Icedtea (Redhat) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 120 known versions, newest CVE from 2017-04-24. Vendor: Redhat.
CVEs of Icedtea
- CVE-2017-3544 - CVSS 3.7 (low), 2017-04-24: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
- CVE-2017-3539 - CVSS 3.1 (low), 2017-04-24: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security). Supported versions that are affected are Java SE: 6u141,…
- CVE-2017-3512 - CVSS 8.3 (high), 2017-04-24: Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions that are affected are Java SE: 7u131 and 8u121. Difficult to…
- CVE-2017-3533 - CVSS 3.7 (low), 2017-04-24: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java…
- CVE-2015-5235 - CVSS 4.3 (medium), 2015-10-09: IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the…
- CVE-2015-5234 - CVSS 6.8 (medium), 2015-10-09: IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the…
- CVE-2011-0025 - CVSS 6.8 (medium), 2011-02-04: IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially signed" or (2)…
- CVE-2010-4351 - CVSS 6.8 (medium), 2011-01-20: The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission…
- CVE-2010-3860 - CVSS 5 (medium), 2010-12-08: IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows…
