CVSS: 9.8EPSS: 5%CPEs: 8EXPL: 0CVE-2015-0460 – OpenJDK: incorrect handling of phantom references (Hotspot, 8071931)
https://notcve.org/view.php?id=CVE-2015-0460
16 Apr 2015 — Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Vulnerabilidad no especificada en Oracle Java SE 5.0u81, 6u91, 7u76, y 8u40 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con Hotspot. A flaw was found in the way the Hotspot component in OpenJDK handled phantom references. An u... • http://advisories.mageia.org/MGASA-2015-0158.html •
CVSS: 9.8EPSS: 0%CPEs: 8EXPL: 0CVE-2015-0477 – OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)
https://notcve.org/view.php?id=CVE-2015-0477
16 Apr 2015 — Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors related to Beans. Vulnerabilidad no especificada en Oracle Java SE 5.0u81, 6u91, 7u76, y 8u40 permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionados con Beans. A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. An off-by... • http://advisories.mageia.org/MGASA-2015-0158.html •
CVSS: 5.9EPSS: 0%CPEs: 9EXPL: 0CVE-2015-0478 – OpenJDK: insufficient hardening of RSA-CRT implementation (JCE, 8071726)
https://notcve.org/view.php?id=CVE-2015-0478
16 Apr 2015 — Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentiality via vectors related to JCE. Vulnerabilidad no especificada en Oracle Java SE 5.0u81, 6u91, 7u76, y 8u40, y JRockit R28.3.5, permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con JCE. It was found that the RSA implementation in the JCE component in OpenJDK did not follow recommended practices for implementing RSA signatures. A... • http://advisories.mageia.org/MGASA-2015-0158.html • CWE-358: Improperly Implemented Security Check for Standard •
CVSS: 10.0EPSS: 8%CPEs: 8EXPL: 0CVE-2015-0469 – ICU: layout engine glyphStorage off-by-one (OpenJDK 2D, 8067699)
https://notcve.org/view.php?id=CVE-2015-0469
16 Apr 2015 — Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. Vulnerabilidad no especificada en Oracle Java SE 5.0u81, 6u91, 7u76, y 8u40 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con 2D. An off-by-one flaw, leading to a buffer overflow, was found in the font parsing code in the 2D componen... • http://advisories.mageia.org/MGASA-2015-0158.html • CWE-122: Heap-based Buffer Overflow •
CVSS: 9.1EPSS: 0%CPEs: 8EXPL: 0CVE-2015-0480 – OpenJDK: jar directory traversal issues (Tools, 8064601)
https://notcve.org/view.php?id=CVE-2015-0480
16 Apr 2015 — Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via unknown vectors related to Tools. Vulnerabilidad no especificada en Oracle Java SE 5.0u81, 6u91, 7u76, y 8u40 permite a atacantes remotos afectar la integridad y la disponibilidad a través de vectores desconocidos relacionados con Tools. A directory traversal flaw was found in the way the jar tool extracted JAR archive files. A specially crafted JAR archive could cause ja... • http://advisories.mageia.org/MGASA-2015-0158.html • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 0CVE-2015-0470 – OpenJDK: incorrect handling of default methods (Hotspot, 8065366)
https://notcve.org/view.php?id=CVE-2015-0470
16 Apr 2015 — Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot. Vulnerabilidad no especificada en Oracle Java SE 8u40 permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionados con Hotspot. A flaw was discovered in the Hotspot component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions. The java-1.8.0-openjdk packages provide the OpenJ... • http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00017.html •
CVSS: 8.4EPSS: 0%CPEs: 3EXPL: 0CVE-2015-0421 – JDK: unspecified vulnerability fixed in 8u31 (Install)
https://notcve.org/view.php?id=CVE-2015-0421
21 Jan 2015 — Unspecified vulnerability in Oracle Java SE 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process. Vulnerabilidad no especificada en Oracle Java SE 8u25 permite a usuarios locales afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con el proceso de instalación. Oracle Java SE version 8 includes the Oracle Java Runtime Environment and the Oracle Java Software Development... • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html •
CVSS: 7.5EPSS: 0%CPEs: 7EXPL: 0CVE-2015-0413 – JDK: unspecified vulnerability fixed in 7u75 and 8u31 (Serviceability)
https://notcve.org/view.php?id=CVE-2015-0413
21 Jan 2015 — Unspecified vulnerability in Oracle Java SE 7u72 and 8u25 allows local users to affect integrity via unknown vectors related to Serviceability. Vulnerabilidad no especificada en Oracle Java SE 7u72 y 8u25 permite a usuarios locales afectar la integridad a a través de vectores desconocidos relacionados con Serviceability Potential security vulnerabilities have been identified in the Java Runtime Environment (JRE) and the Java Developer Kit (JDK) running on HP-UX. These vulnerabilities could allow remote unau... • http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581 •
CVSS: 9.8EPSS: 1%CPEs: 3EXPL: 0CVE-2015-0437 – OpenJDK: code generation issue (Hotspot, 8064524)
https://notcve.org/view.php?id=CVE-2015-0437
21 Jan 2015 — Unspecified vulnerability in Oracle Java SE 8u25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Vulnerabilidad no especificada en Oracle Java SE 8u25 permite a atacantes remotos afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con Hotspot. A flaw was found in the way the Hotspot component in OpenJDK in the way this component generated code for bytecode. An untrusted Java appli... • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00024.html •
CVSS: 9.1EPSS: 0%CPEs: 7EXPL: 0CVE-2015-0403 – JDK: unspecified vulnerability fixed in 6u91, 7u75 and 8u31 (Deployment)
https://notcve.org/view.php?id=CVE-2015-0403
21 Jan 2015 — Unspecified vulnerability in Oracle Java SE 6u85, 7u72, and 8u25 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. Vulnerabilidad no especificada en Oracle Java SE 6u85, 7u72, y 8u25 permite a usuarios locales afectar la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con Deployment. This update corrects several security vulnerabilities in the IBM Java Runtime Environment shipped as part of ... • http://h20564.www2.hp.com/hpsc/doc/public/display?docId=emr_na-c04583581 •