JR
Product
Jre
On CISA KEVExploited in the wildRansomware-linked
423
CVEs
2
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 0Medium 1Low 0
Watch
Add Jre to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2006-0617 | – | Feb 9 | Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 5 and earlier allow remote attackers to bypass Java sandbox security and obtain privileges via unspecified… Affected: through 1.5.0 |
| CVE-2006-0616 | – | Feb 9 | Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 4 and earlier allows remote attackers to bypass Java sandbox security and obtain privileges via unspecified vectors… Affected: through 1.5.0 |
| CVE-2006-0615 | – | Feb 9 | Multiple unspecified vulnerabilities in Sun Java JDK and JRE 5.0 Update 4 and earlier, SDK and JRE 1.4.x through 1.4.2_09 allow remote attackers to bypass Java sandbox security… Affected: 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; 1.4.2_5; +9 more |
| CVE-2006-0614 | – | Feb 9 | Unspecified vulnerability in Sun Java JDK and JRE 5.0 Update 3 and earlier, SDK and JRE 1.3.x through 1.3.1_16 and 1.4.x through 1.4.2_08 allows remote attackers to bypass Java… Affected: 1.3.0 through 1.3.1_16; 1.4.0 through 1.4.2_8; 5.0; 5.0; 5.0; 5.0 |
| CVE-2005-3907 | – | Nov 30 | Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or… Affected: 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; +20 more |
| CVE-2005-3906 | – | Nov 30 | Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java… Affected: 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; +20 more |
| CVE-2005-3905 | – | Nov 30 | Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to… Affected: 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; +20 more |
| CVE-2005-3904 | – | Nov 30 | Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox… Affected: 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; +20 more |
| CVE-2005-3583 | – | Nov 16 | (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of… Affected: 1.4.2 |
| CVE-2005-0471 | – | Mar 14 | Sun Java JRE 1.1.x through 1.4.x writes temporary files with long filenames that become predictable on a file system that uses 8.3 style short names, which allows remote attackers… Affected: 1.1; 1.2; 1.3.0; 1.4; 1.5.0 |
| CVE-2004-1029 | – | Mar 1 | The Sun Java Plugin capability in Java 2 Runtime Environment (JRE) 1.4.2_01, 1.4.2_04, and possibly earlier versions, does not properly restrict access between Javascript and Java… Affected: 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; 1.3.0; +34 more |
| CVE-2004-2540 | – | Dec 31 | readObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0 through 1.4.2_05 allows remote attackers to cause a denial of service (JVM… Affected: 1.4; 1.4; 1.4; 1.4.0_01; 1.4.0_01; 1.4.0_02; +34 more |
| CVE-2004-1503 | – | Dec 31 | Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java… Affected: 1.4.2; 1.5.0 |
| CVE-2004-0651 | – | Aug 6 | Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang) Affected: 1.4.2; 1.4.2_3 |
| CVE-2003-1301 | – | Dec 31 | Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers, allows remote attackers to cause a denial of service… Affected: 1.4.2; 1.4.2_1; 1.4.2_2; 1.4.2_3; 1.4.2_4; 1.4.2_5; +11 more |
| CVE-2003-1156 | – | Dec 31 | Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as… Affected: 1.4.2; 1.4.2 |
| CVE-2003-1123 | – | Dec 31 | Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the… Affected: 1.2.2; 1.2.2; 1.2.2; 1.2.2; 1.2.2; 1.2.2_003; +28 more |
| CVE-2003-0896 | – | Nov 17 | The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox… Affected: through 1.4.1 |
| CVE-2002-2072 | – | Dec 31 | java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that… Affected: 1.2.2; 1.3.1 |
| CVE-2002-0076 | – | Mar 19 | Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as… Affected: 1.1.8; 1.1.8; 1.2.2; 1.3.0; 1.3.1; 1.3.1 |
| CVE-2002-0058 | – | Mar 15 | Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet… Affected: 1.1.8; 1.1.8; 1.2.2; 1.3.0 |
| CVE-2001-1480 | – | Dec 31 | Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard Affected: 1.2.2; 1.2.2_003; 1.2.2_004; 1.2.2_005; 1.2.2_006; 1.2.2_007; +8 more |
| CVE-2001-1008 | – | Aug 31 | Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauthorized activities via an applet that… Affected: 1.3.0 |