JR
Product
Jre
On CISA KEVExploited in the wildRansomware-linked
423
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch
Add Jre to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2008-3110 | – | Jul 9 | Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive… Affected: through 6; 6; 6; 6; 6; 6 |
| CVE-2008-3109 | – | Jul 9 | Unspecified vulnerability in scripting language support in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain… Affected: through 6; 6; 6; 6; 6; 6 |
| CVE-2008-3108 | – | Jul 9 | Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x before 1.3.1_23 allows… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2008-3107 | – | Jul 9 | Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x… Affected: through 1.4.2_17; through 5.0; through 6; 1.4.2; 1.4.2_01; 1.4.2_02; +34 more |
| CVE-2008-3106 | – | Jul 9 | Unspecified vulnerability in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access… Affected: through 5.0; through 6; 5.0; 5.0; 5.0; 5.0; +15 more |
| CVE-2008-3105 | – | Jul 9 | Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or… Affected: through 6; 6; 6; 6; 6; 6 |
| CVE-2008-3104 | – | Jul 9 | Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.2_18,… Affected: 1.3.0; 1.3.1; 1.3.1; 1.3.1; 1.3.1; 1.3.1; +34 more |
| CVE-2008-3103 | – | Jul 9 | Unspecified vulnerability in the Java Management Extensions (JMX) management agent in Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0… Affected: through 5.0; through 6; 5.0; 5.0; 5.0; 5.0; +15 more |
| CVE-2008-1196 | – | Mar 6 | Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows… Affected: 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; 1.4.2_5; +31 more |
| CVE-2008-1195 | – | Mar 6 | Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote… Affected: 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; 1.4.2_5; +31 more |
| CVE-2008-1194 | – | Mar 6 | Multiple unspecified vulnerabilities in the color management library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to cause a… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +14 more |
| CVE-2008-1193 | – | Mar 6 | Unspecified vulnerability in Java Runtime Environment Image Parsing Library in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allows remote attackers to… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +14 more |
| CVE-2008-1192 | – | Mar 6 | Unspecified vulnerability in the Java Plug-in for Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier, and 1.3.1_21 and… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2008-1191 | – | Mar 6 | Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier allows remote attackers to create arbitrary files via an untrusted application, a different… Affected: through 6_update_4 |
| CVE-2008-1190 | – | Mar 6 | Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain… Affected: 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; 1.4.2_5; +31 more |
| CVE-2008-1189 | – | Mar 6 | Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute… Affected: 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; 1.4.2_5; +31 more |
| CVE-2008-1188 | – | Mar 6 | Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +14 more |
| CVE-2008-1187 | – | Mar 6 | Unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers… Affected: through 1.4.2_14; through 5.0; through 6; 1.4.2_01; 1.4.2_1; 1.4.2_02; +27 more |
| CVE-2008-1186 | – | Mar 6 | Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 5.0 Update 13 and earlier, and SDK/JRE 1.4.2_16 and earlier, allows remote… Affected: 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; 1.4.2_5; +25 more |
| CVE-2008-1185 | – | Mar 6 | Unspecified vulnerability in the Virtual Machine for Sun Java Runtime Environment (JRE) and JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier… Affected: 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; 1.4.2_5; +31 more |
| CVE-2008-0657 | – | Feb 7 | Multiple unspecified vulnerabilities in the Java Runtime Environment in Sun JDK and JRE 6 Update 1 and earlier, and 5.0 Update 13 and earlier, allow context-dependent attackers to… Affected: through 1.5.0; through 1.6.0; through 1.6.0 |
| CVE-2008-0628 | – | Feb 6 | The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the "external general entities" property is… Affected: through 1.6.0 |
| CVE-2007-0012 | – | Jan 9 | Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an object tag with an encoded applet and an undefined name… Affected: through 1.5.0; through 1.5.0; through 1.5.0; through 1.5.0; through 1.5.0; through 1.5.0; +1 more |
| CVE-2007-5689 | – | Oct 29 | The Java Virtual Machine (JVM) in Sun Java Runtime Environment (JRE) in SDK and JRE 1.3.x through 1.3.1_20 and 1.4.x through 1.4.2_15, and JDK and JRE 5.x through 5.0 Update 12… Affected: through 1.3.1; through 1.4.2; through 1.5.0; 1.3.0; 1.3.0; 1.3.1; +29 more |
| CVE-2007-5274 | – | Oct 8 | Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and… Affected: through 1.3.1; through 1.4.2; through 1.6.0; 1.3.0; 1.3.0; 1.3.1; +29 more |
