p PatchFirst

PatchFirst · Latest vulnerabilities

openjdk-6 vulnerabilities · Page 2

Vulnerabilities published for openjdk-6 in the last 30 days: 0. Listed in the KEV catalogue: 0.

Filter vulnerabilities
Clear filters

Vulnerabilities: 103

  1. CVE-2016-0483

    Not ratedEPSS 14.71%Fix available

    CVE-2016-0483

    Unspecified vulnerability in Oracle Java SE 6u105, 7u91, and 8u66; Java SE Embedded 8u65; and JRockit R28.3.8 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the previous information is from the January 2016 CPU. Oracle has not commented on third-party claims that this is a heap-based buffer overflow in the readImage function, which allows remote attackers to execute arbitrary code via crafted image data.

    • Update to 6b38-1.13.10-0ubuntu0.14.04.1
    Published Updated
  2. CVE-2015-7575

    Medium · CVSS 5.9EPSS 2.9%Fix available

    CVE-2015-7575

    Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not reject MD5 signatures in Server Key Exchange messages in TLS 1.2 Handshake Protocol traffic, which makes it easier for man-in-the-middle attackers to spoof servers by triggering a collision.

    • Update to 6b38-1.13.10-0ubuntu0.14.04.1
    Published Updated

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →