CVE-2015-0486

JDK: unspecified vulnerability fixed in 8u45 (Deployment)

Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

CVSS 2.0 · 5.0 Medium EPSS 2.6% KEV · Not listed

Vendors

Opensuse Oracle Redhat

Products

Opensuse Jdk Jre and 1 more

CVE-2015-0488

OpenJDK: certificate options parsing uncaught exception (JSSE, 8068720)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availability via vectors related to JSSE.

CVSS 2.0 · 5.0 Medium EPSS 3.6% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Jrockit and 4 more

CVE-2015-0491

JDK: unspecified vulnerability fixed in 5.0u85, 6u95, 7u79 and 8u45 (2D)

Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability than CVE-2015-0459.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed

Vendors

Opensuse Oracle Redhat and 1 more

Products

Opensuse Javafx Jdk and 5 more

CVE-2015-0492

JDK: unspecified vulnerability fixed in 7u79 and 8u45 (JavaFX)

Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2015-0484.

CVSS 2.0 · 9.3 Critical EPSS 4.3% KEV · Not listed

Vendors

Opensuse Oracle Redhat and 1 more

Products

Opensuse Javafx Jdk and 3 more

CVE-2015-2596

JDK: unspecified vulnerability fixed in 7u85 (Hotspot)

Unspecified vulnerability in Oracle Java SE 7u80 allows remote attackers to affect integrity via unknown vectors related to Hotspot.

CVSS 2.0 · 4.3 Medium EPSS 2.6% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Rhel Extras Oracle Java

CVE-2015-2597

JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Install)

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Install.

CVSS 2.0 · 7.2 High EPSS < 1% KEV · Not listed

Vendors

Oracle

Products

Jdk Jre

CVE-2015-2613

JCE: missing EC parameter validation in ECDH_Derive() (OpenJDK JCE, 8075833)

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via vectors related to JCE.

CVSS 2.0 · 5.0 Medium EPSS 3.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Rhel Extras and 1 more

CVE-2015-2619

JDK: unspecified vulnerability fixed in 7u85 and 8u51 (2D)

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45, JavaFX 2.2.80, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0 · 5.0 Medium EPSS 3.2% KEV · Not listed

Vendors

Oracle Redhat

Products

Javafx Jdk Jre and 2 more

CVE-2015-2632

ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D.

CVSS 2.0 · 5.0 Medium EPSS 4.4% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2015-2659

OpenJDK: GCM cipher issue causing JVM crash (Security, 8067648)

Unspecified vulnerability in Oracle Java SE 8u45 and Java SE Embedded 8u33 allows remote attackers to affect availability via unknown vectors related to Security.

CVSS 2.0 · 5.0 Medium EPSS 3.5% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 1 more

CVE-2015-4729

JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.

CVSS 2.0 · 4.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Rhel Extras and 1 more

CVE-2015-4733

OpenJDK: RemoteObjectInvocationHandler allows calling finalize() (RMI, 8076409)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI.

CVSS 2.0 · 10.0 Critical EPSS 5.8% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Enterprise Linux and 3 more

CVE-2015-4736

JDK: unspecified vulnerability fixed in 7u85 and 8u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u80 and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.

CVSS 2.0 · 9.3 Critical EPSS 4.4% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Rhel Extras and 1 more

CVE-2015-4749

OpenJDK: DnsClient fails to release request information after error (JNDI, 8075378)

Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect availability via vectors related to JNDI.

CVSS 2.0 · 4.3 Medium EPSS 3.3% KEV · Not listed

Vendors

Oracle Redhat

Products

Jdk Jre Jrockit and 4 more

CVE-2013-5787

JDK: unspecified vulnerability fixed in 7u45 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5789, CVE-2013-5824, CVE-2013-5832, and CVE-2013-5852.

CVSS 2.0 · 10.0 Critical EPSS 5.6% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Jdk Jre Network Satellite and 4 more

CVE-2010-1423

Java: Java Web Start arbitrary command line injection

Argument injection vulnerability in the URI handler in (a) Java NPAPI plugin and (b) Java Deployment Toolkit in Java 6 Update 10, 19, and other versions, when running on Windows and possibly on Linux, allows remote attackers to execute arbitrary code via the (1) -J or (2) -XXaltjvm argument to javaws.exe, which is processed by the launch method. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 9.3 Critical EPSS 55.6% KEV · Not listed

Vendors

Oracle

Products

Jdk Jre

CVE-2011-3545

JDK: unspecified vulnerability fixed in 6u29 (Sound)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.

CVSS 2.0 · 10.0 Critical EPSS 5.4% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Jrockit Network Satellite Rhel Extras and 3 more

CVE-2011-3546

JDK: unspecified vulnerability fixed in 6u29 (Deployment)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JavaFX 2.0 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors related to Deployment.

CVSS 2.0 · 5.8 Medium EPSS 2.2% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Javafx Jdk Jre and 4 more

CVE-2011-3547

OpenJDK: InputStream skip() information leak (Networking/IO, 7000600)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.2_33 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown vectors related to Networking.

CVSS 2.0 · 5.0 Medium EPSS 2.7% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Jdk Jre Enterprise Linux and 5 more

CVE-2011-3551

OpenJDK: Java2D TransformHelper integer overflow (2D, 7023640)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

CVSS 2.0 · 9.3 Critical EPSS 4.5% KEV · Not listed

Vendors

Oracle Redhat Sun

Products

Jrockit Enterprise Linux Network Satellite and 3 more