TI-2017-02708 CVE-2017-3512 · GHSA-39x2-j579-v2v2
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT).
Priority MEDIUM 43
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT).
Red Hat
Records7413All Threatist records
Exploited (KEV)98In CISA KEV
CVSS critical792CVSS 9.0–10.0
CVSS high2681CVSS 7.0–8.9
Exploited now
Red Hat records in CISA KEVTI-2026-34021 Linux Kernel Missing Initialization of a Variable Vulnerability TI-2015-04610 ISC BIND Data Processing Errors Vulnerability TI-2026-35991 Kludex Starlette HTTP Request/Response Smuggling Vulnerability TI-2015-02874 Red Hat Libuser Race Condition Vulnerability TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability TI-2026-26741 Apache Tomcat Missing Encryption of Sensitive Data Vulnerability
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Icedtea · all components
TI-2011-00024 CVE-2011-0025 · GHSA-253g-w96v-v3cj
IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify…
Priority LOW 35
IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify signatures for JAR files that (1) are "partially signed" or (2) signed by multiple entities, which allows remote attackers to tric…
TI-2010-04084 CVE-2010-4351 · GHSA-g6jh-xpq2-3rw2
The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and…
Priority LOW 35
The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9 before 1.9.4 for Java OpenJDK returns from the checkPermission method instead of throwing an exception in certain circumstances…
TI-2015-04395 CVE-2015-5234 · GHSA-vjh2-cm2h-354g
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs…
Priority LOW 34
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into the .appletTrustSettings configuration file and bypass user approval to execute…
TI-2010-03667 CVE-2010-3860 · GHSA-pqr4-2v59-c8vx
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on…
Priority LOW 28
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows remote attackers to obtain sensitive information including (1)…
TI-2015-04396 CVE-2015-5235 · GHSA-c7wx-r8q7-fmcf
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of…
Priority LOW 26
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to bypass the approval process or trick users into approving applet execution via…
TI-2017-02729 CVE-2017-3533 · GHSA-h4pv-vpf9-9gwp
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…
Priority LOW 23
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
TI-2017-02740 CVE-2017-3544 · GHSA-x9hr-p2wg-6f69
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE…
Priority LOW 22
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: Networking).
TI-2017-02735 CVE-2017-3539 · GHSA-mmfj-2h5p-6f47
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent…
Priority LOW 19
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Security).