Java Se

5 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-21496 MEDIUM PATCH This Month

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Java Oracle Graalvm Java Se +14

NVD

CVSS 3.1

5.3

EPSS

2.8%

CVE-2022-21443 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Denial Of Service Java Oracle Graalvm Java Se +14

NVD

CVSS 3.1

3.7

EPSS

2.7%

CVE-2021-21349 Maven HIGH POC PATCH THREAT This Week

XStream is a Java library to serialize objects to XML and back again. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Deserialization Java Oncommand Insight Activemq Jmeter +14

NVD GitHub

CVSS 3.1

8.6

EPSS

46.8%

CVE-2019-10219 Maven MEDIUM POC PATCH This Month

A vulnerability was found in Hibernate-Validator. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Hibernate Validator Fuse Jboss Data Grid Jboss Enterprise Application Platform +184

NVD GitHub

CVSS 3.1

6.1

EPSS

2.2%

CVE-2019-7317 MEDIUM POC PATCH This Month

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Use After Free Information Disclosure Memory Corruption Libpng Debian Linux +30

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

0.6%

CVE-2022-21496

EPSS 3% CVSS 5.3

MEDIUM PATCH This Month

Authentication Bypass Java Oracle +16

NVD

CVE-2022-21443

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Denial Of Service Java Oracle +16

NVD

CVE-2021-21349 Maven

EPSS 47% CVSS 8.6

HIGH POC PATCH THREAT This Week

Deserialization Java Oncommand Insight +16

NVD GitHub

CVE-2019-10219 Maven

EPSS 2% CVSS 6.1

MEDIUM POC PATCH This Month

XSS Hibernate Validator Fuse +186

NVD GitHub

CVE-2019-7317

EPSS 1% CVSS 5.3

MEDIUM POC PATCH This Month

Use After Free Information Disclosure Memory Corruption +32

NVD GitHub VulDB