Java - CVE CyberSecurity Database News (Page 135)

Apr 19, 2022 API Java

CVE-2022-21426 Vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition product.

by using APIs in the specified Component, e.g. through a web service. The vulnerability cannot be exploited through the application deployment mechanism. Note: This

Apr 19, 2022 Windows API Java

CVE-2022-21476 Vulnerability in Oracle Java SE, Oracle GraalVM Enterprise Edition.

by using the Java reflection API. The vulnerability can be exploited through web requests. A potential attacker can host a specially crafted website on a

Apr 19, 2022 API Java Oracle

CVE-2022-21449 An issue was found in Oracle Java SE and GraalVM Enterprise Edition that affects versions 17.0.2 and 18 and 21.3.1 and 22.0.0.2. The vulnerability is a flaw in the libraries of these products.

by using the Java API in the Oracle Java SE or Oracle GraalVM Enterprise Edition component to create, access, update, delete or modify data; or

Apr 15, 2022 RCE Windows Microsoft Exploit Java

CVE-2022-24543 - Digging Into the Windows Upgrade Assistant Remote Code Execution Vulnerability

--- In the never-ending world of cybersecurity vulnerabilities, CVE-2022-24543 deserves a place on your radar—especially if you rely on Windows Upgrade Assistant. This post

Apr 14, 2022 Java

CVE-2022-22968

This problem was first identified in the Spring Data project, where it was discovered that the actual case of the field name was being ignored.