icedtea-web project kayıtları
icedtea-web project üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %75
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')2
- CWE-345 Insufficient Verification of Data Authenticity2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWESaldırı profili
Tüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2019-10185İstismar yok | It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file.icedtea-web project · icedtea-web · CWE-22 | Yüksek8,6 | — | %4,0 | 31 Tem 2019 |
32İzleyin | CVE-2019-10181İstismar yok | It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising thicedtea-web project · icedtea-web · CWE-345 | Yüksek8,1 | — | %1,1 | 31 Tem 2019 |
30İzleyin | CVE-2015-5236İstismar yok | It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same Origiicedtea-web project · icedtea-web · CWE-345 | Yüksek7,5 | — | %0,8 | 7 Tem 2022 |
27İzleyin | CVE-2019-10182İstismar yok | It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files.icedtea-web project · icedtea-web · CWE-22 | Orta6,5 | — | %2,7 | 31 Tem 2019 |
- CVE-2019-1018535İzleyin
It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file.
YüksekCVSS 8,6İstismar yokEPSS %4icedtea-web project · icedtea-web31 Tem 2019
- CVE-2019-1018132İzleyin
It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising th
YüksekCVSS 8,1İstismar yokEPSS %1icedtea-web project · icedtea-web31 Tem 2019
- CVE-2015-523630İzleyin
It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same Origi
YüksekCVSS 7,5İstismar yokEPSS %0icedtea-web project · icedtea-web7 Tem 2022
- CVE-2019-1018227İzleyin
It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files.
OrtaCVSS 6,5İstismar yokEPSS %2icedtea-web project · icedtea-web31 Tem 2019