OP
Product
Openjdk
by Sun · last CVE Nov 9, 2009
16
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch

Add Openjdk to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2009-3884
–
3%
Nov 9
The TimeZone.getTimeZone method in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, allows remote attackers to determine the existence of local files via…
Affected: All versions, or not specified
CVE-2009-3883
–
2%
Nov 9
Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17,…
Affected: All versions, or not specified
CVE-2009-3882
–
2%
Nov 9
Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack…
Affected: All versions, or not specified
CVE-2009-3881
–
3%
Nov 9
Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to…
Affected: All versions, or not specified
CVE-2009-3880
–
2%
Nov 9
The Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not properly restrict the objects…
Affected: All versions, or not specified
CVE-2009-3879
–
2%
Nov 9
Multiple unspecified vulnerabilities in the (1) X11 and (2) Win32GraphicsDevice subsystems in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown…
Affected: All versions, or not specified
CVE-2009-3728
–
4%
Nov 9
Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK,…
Affected: All versions, or not specified
CVE-2009-2690
–
3%
Aug 10
The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain…
Affected: All versions, or not specified
CVE-2009-2689
–
3%
Aug 10
JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecified object types, which allows…
Affected: All versions, or not specified
CVE-2009-2476
–
3%
Aug 10
The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which allows context-dependent…
Affected: All versions, or not specified
CVE-2009-2475
–
2%
Aug 10
Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static…
Affected: All versions, or not specified
CVE-2009-1896
–
3%
Aug 10
The Java Web Start framework in IcedTea in OpenJDK before 1.6.0.0-20.b16.fc10 on Fedora 10, and before 1.6.0.0-27.b16.fc11 on Fedora 11, trusts an entire application when at least…
Affected: through 1.6.0.0
CVE-2009-0794
–
3%
Apr 13
Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used in OpenJDK 1.6.0.0 and other…
Affected: 1.6.0.0
CVE-2009-0793
–
5%
Apr 9
cmsxform.c in LittleCMS (aka lcms or liblcms) 1.18, as used in OpenJDK and other products, allows remote attackers to cause a denial of service (NULL pointer dereference and…
Affected: 6
CVE-2009-0733
–
6%
Mar 23
Multiple stack-based buffer overflows in the ReadSetOfCurves function in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow…
Affected: through 7
CVE-2009-0723
–
5%
Mar 23
Multiple integer overflows in LittleCMS (aka lcms or liblcms) before 1.18beta2, as used in Firefox 3.1beta, OpenJDK, and GIMP, allow context-dependent attackers to execute…
Affected: through 7
Showing 16