Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-3222 State: PUBLISHED Published: 2017-07-22T20:00:00 Last Updated: 2024-08-05T14:16:28.507Z Vendors: Inmarsat Products: AmosConnect Problem Types: CWE-798 Description: Hard-coded credentials in AmosConnect 8 allow remote attackers to gain full administrative privileges, including the ability to execute commands on the Microsoft Windows host platform with SYSTEM privileges by abusing AmosConnect Task Manager. Additional Analyst Notes: - CVE Program Container: References: - http://www.inmarsat.com/news/inmarsat-response-to-ioactive-claims/ - http://www.securityfocus.com/bid/99899 - https://twitter.com/mkolsek/status/923988845783322625 - https://www.kb.cert.org/vuls/id/586501
CVE ID: CVE-2017-3223 State: PUBLISHED Published: 2018-07-24T15:00:00 Last Updated: 2024-08-05T14:16:28.415Z Vendors: Dahua Products: IP Camera Problem Types: CWE-121 Description: Dahua IP camera products using firmware versions prior to V2.400.0000.14.R.20170713 include a version of the Sonia web interface that may be vulnerable to a stack buffer overflow. Dahua IP camera products include an application known as Sonia (/usr/bin/sonia) that provides the web interface and other services for controlling the IP camera remotely. Versions of Sonia included in firmware versions prior to DH_IPC-Consumer-Zi-Themis_Eng_P_V2.408.0000.11.R.20170621 do not validate input data length for the 'password' f
rior to DH_IPC-Consumer-Zi-Themis_Eng_P_V2.408.0000.11.R.20170621 do not validate input data length for the 'password' field of the web interface. A remote, unauthenticated attacker may submit a crafted POST request to the IP camera's Sonia web interface that may lead to out-of-bounds memory operations and loss of availability or remote code execution. The issue was originally identified by the researcher in firmware version DH_IPC-HX1X2X-Themis_EngSpnFrn_N_V2.400.0000.30.R.20160803. Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/547255 - http://www.securityfocus.com/bid/99620
CVE ID: CVE-2017-3224 State: PUBLISHED Published: 2018-07-24T15:00:00 Last Updated: 2024-08-05T14:16:28.299Z Vendors: Open Shortest Path First (OSPF) Products: Protocol Problem Types: CWE-354 Description: Open Shortest Path First (OSPF) protocol implementations may improperly determine Link State Advertisement (LSA) recency for LSAs with MaxSequenceNumber. According to RFC 2328 section 13.1, for two instances of the same LSA, recency is determined by first comparing sequence numbers, then checksums, and finally MaxAge. In a case where the sequence numbers are the same, the LSA with the larger checksum is considered more recent, and will not be flushed from the Link State Database (LSDB). Sin
LSA with the larger checksum is considered more recent, and will not be flushed from the Link State Database (LSDB). Since the RFC does not explicitly state that the values of links carried by a LSA must be the same when prematurely aging a self-originating LSA with MaxSequenceNumber, it is possible in vulnerable OSPF implementations for an attacker to craft a LSA with MaxSequenceNumber and invalid links that will result in a larger checksum and thus a 'newer' LSA that will not be flushed from the LSDB. Propagation of the crafted LSA can result in the erasure or alteration of the routing tables of routers within the routing domain, creating a denial of service condition or the re-routing of
of the routing tables of routers within the routing domain, creating a denial of service condition or the re-routing of traffic on the network. CVE-2017-3224 has been reserved for Quagga and downstream implementations (SUSE, openSUSE, and Red Hat packages). Additional Analyst Notes: - CVE Program Container: References: - https://www.kb.cert.org/vuls/id/793496
CVE ID: CVE-2017-3225 State: PUBLISHED Published: 2018-07-24T15:00:00 Last Updated: 2024-08-05T14:16:28.243Z Vendors: Das Products: U-Boot Problem Types: CWE-329 Description: Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. For devices utilizing this environment encryption mode, U-Boot's use of a zero initialization vector may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data. Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector. This allows an attacker to perform dictionary attacks on encrypted data produced by Das U-Boot to learn information about the encrypted da
acker to perform dictionary attacks on encrypted data produced by Das U-Boot to learn information about the encrypted data. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100675 - https://www.kb.cert.org/vuls/id/166743
CVE ID: CVE-2017-3226 State: PUBLISHED Published: 2018-07-24T15:00:00 Last Updated: 2024-08-05T14:16:28.456Z Vendors: Das Products: U-Boot Problem Types: CWE-329 Description: Das U-Boot is a device bootloader that can read its configuration from an AES encrypted file. Devices that make use of Das U-Boot's AES-CBC encryption feature using environment encryption (i.e., setting the configuration parameter CONFIG_ENV_AES=y) read environment variables from disk as the encrypted disk image is processed. An attacker with physical access to the device can manipulate the encrypted environment data to include a crafted two-byte sequence which triggers an error in environment variable parsing. This err
nvironment data to include a crafted two-byte sequence which triggers an error in environment variable parsing. This error condition is improperly handled by Das U-Boot, resulting in an immediate process termination with a debugging message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100675 - https://www.kb.cert.org/vuls/id/166743
CVE ID: CVE-2017-3228 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-3229 State: REJECTED Published: 2019-03-05T20:00:00 Last Updated: 2019-03-05T19:57:01 Description: No description available.
