Page 85 of 430 results (0.011 seconds)

CVSS: 7.5EPSS: 2%CPEs: 29EXPL: 0

Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets. • http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html http://secunia.com/advisories/17748 http://secunia.com/advisories/17847 http://secunia.com/advisories/18092 http://securitytracker.com/id?1015282 http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102050-1 http://www.kb.cert.org/vuls/id/355284 http://www.securityfocus.com/bid/15615 http://www.vupen.com/english/advisories/2005/2636 http://www.vupen.com/english/advisories/2005/2675 https: •

CVSS: 7.5EPSS: 7%CPEs: 29EXPL: 0

Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors. • http://lists.apple.com/archives/security-announce/2005/Nov/msg00004.html http://secunia.com/advisories/17748 http://secunia.com/advisories/17847 http://secunia.com/advisories/18092 http://secunia.com/advisories/18503 http://securitytracker.com/id?1015281 http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-102017-1 http://www-1.ibm.com/support/docview.wss?uid=swg21225628 http://www.kb.cert.org/vuls/id/931684 http://www.securityfocus.com/bid/15615 http://www. •

CVSS: 7.8EPSS: 27%CPEs: 4EXPL: 0

(1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss. • http://marc.info/?l=bugtraq&m=113113125121878&w=2 http://secunia.com/advisories/17478 http://securityreason.com/securityalert/143 http://www.securityfocus.com/bid/15312 •

CVSS: 5.0EPSS: 0%CPEs: 10EXPL: 0

Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers to write arbitrary files to known locations and facilitates the exploitation of vulnerabilities in applications that rely on unpredictable file names. • http://secunia.com/advisories/11070 http://secunia.com/secunia_research/2004-7/advisory http://www.kb.cert.org/vuls/id/544392 https://exchange.xforce.ibmcloud.com/vulnerabilities/19285 •

CVSS: 5.0EPSS: 27%CPEs: 84EXPL: 0

readObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0 through 1.4.2_05 allows remote attackers to cause a denial of service (JVM unresponsive) via crafted serialized data. • http://archives.neohapsis.com/archives/bugtraq/2005-04/0113.html http://secunia.com/advisories/13271 http://sunsolve.sun.com/searchproxy/document.do?assetkey=1-26-57707-1 https://exchange.xforce.ibmcloud.com/vulnerabilities/20027 •