Skip to content
Redhat Icedtea vulnerabilities
-
icedtea icedtea6
IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended...
CVE-2010-2783
9.1 Critical
-
icedtea icedtea6
IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read...
CVE-2010-2548
9.1 Critical
-
oracle corporation java, oracle jdk, jre +1 more +3 more
Vulnerability in the Java SE component of Oracle Java SE (subcomponent: AWT). Supported versions...
CVE-2017-3512
8.3 High
-
oracle jrockit, oracle corporation java, debian linux +11 more +13 more
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...
CVE-2017-3544
Fix available
3.7 Low
-
oracle corporation java, debian linux, oracle jdk +9 more +11 more
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent:...
CVE-2017-3539
Fix available
3.1 Low
-
oracle jrockit, oracle corporation java, debian linux +10 more +12 more
Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent...
CVE-2017-3533
Fix available
3.7 Low
-
oracle jrockit, jdk, jre +9 more +11 more
Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and...
CVE-2016-0695
Fix available
5.9 Medium
-
oracle jdk, jre, redhat enterprise linux desktop +4 more +6 more
Unspecified vulnerability in Oracle Java SE 7u97, 8u73, and 8u74 allows remote attackers to...
CVE-2016-0636
Fix available
8.1 High
-
redhat icedtea, fedoraproject fedora, opensuse +4 more +6 more
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of...
CVE-2015-5235
Fix available
4.3 Medium
-
redhat icedtea, fedoraproject fedora, opensuse +4 more +6 more
IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which...
CVE-2015-5234
Fix available
6.8 Medium
-
redhat icedtea-web, icedtea6 +1 more
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and...
CVE-2011-2514
Fix available
6.8 Medium
-
redhat icedtea-web, icedtea6 +1 more
The Java Network Launching Protocol (JNLP) implementation in IcedTea6 1.9.x before 1.9.9 and...
CVE-2011-2513
Fix available
5.0 Medium
-
redhat icedtea-web
The LiveConnect implementation in plugin/icedteanp/IcedTeaNPPlugin.cc in IcedTea-Web before 1.4.2...
CVE-2013-6493
Fix available
2.1 Low
-
redhat icedtea-web, canonical ubuntu linux, opensuse +2 more
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 allows remote attackers to execute...
CVE-2013-1927
Fix available
6.8 Medium
-
redhat icedtea-web, canonical ubuntu linux, opensuse +2 more
The IcedTea-Web plugin before 1.2.3 and 1.3.x before 1.3.2 uses the same class loader for applets...
CVE-2013-1926
Fix available
5.8 Medium
-
redhat icedtea-web, opensuse +1 more
Off-by-one error in the invoke function in IcedTeaScriptablePluginObject.cc in IcedTea-Web 1.1.x...
CVE-2012-4540
Fix available
6.8 Medium
-
redhat icedtea-web
The IcedTea-Web plugin before 1.2.1 does not properly handle NPVariant NPStrings without NUL...
CVE-2012-3423
Fix available
7.5 High
-
redhat icedtea-web
The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an...
CVE-2012-3422
Fix available
6.8 Medium
-
oracle java se, jre, jdk +6 more +8 more
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
CVE-2012-1723
In KEVPublic exploit
EPSS 93.6%
10.0 High
-
oracle jre, jdk, redhat enterprise linux desktop +14 more +16 more
Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7...
CVE-2012-1717
2.1 Low
-
redhat icedtea-web, canonical ubuntu linux, opensuse +2 more
The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote...
CVE-2011-3377
Fix available
4.3 Medium
-
redhat icedtea-web, sun jdk +1 more
The JNLPClassLoader class in IcedTea-Web before 1.0.1, as used in OpenJDK Runtime Environment 1.6...
CVE-2011-0706
7.5 High
-
redhat icedtea
IcedTea 1.7 before 1.7.8, 1.8 before 1.8.5, and 1.9 before 1.9.5 does not properly verify...
CVE-2011-0025
6.8 Medium
-
redhat icedtea
The JNLP SecurityManager in IcedTea (IcedTea.so) 1.7 before 1.7.7, 1.8 before 1.8.4, and 1.9...
CVE-2010-4351
6.8 Medium
-
redhat icedtea
IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6,...
CVE-2010-3860
5.0 Medium