CVE ID: CVE-2017-3230 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:23:28.771Z Vendors: Oracle Corporation Products: Fusion Middleware MapViewer Problem Types: Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Fusion Middleware MapViewer. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Fusion Middleware MapViewer accessible data as well as unauthorized read access to a subset of Oracle Fusion Middleware MapViewer accessible data and unauthorized ability to cause a partial denial of service (partial DOS) o
usion Middleware MapViewer accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Fusion Middleware MapViewer. Description: Vulnerability in the Oracle Fusion Middleware MapViewer component of Oracle Fusion Middleware (subcomponent: Map Builder). Supported versions that are affected are 11.1.1.9, 12.2.1.1 and 12.2.1.2. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Fusion Middleware MapViewer. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Oracle Fusion Middleware MapViewer accessible data a
d creation, deletion or modification access to critical data or all Oracle Fusion Middleware MapViewer accessible data as well as unauthorized read access to a subset of Oracle Fusion Middleware MapViewer accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Fusion Middleware MapViewer. CVSS 3.0 Base Score 8.6 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1038291 - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://www.s
uritytracker.com/id/1038291 - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://www.securityfocus.com/bid/97746
CVE ID: CVE-2017-3231 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:54:48.386Z Vendors: Oracle Products: Java SE, Java SE Embedded Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Description: Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE (subcomponent: Networking). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vuln
ded. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Java SE, Java SE Embedded accessible data. Note: This vulnerability applies to Java deployments, typically in clients running sandboxed Java Web Start applications or sandboxed Java applets, that load and run untrusted code (e.g., code that comes from the internet) and rely on the Java sandbox for security. This vulnerability does not apply to Java deployments, typically in servers, that load and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts)
and run only trusted code (e.g., code installed by an administrator). CVSS v3.0 Base Score 4.3 (Confidentiality impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://rhn.redhat.com/errata/RHSA-2017-0338.html - http://www.securityfocus.com/bid/95563 - http://www.debian.org/security/2017/dsa-3782 - http://rhn.redhat.com/errata/RHSA-2017-0176.html - https://security.gentoo.org/glsa/201701-65 - http://rhn.redhat.com/errata/RHSA-2017-0180.html - http://www.securitytracker.com/id/1037637 - https://security.gentoo.org/glsa/201707-01 - http://rhn.redhat.com/errata/RHSA-2017-0175.html - http://rhn.redhat.com/errata/RHSA-2017-0177.html - http://rhn.
7-01 - http://rhn.redhat.com/errata/RHSA-2017-0175.html - http://rhn.redhat.com/errata/RHSA-2017-0177.html - http://rhn.redhat.com/errata/RHSA-2017-0263.html - https://access.redhat.com/errata/RHSA-2017:1216 - https://security.netapp.com/advisory/ntap-20170119-0001/ - http://rhn.redhat.com/errata/RHSA-2017-0269.html - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - http://rhn.redhat.com/errata/RHSA-2017-0337.html - http://rhn.redhat.com/errata/RHSA-2017-0336.html
CVE ID: CVE-2017-3232 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:23:21.896Z Vendors: Oracle Corporation Products: Automatic Service Request (ASR) Problem Types: Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Automatic Service Request (ASR) accessible data. Description: Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported ver
in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Automatic Service Request (ASR) accessible data. CVSS 3.0 Base Score 5.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnric
r: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/97806 - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
CVE ID: CVE-2017-3233 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:23:15.566Z Vendors: Oracle Corporation Products: Automatic Service Request (ASR) Problem Types: Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Automatic Service Request (ASR) accessible data. Description: Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to
(ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via HTTP to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Automatic Service Request (ASR) accessible data. CVSS 3.0 Base Score 7.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/c
s: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://www.securityfocus.com/bid/97799
CVE ID: CVE-2017-3234 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:23:08.932Z Vendors: Oracle Corporation Products: Automatic Service Request (ASR) Problem Types: Easily "exploitable" vulnerability allows unauthenticated attacker with network access via SFT to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in takeover of Automatic Service Request (ASR). Description: Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with network
ersion that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via SFT to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in takeover of Automatic Service Request (ASR). CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://www.securityfocus.com/bid/97794
CVE ID: CVE-2017-3235 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:52:31.299Z Vendors: Oracle Products: FLEXCUBE Universal Banking Problem Types: CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N Description: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows physical access to compromise Oracle FLEXCUBE Universal Banking. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Univ
attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data as well as unauthorized read access to a subset of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 3.5 (Confidentiality and Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95555 - http://www.securitytracker.com/id/1037636 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3236 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:52:16.288Z Vendors: Oracle Products: FLEXCUBE Universal Banking Problem Types: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N Description: Vulnerability in the Oracle FLEXCUBE Universal Banking component of Oracle Financial Services Applications (subcomponent: Core). Supported versions that are affected are 11.3.0, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0 and 12.2.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle FLEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while
LEXCUBE Universal Banking. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle FLEXCUBE Universal Banking, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle FLEXCUBE Universal Banking accessible data. CVSS v3.0 Base Score 4.7 (Integrity impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95552 - http://www.securitytracker.com/id/1037636 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3237 State: PUBLISHED Published: 2017-04-24T19:00:00 Last Updated: 2024-10-07T16:23:00.237Z Vendors: Oracle Corporation Products: Automatic Service Request (ASR) Problem Types: Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in takeover of Automatic Service Request (ASR). Description: Vulnerability in the Automatic Service Request (ASR) component of Oracle Support Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnera
Tools (subcomponent: ASR Manager). The supported version that is affected is Prior to 5.7. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Automatic Service Request (ASR) executes to compromise Automatic Service Request (ASR). Successful attacks of this vulnerability can result in takeover of Automatic Service Request (ASR). CVSS 3.0 Base Score 7.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://
SA ADP Vulnrichment: References: - http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html - http://www.securityfocus.com/bid/97789
CVE ID: CVE-2017-3238 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:51:59.764Z Vendors: Oracle Products: MySQL Server Problem Types: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H Description: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQ
s vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS v3.0 Base Score 6.5 (Availability impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://access.redhat.com/errata/RHSA-2017:2787 - https://security.gentoo.org/glsa/201702-17 - https://access.redhat.com/errata/RHSA-2018:0574 - https://security.gentoo.org/glsa/201702-18 - http://www.securitytracker.com/id/1037640 - https://access.redhat.com/errata/RHSA-2018:0279 - http://www.debian.org/security/2017/dsa-3767 - http://www.securityfocus.com/bid/95571 - https://access.redhat.com/errata/RHSA-2017:2886 - http://ww
ity/2017/dsa-3767 - http://www.securityfocus.com/bid/95571 - https://access.redhat.com/errata/RHSA-2017:2886 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - http://www.debian.org/security/2017/dsa-3770 - https://access.redhat.com/errata/RHSA-2017:2192
CVE ID: CVE-2017-3239 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:51:48.536Z Vendors: Oracle Products: GlassFish Server Problem Types: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description: Vulnerability in the Oracle GlassFish Server component of Oracle Fusion Middleware (subcomponent: Administration). Supported versions that are affected are 3.0.1 and 3.1.2. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle GlassFish Server executes to compromise Oracle GlassFish Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessib
ful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle GlassFish Server accessible data. CVSS v3.0 Base Score 3.3 (Confidentiality impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securityfocus.com/bid/95493 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html
CVE ID: CVE-2017-3240 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:51:29.186Z Vendors: Oracle Products: Oracle Database Problem Types: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N Description: Vulnerability in the RDBMS Security component of Oracle Database Server. The supported version that is affected is 12.1.0.2. Easily exploitable vulnerability allows low privileged attacker having Local Logon privilege with logon to the infrastructure where RDBMS Security executes to compromise RDBMS Security. Successful attacks of this vulnerability can result in unauthorized read access to a subset of RDBMS Security accessible data. CVSS v3.0 Base Score 3.3 (Confidential
result in unauthorized read access to a subset of RDBMS Security accessible data. CVSS v3.0 Base Score 3.3 (Confidentiality impacts). Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.securitytracker.com/id/1037630 - http://www.oracle.com/technetwork/security-advisory/cpujan2017-2881727.html - http://www.securityfocus.com/bid/95477
CVE ID: CVE-2017-3241 State: PUBLISHED Published: 2017-01-27T22:01:00 Last Updated: 2024-10-09T19:51:08.388Z Vendors: Oracle Products: Java SE, Java SE Embedded, JRockit Problem Types: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H Description: Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE (subcomponent: RMI). Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111; JRockit: R28.3.12. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE, Java SE Embedded, JRockit. While the vulnerability is in Java SE, Java SE Embedded, JRockit, attacks