Most recent entries from all

certa-2011-avi-079 — Une vulnérabilité affecte plusieurs implémentations de Java, elle permet un déni de service à distance.

2026-10-03T02:13:36.629065+00:00

certa-2011-avi-079

EUVD-2026-120690

2026-10-03T02:13:36.629107+00:00

EUVD-2026-120690

fkie_cve-2010-4476

2026-10-03T02:13:36.629122+00:00

The Double.parseDouble method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.

GHSA-gvgc-rxmh-5hvw — Apache Tomcat affected by infinite loop in Double.parseDouble method in Java Runtime Environment

2026-10-03T02:13:36.629152+00:00

Affected: Maven: org.apache.tomcat:tomcat

The `Double.parseDouble` method in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a crafted string that triggers an infinite loop of estimations during conversion to a double-precision binary floating-point number, as demonstrated using 2.2250738585072012e-308.

Apache Tomcat introduced workarounds to avoid being affected by this issue in versions 7.0.7, 6.0.32, and 5.5.33.

gsd-2010-4476

2026-10-03T02:13:36.629183+00:00

gsd-2010-4476

jvndb-2011-000016

2026-10-03T02:13:36.629196+00:00

IBM DB2 contains a denial-of-service (DoS) vulnerability. IBM DB2 contains a denial-of-service (DoS) vulnerability due to an issue in Java Runtime Environment (JRE).

RHSA-2011:0210 — Red Hat Security Advisory: jbossweb security update

2026-10-03T02:13:36.629213+00:00

JDK Double.parseDouble Denial-Of-Service