugtraq/2001/10/msg00120.html •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 1CVE-2001-1008
https://notcve.org/view.php?id=CVE-2001-1008
31 Aug 2001 — Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that has been signed by an expired certificate. • http://archives.neohapsis.com/archives/bugtraq/2001-08/0359.html •