CVSS: 7.5EPSS: 1%CPEs: 8EXPL: 0CVE-2014-4252 – OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)
https://notcve.org/view.php?id=CVE-2014-4252
16 Jul 2014 — Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security. Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60, y 8u5 permite a atacantes remotos afectar la confidencialidad a través de vectores desconocidos relacionados con Security. It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could ... • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html •
CVSS: 5.9EPSS: 6%CPEs: 10EXPL: 0CVE-2014-4263 – OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)
https://notcve.org/view.php?id=CVE-2014-4263
16 Jul 2014 — Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement." Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60, y 8u5, y JRockit R27.8.2 y R28.3.2, permite a atacantes remotos afectar a la confidencialidad y la integridad a través de vectores desconocidos relacionados con el 'Acuerdo de Claves Diffie-Hellman' It was disc... • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html •
CVSS: 9.8EPSS: 10%CPEs: 8EXPL: 0CVE-2014-4216 – OpenJDK: Incorrect generic signature attribute parsing (Hotspot, 8037076)
https://notcve.org/view.php?id=CVE-2014-4216
16 Jul 2014 — Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60 y 8u5 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Hotspot. It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the clas... • http://marc.info/?l=bugtraq&m=140852886808946&w=2 •
CVSS: 9.8EPSS: 1%CPEs: 8EXPL: 0CVE-2014-4218 – OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009)
https://notcve.org/view.php?id=CVE-2014-4218
16 Jul 2014 — Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries. Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60 y 8u5 permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionados con Libraries. It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could possibly us... • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html •
CVSS: 9.1EPSS: 1%CPEs: 12EXPL: 0CVE-2014-2401 – JDK: unspecified vulnerability fixed in 5.0u75, 6u75, 7u55 and 8u5 (2D)
https://notcve.org/view.php?id=CVE-2014-2401
16 Apr 2014 — Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D. Vulnerabilidad no especificada en Oracle Java SE 5.0u61, 6u71, 7u51, y 8; JavaFX 2.2.51; y Java SE Embedded 7u51 permite a atacantes remotos afectar la confidencialidad a través de vectores relacionados con 2D. Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Devel... • http://marc.info/?l=bugtraq&m=140852886808946&w=2 •
CVSS: 9.8EPSS: 1%CPEs: 19EXPL: 0CVE-2014-0460 – OpenJDK: missing randomization of JNDI DNS client query IDs (JNDI, 8030731)
https://notcve.org/view.php?id=CVE-2014-0460
16 Apr 2014 — Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI. Vulnerabilidad no especificada en Oracle Java SE 5.0u61, 6u71, 7u51, y 8; JRockit R27.8.1 y R28.3.1; y Java SE Embedded 7u51 permite a atacantes remotos afectar a la confidencialidad e integridad mediante vectores relacionados con JNDI. The java-1.7.0-openjdk packages provide the OpenJDK 7 Ja... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 •
CVSS: 10.0EPSS: 10%CPEs: 22EXPL: 0CVE-2014-0457 – Oracle Java ScriptEngineManager Sandbox Bypass Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2014-0457
16 Apr 2014 — Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Vulnerabilidad sin especificar en Oracle Java SE 5.0u61, SE 6u71, 7u51, y 8; JRockit R27.8.1 y R28.3.1; y Java SE Embedded 7u51 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados co... • http://marc.info/?l=bugtraq&m=140852974709252&w=2 •
CVSS: 9.1EPSS: 1%CPEs: 22EXPL: 0CVE-2014-0453 – OpenJDK: RSA unpadding timing issues (Security, 8027766)
https://notcve.org/view.php?id=CVE-2014-0453
16 Apr 2014 — Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Security. Vulnerabilidad no especificada en Oracle Java SE 5.0u61, 6u71, 7u51, y 8; JRockit R27.8.1 y R28.3.1; y Java SE Embedded 7u51 permite a atacantes remotos afectar la confidencialidad y la integridad a través de vectores desconocidos relacionados con la seguridad. The java-1.7.0-open... • http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10698 •
CVSS: 9.8EPSS: 3%CPEs: 16EXPL: 0CVE-2014-2427 – OpenJDK: remove insecure Java Sound provider caching (Sound, 8026163)
https://notcve.org/view.php?id=CVE-2014-2427
16 Apr 2014 — Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound. Vulnerabilidad no especificada en Oracle Java SE 5.0u61, 6u71, 7u51, y 8, y Java SE Embedded 7u51, permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con el Sound. The java-1.7.0-openjdk packages provide the OpenJDK ... • http://marc.info/?l=bugtraq&m=140852886808946&w=2 •
CVSS: 9.8EPSS: 3%CPEs: 16EXPL: 0CVE-2014-2412 – OpenJDK: AWT thread context handling (AWT, 8025010)
https://notcve.org/view.php?id=CVE-2014-2412
16 Apr 2014 — Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vulnerability than CVE-2014-0451. Vulnerabilidad no especificada en Oracle Java SE 5.0u61, 6u71, SE 7u51, y 8, y Java SE Embedded 7u51, permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores relacionados con AWT, una vulnerabilidad diferente... • http://marc.info/?l=bugtraq&m=140852886808946&w=2 •