p PatchFirst

PatchFirst · Vulnérabilités récentes

Vulnérabilités de openjdk-7 · Page n° 5

Vulnérabilité publiée pour openjdk-7 au cours des 30 derniers jours : 0. Dans le catalogue KEV : 0.

Filtrer les vulnérabilités
Effacer les filtres

Vulnérabilités : 204

  1. CVE-2017-3252

    Moyenne · CVSS 5.8EPSS 1,93%Correctif disponible

    CVE-2017-3252

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: JAAS). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unaut

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.3
    Publication Mise à jour
  2. CVE-2017-3241

    Critique · CVSS 9EPSS 32,84%Code d’exploitation publicCorrectif disponible

    CVE-2017-3241

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Java SE, Java SE Embedded, JRockit. Note: This vulnerability can only be exploit

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.3
    Publication Mise à jour
  3. CVE-2017-3231

    Moyenne · CVSS 4.3EPSS 2,17%Correctif disponible

    CVE-2017-3231

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients ru

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.3
    Publication Mise à jour
  4. CVE-2016-5552

    Moyenne · CVSS 5.3EPSS 2,73%Correctif disponible

    CVE-2016-5552

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.3
    Publication Mise à jour
  5. CVE-2016-5548

    Moyenne · CVSS 6.5EPSS 2,97%Correctif disponible

    CVE-2016-5548

    Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, t

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.3
    Publication Mise à jour
  6. CVE-2016-5547

    Moyenne · CVSS 5.3EPSS 3,53%Correctif disponible

    CVE-2016-5547

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Java SE, Java SE Embedded, JRockit. Note: Applies to client and server deployment of Java. This vulnerability can be exploited through sandb

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.3
    Publication Mise à jour
  7. CVE-2016-5546

    Élevée · CVSS 7.5EPSS 3,17%Correctif disponible

    CVE-2016-5546

    Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Libraries). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Java SE, Java SE Embedded, JRockit accessible data. Note: Applies to client and server deployment of Java. This vulnerability can

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.3
    Publication Mise à jour
  8. CVE-2016-5582

    Critique · CVSS 9.6EPSS 5,44%Correctif disponible

    CVE-2016-5582

    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5573.

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.1
    Publication Mise à jour
  9. CVE-2016-5573

    Élevée · CVSS 8.3EPSS 3,26%Correctif disponible

    CVE-2016-5573

    Unspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Hotspot, a different vulnerability than CVE-2016-5582.

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.1
    Publication Mise à jour
  10. CVE-2016-2183

    Élevée · CVSS 7.5EPSS 94,7%Correctif disponible

    CVE-2016-2183

    The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of approximately four billion blocks, which makes it easier for remote attackers to obtain cleartext data via a birthday attack against a long-duration encrypted session, as demonstrated by an HTTPS session using Triple DES in CBC mode, aka a "Sweet32" attack.

    • Mettez à jour vers 7u121-2.6.8-1ubuntu0.14.04.3
    Publication Mise à jour
  11. CVE-2016-3610

    Critique · CVSS 9.6EPSS 5,93%Correctif disponible

    CVE-2016-3610

    Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3598.

    • Mettez à jour vers 7u111-2.6.7-0ubuntu0.14.04.3
    Publication Mise à jour
  12. CVE-2016-3598

    Critique · CVSS 9.6EPSS 6,69%Correctif disponible

    CVE-2016-3598

    Unspecified vulnerability in Oracle Java SE 8u92 and Java SE Embedded 8u91 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Libraries, a different vulnerability than CVE-2016-3610.

    • Mettez à jour vers 7u111-2.6.7-0ubuntu0.14.04.3
    Publication Mise à jour
  13. CVE-2016-3508

    Moyenne · CVSS 5.3EPSS 4,8%Correctif disponible

    CVE-2016-3508

    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3500.

    • Mettez à jour vers 7u111-2.6.7-0ubuntu0.14.04.3
    Publication Mise à jour
  14. CVE-2016-3500

    Moyenne · CVSS 5.3EPSS 4,8%Correctif disponible

    CVE-2016-3500

    Unspecified vulnerability in Oracle Java SE 6u115, 7u101, and 8u92; Java SE Embedded 8u91; and JRockit R28.3.10 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2016-3508.

    • Mettez à jour vers 7u111-2.6.7-0ubuntu0.14.04.3
    Publication Mise à jour

Vérifiez votre serveur

Comparez votre pile et les versions installées aux bases de vulnérabilités actuelles.

Vérifiez votre serveur →