netbeans

6 results · Feed

• High 7.0
  CVE-2020-17534

  Improper synchronization in Apache Netbeans HTML/Java API

  There exists a race condition between the deletion of the temporary file and the creation of the temporary directory in `webkit` subproject of HTML/Java API version 1.7. A similar vulnerability has recently been disclosed in other Java projects and the fix in…

  netbeans org.netbeans.html:pom Ubuntu Maven
  Jan 11, 2021
• Unscored —
  CVE-2020-11986

  To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. Thi…

  netbeans netbeans Debian Ubuntu
  Sep 9, 2020
• High 7.5
  CVE-2019-17561

  Improper Verification of Cryptographic Signature in Apache Netbeans

  The "Apache NetBeans" autoupdate system does not fully validate code signatures. An attacker could modify the downloaded nbm and include additional code. "Apache NetBeans" versions up to and including 11.2 are affected by this vulnerability.

  netbeans netbeans org.codehaus.mevenide:netbeans Debian Ubuntu Maven
  Mar 30, 2020
• Critical 9.1
  CVE-2019-17560

  Improper Certificate Validation in Apache Netbeans

  The "Apache NetBeans" autoupdate system does not validate SSL certificates and hostnames for https based downloads. This allows an attacker to intercept downloads of autoupdates and modify the download, potentially injecting malicious code. “Apache NetBeans" …

  netbeans netbeans org.codehaus.mevenide:netbeans Debian Ubuntu Maven
  Mar 30, 2020
• Unscored —
  CVE-2018-17191

  Apache NetBeans (incubating) 9.0 NetBeans Proxy Auto-Configuration (PAC) interpretation is vulnerable for remote comman…

  Apache Software Foundation Apache NetBeans netbeans netbeans Debian Ubuntu
  Dec 31, 2018
• Unscored —
  CVE-2016-5537

  Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confid…

  netbeans netbeans Debian Ubuntu
  Oct 25, 2016