Java Se

5 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-21496 Apr 19, 21:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JNDI). Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Authentication Bypass Java Debian Oracle Active Iq Unified Manager +17

NVD

CVSS 3.1

5.3

EPSS

2.8%

CVE-2022-21443 Apr 19, 21:15 LOW PATCH Monitor

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Rated low severity (CVSS 3.7), this vulnerability is remotely exploitable, no authentication required.

Denial Of Service Java Debian Oracle Active Iq Unified Manager +17

NVD

CVSS 3.1

3.7

EPSS

2.7%

CVE-2021-21349 Mar 23, 00:15 Maven HIGH POC PATCH THREAT Act Now

XStream is a Java library to serialize objects to XML and back again. Rated high severity (CVSS 8.6), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Apache Java Deserialization Debian Oracle +19

NVD GitHub

CVSS 3.1

8.6

EPSS

46.8%

Threat

4.6

CVE-2019-10219 Nov 08, 15:15 Maven MEDIUM POC PATCH This Month

A vulnerability was found in Hibernate-Validator. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

XSS Oracle Red Hat Active Iq Unified Manager Business Intelligence +187

NVD GitHub

CVSS 3.1

6.1

EPSS

2.2%

CVE-2019-7317 Feb 04, 08:29 MEDIUM POC PATCH This Month

png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.

Information Disclosure Use After Free Memory Corruption MySQL Debian +39

NVD GitHub VulDB

CVSS 3.1

5.3

EPSS

0.6%

CVE-2022-21496

EPSS 3% CVSS 5.3

MEDIUM PATCH This Month

Authentication Bypass Java Debian +19

NVD

CVE-2022-21443

EPSS 3% CVSS 3.7

LOW PATCH Monitor

Denial Of Service Java Debian +19

NVD

CVE-2021-21349 Maven

EPSS 47% 4.6 CVSS 8.6

HIGH POC PATCH THREAT Act Now

Apache Java Deserialization +21

NVD GitHub

CVE-2019-10219 Maven

EPSS 2% CVSS 6.1

MEDIUM POC PATCH This Month

XSS Oracle Red Hat +189

NVD GitHub

CVE-2019-7317

EPSS 1% CVSS 5.3

MEDIUM POC PATCH This Month

Information Disclosure Use After Free Memory Corruption +41

NVD GitHub VulDB