| CVE-2007-5273 | – | Oct 8 | Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and… Affected: 1.3.0; 1.3.0; 1.3.1; 1.3.1; 1.3.1; 1.3.1; +29 more |
| CVE-2007-5240 | – | Oct 6 | Visual truncation vulnerability in the Java Runtime Environment in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier,… Affected: 1.3.0; 1.3.0; 1.3.1; 1.3.1; 1.3.1; 1.3.1; +29 more |
| CVE-2007-5239 | – | Oct 6 | Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and earlier does not… Affected: 1.3.0; 1.3.0; 1.3.1; 1.3.1; 1.3.1; 1.3.1; +29 more |
| CVE-2007-5238 | – | Oct 6 | Java Web Start in Sun JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier does not properly enforce access restrictions… Affected: 1.3.0; 1.3.0; 1.3.1; 1.3.1; 1.3.1; 1.3.1; +29 more |
| CVE-2007-5237 | – | Oct 6 | Java Web Start in Sun JDK and JRE 6 Update 2 and earlier does not properly enforce access restrictions for untrusted applications, which allows user-assisted remote attackers to… Affected: through 1.6.0; through 1.6.0 |
| CVE-2007-5236 | – | Oct 6 | Java Web Start in Sun JDK and JRE 5.0 Update 12 and earlier, and SDK and JRE 1.4.2_15 and earlier, on Windows does not properly enforce access restrictions for untrusted… Affected: 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; 1.4.2_5; +23 more |
| CVE-2007-5232 | – | Oct 5 | Sun Java Runtime Environment (JRE) in JDK and JRE 6 Update 2 and earlier, JDK and JRE 5.0 Update 12 and earlier, SDK and JRE 1.4.2_15 and earlier, and SDK and JRE 1.3.1_20 and… Affected: 1.3.0; 1.3.0; 1.3.1; 1.3.1; 1.3.1; 1.3.1; +29 more |
| CVE-2007-5019 | – | Sep 20 | Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the… Affected: 1.6.0_0; 1.6.0_10 |
| CVE-2007-4381 | – | Aug 17 | Unspecified vulnerability in the font parsing implementation in Sun JDK and JRE 5.0 Update 9 and earlier, and SDK and JRE 1.4.2_14 and earlier, allows remote attackers to perform… Affected: through 1.4.2 |
| CVE-2007-3922 | – | Jul 21 | Unspecified vulnerability in the Java Runtime Environment (JRE) Applet Class Loader in Sun JDK and JRE 5.0 Update 11 and earlier, 6 through 6 Update 1, and SDK and JRE 1.4.2_14… Affected: through 1.5.0; through 1.6.0 |
| CVE-2007-3716 | – | Jul 11 | The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows… Affected: through 6 |
| CVE-2007-3698 | – | Jul 11 | The Java Secure Socket Extension (JSSE) in Sun JDK and JRE 6 Update 1 and earlier, JDK and JRE 5.0 Updates 7 through 11, and SDK and JRE 1.4.2_11 through 1.4.2_14, when using JSSE… Affected: 1.4.2_11; 1.4.2_12; 1.4.2_13; 1.4.2_14; 1.5.0; 1.5.0; +4 more |
| CVE-2007-3655 | – | Jul 10 | Stack-based buffer overflow in javaws.exe in Sun Java Web Start in JRE 5.0 Update 11 and earlier, and 6.0 Update 1 and earlier, allows remote attackers to execute arbitrary code… Affected: 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; 1.5.0; +6 more |
| CVE-2007-3504 | – | Jun 30 | Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier,… Affected: through 1.4.2; through 1.5.0 |
| CVE-2007-2789 | – | May 22 | The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2007-2788 | – | May 22 | Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2007-2435 | – | May 2 | Sun Java Web Start in JDK and JRE 5.0 Update 10 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, allows remote attackers to perform unauthorized actions via an… Affected: through 1.4.2; through 1.5.0 |
| CVE-2007-0243 | – | Jan 17 | Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 and earlier allows applets to… Affected: through 1.3.1; 1.3.1; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; +15 more |
| CVE-2006-6745 | – | Dec 26 | Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System Development Kit (SDK) and JRE… Affected: 1.4.1; 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; +17 more |
| CVE-2006-6737 | – | Dec 26 | Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 5 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_10 and… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +29 more |
| CVE-2006-6736 | – | Dec 26 | Unspecified vulnerability in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 6 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +32 more |
| CVE-2006-6731 | – | Dec 26 | Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit (SDK) and JRE 1.4.2_12 and… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +33 more |
| CVE-2006-6009 | – | Nov 21 | Unspecified vulnerability in the Java Runtime Environment (JRE) Swing library in JDK and JRE 5.0 Update 7 and earlier allows attackers to obtain certain information via unknown… Affected: through 1.5.0; 1.5.0; 1.5.0; 1.5.0 |
| CVE-2006-5201 | – | Oct 10 | Multiple packages on Sun Solaris, including (1) NSS; (2) Java JDK and JRE 5.0 Update 8 and earlier, SDK and JRE 1.4.x up to 1.4.2_12, and SDK and JRE 1.3.x up to 1.3.1_19; (3)… Affected: 1.3.1; 1.3.1_2; 1.3.1_03; 1.3.1_04; 1.3.1_05; 1.3.1_06; +34 more |
| CVE-2006-2426 | – | May 17 | Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denial of service (disk… Affected: 1.5.0 |