CVSS: 7.7EPSS: 6%CPEs: 62EXPL: 0CVE-2015-8126 – libpng: Buffer overflow vulnerabilities in png_get_PLTE/png_set_PLTE functions
https://notcve.org/view.php?id=CVE-2015-8126
13 Nov 2015 — Multiple buffer overflows in the (1) png_set_PLTE and (2) png_get_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3.x and 1.4.x before 1.4.17, 1.5.x before 1.5.24, and 1.6.x before 1.6.19 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a small bit-depth value in an IHDR (aka image header) chunk in a PNG image. Múltiples desbordamientos de buffer en las funciones (1) png_set_PLTE y (2) png_get_PLTE en libpng en ver... • http://googlechromereleases.blogspot.com/2016/03/stable-channel-update.html • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 9.1EPSS: 5%CPEs: 9EXPL: 0CVE-2015-4911 – OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)
https://notcve.org/view.php?id=CVE-2015-4911
21 Oct 2015 — Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893. Vulnerabilidad no especificada en Oracle Java SE 6u101, 7u85 y 8u60; Java SE Embedded 8u51 y JRockit R28.3.7 permite a atacantes remotos afectar a la disponibilidad a través de vectores relacionados con JAXP, una vulnerabilidad diferente a CVE-2015-4803 y CVE-20... • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2015-4916 – JDK: unspecified vulnerability fixed in 8u65 (JavaFX)
https://notcve.org/view.php?id=CVE-2015-4916
21 Oct 2015 — Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908. Vulnerabilidad no especificada en Oracle Java SE 8u60 y JavaFX 2.2.85 permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2015-4906 y CVE-2015-4908. Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle ... • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html •
CVSS: 10.0EPSS: 5%CPEs: 8EXPL: 0CVE-2015-4835 – OpenJDK: insufficient permission checks in StubGenerator (CORBA, 8076383)
https://notcve.org/view.php?id=CVE-2015-4835
21 Oct 2015 — Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA, a different vulnerability than CVE-2015-4881. Vulnerabilidad no especificada en Oracle Java SE 6u101, 7u85 y 8u60 y Java SE Embedded 8u51, permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores relacionados con CORBA, una vulnerabilidad diferente a CVE-201... • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html •
CVSS: 9.8EPSS: 1%CPEs: 6EXPL: 0CVE-2015-4840 – OpenJDK: OOB access in CMS code (2D, 8086092)
https://notcve.org/view.php?id=CVE-2015-4840
21 Oct 2015 — Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D. Vulnerabilidad no especificada en Oracle Java SE 7u85 y 8u60 y Java SE Embedded 8u51, permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos relacionados con 2D. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple flaws... • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html • CWE-125: Out-of-bounds Read •
CVSS: 9.8EPSS: 1%CPEs: 8EXPL: 0CVE-2015-4842 – OpenJDK: leak of user.dir location (JAXP, 8078427)
https://notcve.org/view.php?id=CVE-2015-4842
21 Oct 2015 — Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via vectors related to JAXP. Vulnerabilidad no especificada en Oracle Java SE 6u101, 7u85 y 8u60 y Java SE Embedded 8u51, permite a atacantes remotos afectar a la confidencialidad a través de vectores relacionados con JAXP. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple flaws w... • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 19%CPEs: 8EXPL: 1CVE-2015-4843 – OpenJDK: java.nio Buffers integer overflow issues (Libraries, 8130891)
https://notcve.org/view.php?id=CVE-2015-4843
21 Oct 2015 — Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Vulnerabilidad no especificada en Oracle Java SE 6u101, 7u85 y 8u60 y Java SE Embedded 8u51, permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Libraries. The java-1.7.0-openjdk packages provide the OpenJDK 7 J... • https://github.com/Soteria-Research/cve-2015-4843-type-confusion-phrack • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 28%CPEs: 8EXPL: 0CVE-2015-4844 – ICU: missing boundary checks in layout engine (OpenJDK 2D, 8132042)
https://notcve.org/view.php?id=CVE-2015-4844
21 Oct 2015 — Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. Vulnerabilidad no especificada en Oracle Java SE 6u101, 7u85 y 8u60 y Java SE Embedded 8u51, permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con 2D. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime En... • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html •
CVSS: 10.0EPSS: 10%CPEs: 8EXPL: 0CVE-2015-4860 – OpenJDK: incorrect access control context used in DGCImpl (RMI, 8080688)
https://notcve.org/view.php?id=CVE-2015-4860
21 Oct 2015 — Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to RMI, a different vulnerability than CVE-2015-4883. Vulnerabilidad no especificada en Oracle Java SE 6u101, 7u85 y 8u60 y Java SE Embedded 8u51, permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores relacionados con RMI, una vulnerabilidad diferente a CVE-2015-48... • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html •
CVSS: 9.8EPSS: 5%CPEs: 4EXPL: 0CVE-2015-4868 – OpenJDK: CRL checking flaw (Libraries, 8081744)
https://notcve.org/view.php?id=CVE-2015-4868
21 Oct 2015 — Unspecified vulnerability in Oracle Java SE 8u60 and Java SE Embedded 8u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Vulnerabilidad no especificada en Oracle Java SE 8u60 y Java SE Embedded 8u51 permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Libraries. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the Op... • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html •