Most recent entries from all

bdu:2021-02491

Withdrawn: BELL-CVE-2021-2163 — CVE-2021-2163 does not affect BellSoft software

Withdrawn by the publisher.

BIT-java-2021-2163

Affected: Bitnami: java

Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).

certfr-2021-avi-297 — De multiples vulnérabilités ont été découvertes dans Oracle Java SE. Elles permettent à un attaquant de provoquer un dé…

certfr-2021-avi-297

EUVD-2026-188872

fkie_cve-2021-2163

GHSA-6mm5-r7wc-h7pm

gsd-2021-2163

OESA-2021-1213 — openjdk-1.8.0 security update

Affected: openEuler:20.03-LTS-SP1: openjdk-1.8.0

The OpenJDK runtime environment 8. Security Fix(es): Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition accessible data. Note: This vulnerability applies to Java deployments that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. CVSS 3.1 Base Score 5.3 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N).(CVE-2021-2163) Vulnerability in the Java SE, Java SE Embedded, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u291, 8u281, 11.0.10, 16; Java SE Embedded: 8u281; Oracle GraalVM Enterprise Edition: 19.3.5, 20.3.1.2 and 21.0.0.2. Difficult to exploit vulnerability allows unauthenticated attac…

openSUSE-SU-2021:0719-1 — Security update for java-11-openjdk

Security update for java-11-openjdk

RHSA-2021:1299 — Red Hat Security Advisory: java-1.8.0-openjdk security update

OpenJDK: Incomplete enforcement of JAR signing disabled algorithms (Libraries, 8249906)

SUSE-SU-2021:1314-1 — Security update for java-11-openjdk

Security update for java-11-openjdk

UBUNTU-CVE-2021-2163

Affected: Ubuntu:16.04:LTS: openjdk-8, Ubuntu:16.04:LTS: icedtea-web, Ubuntu:16.04:LTS: openjdk-9, Ubuntu:18.04:LTS: openjdk-8, Ubuntu:18.04:LTS: openjdk-lts, Ubuntu:18.04:LTS: icedtea-web, Ubuntu:20.04:LTS: openjdk-8, Ubuntu:20.04:LTS: openjdk-lts, Ubuntu:20.04:LTS: icedtea-web, Ubuntu:20.04:LTS: openjdk-13 and 4 more

WID-SEC-W-2022-1303 — Oracle Java SE: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Java SE und Oracle GraalVM ausnutzen, um die Verfügbarkeit, Vertraulichkeit und Integrität zu gefährden.