29 docs tagged with "Java_Programming_language"

Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted J

The Extended Control List (ECL) feature of the Java Virtual Machine (JVM) in Lotus Notes Client R5 a

Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer

Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive

Multiple cross-site scripting (XSS) vulnerabilities in Sun Java System Identity Manager 6.0 SP1 thro

/idm/help/index.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows rem

Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 throu

Multiple vulnerabilities in the JRockit component in BEA Product Suite R27.6.5 using JRE/JDK 1.4.2,

Heap-based buffer overflow in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attacke

Unspecified vulnerability in Sun Java System Web Server 7.0 Update 6 on Linux allows remote attacker

The ExceptionDelegator component in Apache Struts before 2.2.3.1 interprets parameter values as OGNL

The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whit

The ParameterInterceptor component in Apache Struts before 2.3.1.1 does not prevent access to public

The processInvocation function in org.jboss.as.ejb3.security.AuthorizationInterceptor in JBoss Enter

JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) before 6.0.1, when using role-based a

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and ear

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1

Multiple unspecified vulnerabilities in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1

Unspecified vulnerability in the JRE component in IBM Java 7 SR2 and earlier, Java 6.0.1 SR3 and ear

Multiple vulnerabilities in Oracle Java 7 before Update 11 allow remote attackers to execute arbitra

Apache Santuario XML Security for Java before 1.5.6, when applying Transforms, allows remote attacke

Pivotal Spring Framework through 5.3.16 suffers from a potential remote code execution (RCE) issue i

Apache Thrift Java client library versions 0.5.0 through 0.11.0 can bypass SASL negotiation isComple

FasterXML jackson-databind 2.x before 2.9.7 might allow attackers to conduct external XML entity (XX

Cybozu Remote Service 3.0.0 to 3.1.0 allows remote authenticated attackers to upload and execute Jav

Directory traversal vulnerability in Cybozu Remote Service 3.0.0 to 3.1.8 allows remote attackers to

A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests fo

There exists a race condition between the deletion of the temporary file and the creation of the tem

In SmartBear Collaborator Server through 13.3.13302, use of the Google Web Toolkit (GWT) API introdu