| Apache Xalan Java XSLT library integer truncation issue when processing malicious XSLT stylesheetsCVE-2022-34169 · GHSA-9339-86WC-4QGF |
xalan:xalanMigration Toolkit for Applications 6/xalan |
MavenRed Hat |
High
|
Fix reported |
|
| JDK: unspecified vulnerability fixed in 6u39 and 7u13 (JMX)CVE-2013-0409 |
Red Hat Enterprise Linux 5/java-1.4.2-ibmRed Hat Enterprise Linux 5/java-1.6.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| JDK: unspecified vulnerability fixed in 6u39 (Sound)CVE-2013-1481 |
Red Hat Enterprise Linux 5/java-1.4.2-ibmRed Hat Enterprise Linux 5/java-1.6.0-openjdk |
Red Hat |
Critical
|
No fix reported |
|
| JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Scripting)CVE-2012-3213 |
Red Hat Enterprise Linux 5/java-1.4.2-ibmRed Hat Enterprise Linux 5/java-1.6.0-openjdk |
Red Hat |
Critical
|
No fix reported |
|
| JDK: unspecified vulnerability fixed in 7u13 (2D)CVE-2013-0437 |
Red Hat Enterprise Linux 5/java-1.4.2-ibmRed Hat Enterprise Linux 5/java-1.7.0-openjdk |
Red Hat |
Critical
|
No fix reported |
|
| OpenJDK: incorrect handling of certain EC points (Security, 8178135)CVE-2017-10176 |
Red Hat Enterprise Linux 6/java-1.7.0-openjdkRed Hat Enterprise Linux 6/java-1.8.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: ECDSA implementation timing attack (JCE, 8175110)CVE-2017-10118 |
Red Hat Enterprise Linux 6/java-1.7.0-openjdkRed Hat Enterprise Linux 6/java-1.8.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Insufficient checks when deserializing exceptions in ObjectInputStream (Serialization, 8272236)CVE-2022-21341 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive resource use when reading JAR manifest attributes (Libraries, 8272026)CVE-2022-21340 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Array indexing issues in LIRGenerator (Hotspot, 8272014)CVE-2022-21305 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incomplete deserialization class filtering in ObjectInputStream (Serialization, 8264934)CVE-2022-21248 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Integer overflow in BMPImageReader (ImageIO, 8273838)CVE-2022-21365 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Excessive memory allocation in BMPImageReader (ImageIO, 8273756)CVE-2022-21360 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Infinite loop related to incorrect handling of newlines in XMLEntityScanner (JAXP, 8270646)CVE-2022-21299 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incorrect access checks in XMLEntityManager (JAXP, 8270498)CVE-2022-21296 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Insufficient URI checks in the XSLT TransformerImpl (JAXP, 8270492)CVE-2022-21282 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incorrect IdentityHashMap size checks during deserialization (Libraries, 8270416)CVE-2022-21294 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Incomplete checks of StringBuffer and StringBuilder during deserialization (Libraries, 8270392)CVE-2022-21293 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: Unexpected exception thrown in regex Pattern (Libraries, 8268813)CVE-2022-21283 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
| OpenJDK: URI parsing inconsistencies (JNDI, 8278972)CVE-2022-21496 |
Red Hat Enterprise Linux 6/java-1.6.0-openjdkRed Hat Enterprise Linux 6/java-1.7.0-openjdk |
Red Hat |
Medium
|
No fix reported |
|
