Vulnerability & Exploit Database

Red Hat: CVE-2024-20932: OpenJDK: incorrect handling of ZIP files with duplicate entries (8276123) (Multiple Advisories)

IBM AIX: java_feb2024_advisory (CVE-2024-20926): Vulnerability in IBM Java SDK affects AIX

SUSE: CVE-2024-20926: SUSE Linux Security Advisory

AdoptOpenJDK: CVE-2024-20918: Vulnerability with Hotspot component

Vulnerability in the Hotspot component

Ubuntu: (Multiple Advisories) (CVE-2024-20932): OpenJDK 17 vulnerabilities

Alma Linux: CVE-2024-20918: Important: java-1.8.0-openjdk security and bug fix update (Multiple Advisories)

Oracle Linux: (CVE-2024-20926) (Multiple Advisories): java-11-openjdk security update

Java CPU January 2024 Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition vulnerability (CVE-2024-20952)

Java CPU January 2024 Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition vulnerability (CVE-2024-20918)

CentOS Linux: CVE-2024-20918: Important: java-1.8.0-openjdk security and bug fix update (Multiple Advisories)

Java CPU January 2024 Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition vulnerability (CVE-2024-20926)

Amazon Linux AMI 2: CVE-2024-20926: Security patch for java-1.8.0-amazon-corretto, java-1.8.0-openjdk, java-11-amazon-corretto, java-11-openjdk (Multiple Advisories)

Red Hat: CVE-2024-20926: OpenJDK: arbitrary Java code execution in Nashorn (8314284) (Multiple Advisories)

AdoptOpenJDK: CVE-2024-20922: Vulnerability with JavaFX component

Vulnerability in the Security component

MediaWiki: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-23179)

MediaWiki: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-23172)

MediaWiki: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-23177)

MediaWiki: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') (CVE-2024-23173)