Veille CVE

Recherche « Suse linux enterprise java »

4 CVE

Critique 2 Élevée 1 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Suse linux enterprise java » ✕
  1. CVE-2015-4902 5.3 Moyenne Exploitée

    Oracle jdk · Oracle jre · Redhat satellite · Redhat enterprise linux desktop

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.

  2. CVE-2015-4495 8.8 Élevée Exploitée

    Mozilla firefox · Mozilla firefox os · Oracle solaris · Canonical ubuntu linux

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.

  3. CVE-2012-0507 9.8 Critique Exploitée Rançongiciel

    Sun jre · Oracle jre · Debian debian linux · Suse linux enterprise desktop

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and 5.0 Update 33 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Concurrency. NOTE: the previous information was obtained from the February 2012 Oracle CPU. Oracle has not commented on claims from a downstream vendor and third party researchers that this issue occurs because the AtomicReferenceArray class implementation does not ensure that the array is of the Object[] type, which allows attackers to cause a denial of service (JVM crash) or bypass Java sandbox restrictions. NOTE: this issue was originally mapped to CVE-2011-3571, but that identifier was already assigned to a different issue.

  4. CVE-2011-3544 9.8 Critique Exploitée

    Oracle jdk · Oracle jre · Canonical ubuntu linux · Redhat satellite with embedded oracle

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.