OP
Product
Openjdk
by Oracle · last CVE Jan 16, 2024
On CISA KEVExploited in the wildRansomware-linked
98
CVEs
1
On KEV
8.6
Max CVSS
0
New 30D
Severity mix
Critical 0High 14Medium 46Low 28
Watch

Add Openjdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-14803
5.3
3%
Oct 21
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14621
5.3
4%
Jul 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-2830
5.3
5%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2020-2781
5.3
5%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2019-13117
5.3
6%
Jul 1
In numbers.c in libxslt 1.1.33, an xsl:number with certain format strings could lead to a uninitialized read in xsltNumberFormatInsertNumbers
Affected: 8
CVE-2020-14556
4.8
3%
Jul 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 8; 8; 8; 8; 8; 8; +34 more
CVE-2020-2800
4.8
3%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Lightweight HTTP Server)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2020-2767
4.8
2%
Apr 15
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2020-2593
4.8
3%
Jan 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)
Affected: 7; 7; 7; 7; 8; 8; +23 more
CVE-2021-2369
4.3
3%
Jul 21
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Library)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14792
4.2
2%
Oct 21
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Hotspot)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2023-21968
3.7
1%
Apr 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; 8; +34 more
CVE-2023-21938
3.7
1%
Apr 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries)
Affected: before 8; 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; +34 more
CVE-2023-21937
3.7
1%
Apr 18
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)
Affected: before 8; 11 through 11.0.18; 17 through 17.0.6; 8; 8; 8; +34 more
CVE-2022-21248
3.7
4%
Jan 19
Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization)
Affected: 11 through 11.0.13; 13 through 13.0.9; 15 through 15.0.5; 7; 7; 7; +34 more
CVE-2021-35603
3.7
4%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE)
Affected: 7; 8; 11.0.12; 17
CVE-2020-14797
3.7
2%
Oct 21
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14782
3.7
2%
Oct 21
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14781
3.7
2%
Oct 21
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JNDI)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14779
3.7
4%
Oct 21
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14581
3.7
3%
Jul 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14579
3.7
4%
Jul 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14578
3.7
4%
Jul 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14577
3.7
3%
Jul 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JSSE)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-2778
3.7
2%
Apr 15
Vulnerability in the Java SE product of Oracle Java SE (component: JSSE)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2020-2773
3.7
4%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2020-2757
3.7
4%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2020-2756
3.7
4%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2020-2755
3.7
4%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2020-2754
3.7
4%
Apr 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting)
Affected: 11 through 11.0.6; 13 through 13.0.2; 7; 7; 7; 7; +34 more
CVE-2020-2659
3.7
4%
Jan 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking)
Affected: 7; 7; 7; 7; 8; 8; +15 more
CVE-2020-2654
3.7
4%
Jan 15
Vulnerability in the Java SE product of Oracle Java SE (component: Libraries)
Affected: 7; 7; 7; 7; 8; 8; +23 more
CVE-2020-2590
3.7
3%
Jan 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security)
Affected: 7; 7; 7; 7; 8; 8; +23 more
CVE-2020-2583
3.7
4%
Jan 15
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization)
Affected: 7; 7; 7; 7; 8; 8; +23 more
CVE-2021-35588
3.1
4%
Oct 20
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot)
Affected: 7; 8
CVE-2021-2341
3.1
4%
Jul 21
Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14798
3.1
3%
Oct 21
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2020-14796
3.1
2%
Oct 21
Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries)
Affected: 7; 7; 7; 7; 7; 7; +34 more
CVE-2014-8873
–
5%
Nov 9
A .desktop file in the Debian openjdk-7 package 7u79-2.5.5-1~deb8u1 includes a MIME type registration that is added to /etc/mailcap by mime-support, which allows remote attackers…
Affected: 1.7.0
CVE-2014-2483
–
5%
Jul 17
Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via…
Affected: 1.7.0
CVE-2014-2405
–
2%
May 14
Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than…
Affected: 1.6.0
CVE-2014-0462
–
2%
May 14
Unspecified vulnerability in OpenJDK 6 before 6b31 on Debian GNU/Linux and Ubuntu 12.04 LTS and 10.04 LTS has unknown impact and attack vectors, a different vulnerability than…
Affected: 1.6.0
CVE-2014-1876
–
0%
Feb 10
The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE…
Affected: 1.6.0; 1.7.0; 1.8.0
CVE-2013-2461
–
7%
Jun 18
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier; the Oracle JRockit component in…
Affected: 1.7.0
CVE-2013-0169
–
36%
Feb 8
The TLS protocol 1.1 and 1.2 and the DTLS protocol 1.0 and 1.2, as used in OpenSSL, OpenJDK, PolarSSL, and other products, do not properly consider timing side-channel attacks on…
Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more
CVE-2012-5373
–
2%
Nov 28
Oracle Java SE 7 and earlier, and OpenJDK 7 and earlier, computes hash values without properly restricting the ability to trigger hash collisions predictably, which allows…
Affected: through 1.7.0
CVE-2012-2739
–
3%
Nov 28
Oracle Java SE before 7 Update 6, and OpenJDK 7 before 7u6 build 12 and 8 before build 39, computes hash values without restricting the ability to trigger hash collisions…
Affected: through 1.7.0; 1.6.0; 1.8.0
CVE-2009-0581
–
3%
Mar 23
Memory leak in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allows context-dependent attackers to cause a denial of service…
Affected: through 7
Page 2 of 2 · 98 total