JR
Product
Jre
On CISA KEVExploited in the wildRansomware-linked
423
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch
Add Jre to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2009-3865 | – | Nov 5 | The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary… Affected: 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +10 more |
| CVE-2009-3864 | – | Nov 5 | The Java Update functionality in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before Update 17, when a non-English version… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +31 more |
| CVE-2009-2676 | – | Aug 5 | Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Update 19 and earlier; and Java SE… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-2675 | – | Aug 5 | Integer overflow in the unpack200 utility in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows context-dependent… Affected: through 6; 5.0; 5.0; 5.0; 5.0; 5.0; +25 more |
| CVE-2009-2674 | – | Aug 5 | Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute… Affected: 6; 6; 6; 6; 6; 6; +7 more |
| CVE-2009-2673 | – | Aug 5 | The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass… Affected: through 6; 5.0; 5.0; 5.0; 5.0; 5.0; +25 more |
| CVE-2009-2672 | – | Aug 5 | The proxy mechanism implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to… Affected: through 6; 5.0; 5.0; 5.0; 5.0; 5.0; +25 more |
| CVE-2009-2671 | – | Aug 5 | The SOCKS proxy implementation in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to discover… Affected: through 6; 5.0; 5.0; 5.0; 5.0; 5.0; +25 more |
| CVE-2009-2670 | – | Aug 5 | The audio system in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, does not prevent access to java.lang.System… Affected: through 6; 5.0; 5.0; 5.0; 5.0; 5.0; +25 more |
| CVE-2009-1719 | – | Jun 16 | The Aqua Look and Feel for Java implementation in Java 1.5 on Mac OS X 10.5 allows remote attackers to execute arbitrary code via a call to the undocumented… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +13 more |
| CVE-2004-2764 | – | Jun 2 | Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and unprivileged servlets to gain… Affected: 1.4.0; 1.4.0_01; 1.4.0_01; 1.4.0_01; 1.4.0_01; 1.4.0_02; +34 more |
| CVE-2009-1672 | – | May 18 | The Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allows remote attackers to (1) execute arbitrary code via… Affected: 6 |
| CVE-2009-1671 | – | May 18 | Multiple buffer overflows in the Deployment Toolkit ActiveX control in deploytk.dll 6.0.130.3 in Sun Java SE Runtime Environment (aka JRE) 6 Update 13 allow remote attackers to… Affected: 6 |
| CVE-2009-1106 | – | Mar 25 | The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote… Affected: 1.6.0; 1.6.0; 1.6.0 |
| CVE-2009-1101 | – | Mar 25 | Unspecified vulnerability in the lightweight HTTP server implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +5 more |
| CVE-2009-1100 | – | Mar 25 | Multiple unspecified vulnerabilities in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allow remote… Affected: through 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +23 more |
| CVE-2009-1098 | – | Mar 25 | Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-1097 | – | Mar 25 | Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary… Affected: through 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; 1.6.0; +5 more |
| CVE-2009-1096 | – | Mar 25 | Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to… Affected: through 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +23 more |
| CVE-2009-1095 | – | Mar 25 | Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers… Affected: through 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +23 more |
| CVE-2009-1094 | – | Mar 25 | Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2009-1093 | – | Mar 25 | LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.1_24 and… Affected: through 1.5.0; through 1.6.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +34 more |
| CVE-2008-5360 | – | Dec 5 | Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2008-5359 | – | Dec 5 | Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2008-5358 | – | Dec 5 | Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory… Affected: through 6; 6; 6; 6; 6; 6; +4 more |
| CVE-2008-5357 | – | Dec 5 | Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2008-5356 | – | Dec 5 | Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5355 | – | Dec 5 | The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5354 | – | Dec 5 | Stack-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5353 | – | Dec 5 | The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5352 | – | Dec 5 | Integer overflow in the JAR unpacking utility (unpack200) in the unpack library (unpack.dll) in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK… Affected: through 5.0; through 6; 5.0; 5.0; 5.0; 5.0; +14 more |
| CVE-2008-5351 | – | Dec 5 | Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier accepts UTF-8 encodings… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5350 | – | Dec 5 | Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5349 | – | Dec 5 | Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows remote attackers to… Affected: through 5.0; through 6; 5.0; 5.0; 5.0; 5.0; +14 more |
| CVE-2008-5348 | – | Dec 5 | Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5347 | – | Dec 5 | Multiple unspecified vulnerabilities in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier allow untrusted applets and applications to gain privileges via… Affected: through 6; 6; 6; 6; 6; 6; +4 more |
| CVE-2008-5346 | – | Dec 5 | Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2008-5345 | – | Dec 5 | Unspecified vulnerability in Java Runtime Environment (JRE) with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier;… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2008-5344 | – | Dec 5 | Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5343 | – | Dec 5 | Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allows remote… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5342 | – | Dec 5 | Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5341 | – | Dec 5 | Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5340 | – | Dec 5 | Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-5339 | – | Dec 5 | Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-2086 | – | Dec 5 | Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to… Affected: through 1.4.2_18; through 5.0; through 6; 1.4.2_1; 1.4.2_2; 1.4.2_3; +34 more |
| CVE-2008-3115 | – | Jul 9 | Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which… Affected: through 6; 5.0; 5.0; 5.0; 5.0; 5.0; +10 more |
| CVE-2008-3114 | – | Jul 9 | Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent… Affected: through 1.4.2_17; through 5.0; through 6; 1.4.2; 1.4.2_01; 1.4.2_02; +33 more |
| CVE-2008-3113 | – | Jul 9 | Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary… Affected: through 1.4.2_17; through 5.0; 1.4.2; 1.4.2_01; 1.4.2_02; 1.4.2_03; +27 more |
| CVE-2008-3112 | – | Jul 9 | Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote… Affected: through 1.4.2_17; through 5.0; through 6; 1.4.2; 1.4.2_01; 1.4.2_02; +33 more |
| CVE-2008-3111 | – | Jul 9 | Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allow context-dependent… Affected: 1.4; 1.4.2_01; 1.4.2_02; 1.4.2_03; 1.4.2_04; 1.4.2_05; +30 more |