CVSS: 9.8EPSS: 1%CPEs: 5EXPL: 0CVE-2014-4288 – JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)
https://notcve.org/view.php?id=CVE-2014-4288
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6493, CVE-2014-6503, and CVE-2014-6532. Vulnerabilidad sin especificar en Oracle Java SE 6u81, 7u67, y 8u20 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores relacionados con Deployment, una vulnerabilidad diferente a CVE... • http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html •
CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2014-6458 – JDK: unspecified vulnerability fixed in 6u85, 7u71 and 8u25 (Deployment)
https://notcve.org/view.php?id=CVE-2014-6458
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. Vulnerabilidad sin especificar en Oracle Java SE 6u81, 7u67, y 8u20 permite a usuarios locales afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores relacionados con Deployment. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This... • http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html •
CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 0CVE-2014-6456 – JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)
https://notcve.org/view.php?id=CVE-2014-6456
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Vulnerabilidad sin especificar en Oracle Java SE 7u67 y 8u20 permite a atacantes remotos afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores sin especificar. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes several vulnerabilities in t... • http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html •
CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2014-6476 – JDK: unspecified vulnerability fixed in 7u71 and 8u25 (Deployment)
https://notcve.org/view.php?id=CVE-2014-6476
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 7u67 and 8u20 allows remote attackers to affect integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2014-6527. Vulnerabilidad sin especificar en Oracle Java SE 7u76 y 8u20 permite a atacantes remotos afectar a la integridad a través de vectores relacionados con Deployment, una vulnerabilidad diferente a CVE-2014-6527. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development K... • http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html •
CVSS: 8.4EPSS: 1%CPEs: 5EXPL: 0CVE-2014-6466 – Oracle Java jp2launcher.exe Privilege Escalation Vulnerability
https://notcve.org/view.php?id=CVE-2014-6466
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 6u81, 7u67, and 8u20, when running on Internet Explorer, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. Vulnerabilidad sin especificar en Oracle Java S3 u81, 7u67, and 8u20, cuando se utiliza en Internet Explorer, permite a usuarios locales afectar a la confidencialidad, la integridad y la disponibilidad a través de vectores desconocidos relacionados con Deployment. This vulnerability allows rem... • http://lists.opensuse.org/opensuse-security-announce/2014-11/msg00021.html •
CVSS: 5.5EPSS: 0%CPEs: 11EXPL: 0CVE-2014-6512 – OpenJDK: DatagramSocket connected socket missing source check (Libraries, 8039509)
https://notcve.org/view.php?id=CVE-2014-6512
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3 and R28.3.3 allows remote attackers to affect integrity via unknown vectors related to Libraries. Vulnerabilidad sin especificar en Oracle Java SE 5.0u71, 6u81, 7u67, y 8u20; Java SE Embedded 7u60; y JRockit R27.8.3 y R28.3.3 permite a atacantes remotos afectar a la integridad a través de vectores relacionados con las librerías. It was discovered that the DatagramSocket implementation in Open... • http://linux.oracle.com/errata/ELSA-2014-1633.html • CWE-345: Insufficient Verification of Data Authenticity •
CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0CVE-2014-6468 – OpenJDK: insufficient SharedArchiveFile checks (Hotspot, 8044269)
https://notcve.org/view.php?id=CVE-2014-6468
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 8u20 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Vulnerabilidad sin especificar en Oracle Java S3 8u20 permite a usuarios locales afectar a la confidencialidad, la integridad, y la disponibilidad a través de vectores desconocidos relacionados con Hotspot. It was discovered that the Hotspot component in OpenJDK failed to properly handle malformed Shared Archive files. A local attacker able to mod... • http://linux.oracle.com/errata/ELSA-2014-1636 •
CVSS: 5.5EPSS: 3%CPEs: 12EXPL: 0CVE-2014-6457 – OpenJDK: Triple Handshake attack against TLS/SSL connections (JSSE, 8037066)
https://notcve.org/view.php?id=CVE-2014-6457
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20; Java SE Embedded 7u60; and JRockit R27.8.3, and R28.3.3 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE. Vulnerabilidad sin especificar en Oracle Java SE 5.0u71, 6u81, 7u67, y 8u20; Java SE Embedded 7u60; y JRockit R27.8.3, y R28.3.3 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores relacionados con JSSE. It was discovered that the TLS/SSL implement... • http://linux.oracle.com/errata/ELSA-2014-1633.html •
CVSS: 5.5EPSS: 0%CPEs: 8EXPL: 0CVE-2014-6502 – OpenJDK: LogRecord use of incorrect CL when loading ResourceBundle (Libraries, 8042797)
https://notcve.org/view.php?id=CVE-2014-6502
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 5.0u71, 6u81, 7u67, and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Libraries. Vulnerabilidad sin especificar en Oracle Java SE 5.0u71, 6u81, 7u67 y 8u20, y Java SE Embedded 7u60, permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con las librerías. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Deve... • http://linux.oracle.com/errata/ELSA-2014-1633.html •
CVSS: 5.5EPSS: 1%CPEs: 4EXPL: 0CVE-2014-6519 – OpenJDK: missing BootstrapMethods bounds check (Hotspot, 8041717)
https://notcve.org/view.php?id=CVE-2014-6519
15 Oct 2014 — Unspecified vulnerability in Oracle Java SE 7u67 and 8u20, and Java SE Embedded 7u60, allows remote attackers to affect integrity via unknown vectors related to Hotspot. Vulnerabilidad sin especificar en Oracle Java SE 7u67 y 8u20, y Java SE Embedded 7u60, permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionados con el Hotspot. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Kit. Multiple flaws... • http://linux.oracle.com/errata/ELSA-2014-1633.html •