Icetea-web-project
3 CVEs tracked since 2019. Since Jul 2019, none of them reached CISA KEV.
Icetea-web-project CVEs per month
| Month | CVEs | In CISA KEV |
|---|---|---|
| 2019-07 | 3 | 0 |
Products
The products that kept showing up in Icetea-web-project's monthly top three, with their CVEs summed over those months.
Latest CVEs
The 3 most recently published vulnerabilities affecting Icetea-web-project.
- CVE-2019-10181It was found that in icedtea-web up to and including 1.7.2 and 1.8.2 executable code could be injected in a JAR file without compromising the signature verification. An attacker could use this flaw...8.1
- CVE-2019-10182It was found that icedtea-web though 1.7.2 and 1.8.2 did not properly sanitize paths from <jar/> elements in JNLP files. An attacker could trick a victim into running a specially crafted applicatio...8.2
- CVE-2019-10185It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitra...8.6
The record
- Peak rank
- #146 in Jul 2019
- Busiest month shown
- Jul 2019, 3 CVEs
- Months with a KEV entry
- 0 since Jul 2019
- Monthly snapshots
- 1 since 2019