Search CVE reports
371 – 380 of 477 results
Some fixes available 9 of 10
Unspecified vulnerability in the Java SE and Java SE Embedded components in Oracle Java SE 6u105, 7u91, and 8u66 and Java SE Embedded 8u65 allows remote attackers to affect integrity via unknown vectors related to Networking.
3 affected packages
openjdk-6, openjdk-7, openjdk-8
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openjdk-6 | — | — | — | — | — |
| openjdk-7 | — | — | — | — | — |
| openjdk-8 | — | — | — | — | — |
Some fixes available 38 of 44
Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol...
12 affected packages
firefox, gnutls26, gnutls28, mbedtls, nss...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| firefox | — | — | — | — | Fixed |
| gnutls26 | — | — | — | — | Not in release |
| gnutls28 | — | — | — | — | Not affected |
| mbedtls | — | — | — | — | Not affected |
| nss | — | — | — | — | Not affected |
| openjdk-6 | — | — | — | — | Not in release |
| openjdk-7 | — | — | — | — | Not in release |
| openjdk-8 | — | — | — | — | Not affected |
| openssl | — | — | — | — | Not affected |
| openssl098 | — | — | — | — | Not in release |
| polarssl | — | — | — | — | Not in release |
| thunderbird | — | — | — | — | Fixed |
Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before 1.4.18, 1.5.x before 1.5.25, and 1.6.x before 1.6.20 allows remote attackers to cause a denial of service...
7 affected packages
chromium-browser, firefox, libpng, openjdk-6, openjdk-7...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | — | — | — | — | — |
| firefox | — | — | — | — | — |
| libpng | — | — | — | — | — |
| openjdk-6 | — | — | — | — | — |
| openjdk-7 | — | — | — | — | — |
| openjdk-8 | — | — | — | — | — |
| thunderbird | — | — | — | — | — |
Some fixes available 1 of 38
The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protocol traffic to TCP port 7001,...
6 affected packages
libcommons-collections3-java, libcommons-collections4-java, libxalan2-java, openjdk-6, openjdk-7, openjdk-8
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| libcommons-collections3-java | — | Not affected | Not affected | Not affected | Not affected |
| libcommons-collections4-java | — | Not affected | Not affected | Not affected | Not affected |
| libxalan2-java | — | Not affected | Not affected | Not affected | Not affected |
| openjdk-6 | — | Not in release | Not in release | Not in release | Not in release |
| openjdk-7 | — | Not in release | Not in release | Not in release | Not in release |
| openjdk-8 | — | Ignored | Ignored | Ignored | Ignored |
Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote...
7 affected packages
chromium-browser, firefox, libpng, openjdk-6, openjdk-7...
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| chromium-browser | — | — | — | — | — |
| firefox | — | — | — | — | — |
| libpng | — | — | — | — | — |
| openjdk-6 | — | — | — | — | — |
| openjdk-7 | — | — | — | — | — |
| openjdk-8 | — | — | — | — | — |
| thunderbird | — | — | — | — | — |
A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers to execute arbitrary code via a JAR file.
4 affected packages
icedtea-web, openjdk-6, openjdk-7, openjdk-8
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| icedtea-web | — | — | — | — | — |
| openjdk-6 | — | — | — | — | — |
| openjdk-7 | — | — | — | — | — |
| openjdk-8 | — | — | — | — | — |
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.
3 affected packages
openjdk-6, openjdk-7, openjdk-8
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openjdk-6 | — | — | — | — | — |
| openjdk-7 | — | — | — | — | — |
| openjdk-8 | — | — | — | — | — |
Unspecified vulnerability in Oracle Java SE 7u85 and 8u60 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
3 affected packages
openjdk-6, openjdk-7, openjdk-8
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openjdk-6 | — | — | — | — | — |
| openjdk-7 | — | — | — | — | — |
| openjdk-8 | — | — | — | — | — |
Some fixes available 9 of 10
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803...
3 affected packages
openjdk-6, openjdk-7, openjdk-8
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openjdk-6 | — | — | — | — | — |
| openjdk-7 | — | — | — | — | — |
| openjdk-8 | — | — | — | — | — |
Some fixes available 9 of 10
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to RMI.
3 affected packages
openjdk-6, openjdk-7, openjdk-8
| Package | 26.04 LTS | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
|---|---|---|---|---|---|
| openjdk-6 | — | — | — | — | — |
| openjdk-7 | — | — | — | — | — |
| openjdk-8 | — | — | — | — | — |