JR
Product
Jre
On CISA KEVExploited in the wildRansomware-linked
423
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch
Add Jre to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-3549 | – | Oct 19 | Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-3548 | – | Oct 19 | Unspecified vulnerability in the Java Naming and Directory Interface (JNDI) component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-3541 | – | Oct 19 | Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0886 | – | Apr 20 | Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect… Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +4 more |
| CVE-2010-0850 | – | Apr 1 | Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability… Affected: through 1.3.1_27; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; +29 more |
| CVE-2010-0849 | – | Apr 1 | Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0848 | – | Apr 1 | Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0847 | – | Apr 1 | Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0846 | – | Apr 1 | Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0845 | – | Apr 1 | Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0844 | – | Apr 1 | Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0843 | – | Apr 1 | Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect… Affected: 1.3.1_27; 1.4.2_25; 1.5.0; 1.6.0 |
| CVE-2010-0842 | – | Apr 1 | Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0841 | – | Apr 1 | Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0839 | – | Apr 1 | Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0838 | – | Apr 1 | Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality,… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0837 | – | Apr 1 | Unspecified vulnerability in the Pack200 component in Oracle Java SE and Java for Business 6 Update 18, 5.0, Update, and 23 allows remote attackers to affect confidentiality,… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0095 | – | Apr 1 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0094 | – | Apr 1 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0093 | – | Apr 1 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0092 | – | Apr 1 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, and 5.0 Update 23 allows remote attackers to affect… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0091 | – | Apr 1 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0090 | – | Apr 1 | Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18 allows remote attackers to affect integrity and… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +11 more |
| CVE-2010-0089 | – | Apr 1 | Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0088 | – | Apr 1 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0087 | – | Apr 1 | Unspecified vulnerability in the Java Web Start, Java Plug-in component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0085 | – | Apr 1 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0084 | – | Apr 1 | Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, and 1.4.2_25 allows remote attackers to… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2010-0082 | – | Apr 1 | Unspecified vulnerability in the HotSpot Server component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +34 more |
| CVE-2009-3886 | – | Nov 9 | The Java Web Start implementation in Sun Java SE 6 before Update 17 does not properly handle the interaction between a signed JAR file and a JNLP (1) application or (2) applet,… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +10 more |
| CVE-2009-3885 | – | Nov 9 | Sun Java SE 5.0 before Update 22 and 6 before Update 17 on Windows allows remote attackers to cause a denial of service via a BMP file containing a link to a UNC share pathname… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +32 more |
| CVE-2009-3884 | – | Nov 9 | The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +31 more |
| CVE-2009-3883 | – | Nov 9 | Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17,… Affected: through 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +33 more |
| CVE-2009-3882 | – | Nov 9 | Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack… Affected: through 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +33 more |
| CVE-2009-3881 | – | Nov 9 | Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +31 more |
| CVE-2009-3880 | – | Nov 9 | The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +31 more |
| CVE-2009-3879 | – | Nov 9 | Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +31 more |
| CVE-2009-3729 | – | Nov 9 | Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before Update 17 allows remote attackers to cause a denial of… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +31 more |
| CVE-2009-3728 | – | Nov 9 | Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK,… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +31 more |
| CVE-2009-3877 | – | Nov 5 | Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before… Affected: 1.4.2_1; 1.4.2_2; 1.4.2_02; 1.4.2_03; 1.4.2_3; 1.4.2_4; +34 more |
| CVE-2009-3876 | – | Nov 5 | Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before… Affected: 1.4.2_1; 1.4.2_2; 1.4.2_02; 1.4.2_03; 1.4.2_3; 1.4.2_4; +34 more |
| CVE-2009-3875 | – | Nov 5 | The MessageDigest.isEqual function in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before… Affected: 1.4.2_1; 1.4.2_2; 1.4.2_02; 1.4.2_03; 1.4.2_3; 1.4.2_4; +34 more |
| CVE-2009-3874 | – | Nov 5 | Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-3873 | – | Nov 5 | The JPEG Image Writer in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to gain… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-3872 | – | Nov 5 | Unspecified vulnerability in the JPEG JFIF Decoder in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-3871 | – | Nov 5 | Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22,… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-3869 | – | Nov 5 | Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22,… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-3868 | – | Nov 5 | Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 does not properly parse… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-3867 | – | Nov 5 | Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-3866 | – | Nov 5 | The Java Web Start Installer in Sun Java SE in JDK and JRE 6 before Update 17 does not properly use security model permissions when removing installer extensions, which allows… Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +10 more |