Page 3 of 45 results (0.012 seconds)

CVSS: 8.1EPSS: 1%CPEs: 115EXPL: 0

17 Apr 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and JavaFX 2.2.7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Install. Vulnerabilidad no especificada en Java Runtime Environment (JRE) componente de Oracle Java SE v7 Update v17 y anteriores, v6 Update v43 y anteriores, y JavaFX v2.2.7 y anteriores, la confidencialidad, integridad y disponib... • http://lists.apple.com/archives/security-announce/2013/Apr/msg00001.html •

CVSS: 7.5EPSS: 0%CPEs: 37EXPL: 0

17 Apr 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to affect integrity via unknown vectors related to JavaFX. Vulnerabilidad no especificada en Java Runtime Environment (JRE) componente de Oracle Java SE v7 Update v17 y anteriores y JavaFX v2.2.7 y anteriores, permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionados con JavaFX. Multiple vulnerabilities... • http://rhn.redhat.com/errata/RHSA-2013-0757.html •

CVSS: 10.0EPSS: 46%CPEs: 3EXPL: 0

08 Mar 2013 — Heap-based buffer overflow in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier and JavaFX 2.2.7 and earlier allows remote attackers to execute arbitrary code via unspecified vectors related to JavaFX, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2013. Un desbordamiento de búfer basado en memoria dinámica ('heap') en Oracle Java 7 Update v17 y posiblemente otras versiones, permite a atacantes remotos ejecutar código de su elección a través de vecto... • http://h30499.www3.hp.com/t5/HP-Security-Research-Blog/Pwn2Own-2013/ba-p/5981157 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •

CVSS: 10.0EPSS: 1%CPEs: 7EXPL: 0

02 Feb 2013 — Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. Vulnerabilidad no especificada en el componente JavaFX en Oracle SE JavaFX v2.2.4 y anteriores permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad mediante vectores desconocidos, una vulnerabilidad diferente a o... • http://marc.info/?l=bugtraq&m=136733161405818&w=2 •

CVSS: 10.0EPSS: 1%CPEs: 7EXPL: 0

02 Feb 2013 — Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. Vulnerabilidad sin especificar de JavaFX de Oracle Java SE JavaFX v2.2.4 y anteriores que permite ataques remotos que afectan a la confidencialidad, integridad, y disponibilidad por vectores desconocidos. Esta vulnerabilidad es diferente a otra... • http://marc.info/?l=bugtraq&m=136733161405818&w=2 •

CVSS: 10.0EPSS: 1%CPEs: 7EXPL: 0

02 Feb 2013 — Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. Vulnerabilidad no especificada en el componente JavaFX en Oracle SE JavaFX v2.2.4 y anteriores permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad mediante vectores desconocidos, una vulnerabilidad diferente a o... • http://marc.info/?l=bugtraq&m=136733161405818&w=2 •

CVSS: 9.8EPSS: 3%CPEs: 7EXPL: 0

02 Feb 2013 — Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue is due to an invalid type cast in the JSObject class. Vulnerabilidad sin especificar en el componente JavaFX en O... • http://marc.info/?l=bugtraq&m=136733161405818&w=2 •

CVSS: 10.0EPSS: 1%CPEs: 29EXPL: 0

02 Feb 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. Vulnerabilidad no especificada en el componente Java Runtime Environment (JRE) en Oracle Java SE v7 hasta Update 11 y JavaFX v2.2.4 y anteriores permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad mediante vectores relaciona... • http://marc.info/?l=bugtraq&m=136439120408139&w=2 •

CVSS: 10.0EPSS: 11%CPEs: 7EXPL: 0

02 Feb 2013 — Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that this issue allows remote attackers to execute arbitrary code via an "invalid type case" in the init method of the D3DShader... • http://marc.info/?l=bugtraq&m=136733161405818&w=2 •

CVSS: 9.8EPSS: 7%CPEs: 7EXPL: 0

02 Feb 2013 — Unspecified vulnerability in the JavaFX component in Oracle Java SE JavaFX 2.2.4 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than other CVEs listed in the February 2013 CPU. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from a third party that the issue allows remote attackers to execute arbitrary code via vectors related to an "invalid type cast" and exposed nativ... • http://marc.info/?l=bugtraq&m=136733161405818&w=2 •