CVSS: 9.8EPSS: 1%CPEs: 2EXPL: 0CVE-2014-4223 – OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793)
https://notcve.org/view.php?id=CVE-2014-4223
16 Jul 2014 — Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-2483. Vulnerabilidad no especificada en Oracle Java SE 7u60 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Libraries, una vulnerabilidad diferente a CVE-2014-2483. It was discovered that the Hotspot component in O... • http://marc.info/?l=bugtraq&m=140852886808946&w=2 •
CVSS: 5.9EPSS: 0%CPEs: 10EXPL: 0CVE-2014-4263 – OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)
https://notcve.org/view.php?id=CVE-2014-4263
16 Jul 2014 — Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement." Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60, y 8u5, y JRockit R27.8.2 y R28.3.2, permite a atacantes remotos afectar a la confidencialidad y la integridad a través de vectores desconocidos relacionados con el 'Acuerdo de Claves Diffie-Hellman' It was disc... • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html •
CVSS: 9.8EPSS: 1%CPEs: 8EXPL: 0CVE-2014-4218 – OpenJDK: Clone interfaces passed to proxy methods (Libraries, 8035009)
https://notcve.org/view.php?id=CVE-2014-4218
16 Jul 2014 — Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect integrity via unknown vectors related to Libraries. Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60 y 8u5 permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionados con Libraries. It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could possibly us... • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html •
CVSS: 9.8EPSS: 2%CPEs: 7EXPL: 1CVE-2014-2483 – OpenJDK: Restrict use of privileged annotations (Libraries, 8034985)
https://notcve.org/view.php?id=CVE-2014-2483
16 Jul 2014 — Unspecified vulnerability in the Java SE component in Oracle Java SE Java SE 7u60 and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-4223. NOTE: the previous information is from the July 2014 CPU. Oracle has not commented on another vendor's claim that the issue is related to improper restriction of the "use of privileged annotations." Vulnerabilidad no especificada en el componente Ja... • http://hg.openjdk.java.net/jdk7u/jdk7u/hotspot/rev/848481af9003 •
CVSS: 9.8EPSS: 50%CPEs: 8EXPL: 0CVE-2014-4262 – OpenJDK: AtomicReferenceFieldUpdater missing primitive type check (Libraries, 8039520)
https://notcve.org/view.php?id=CVE-2014-4262
16 Jul 2014 — Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries. Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60, y 8u5 permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con las librerías It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode fro... • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html •
CVSS: 10.0EPSS: 9%CPEs: 7EXPL: 0CVE-2014-2490 – Oracle Java ResourceBundle Format String Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2014-2490
16 Jul 2014 — Unspecified vulnerability in the Java SE component in Oracle Java SE 7u60 and SE 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Vulnerabilidad no especificada en el componente Java SE en Oracle Java SE 7u60 y SE 8u5 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Hotspot. This vulnerability allows remote attackers to execute arbitrary code on vul... • http://marc.info/?l=bugtraq&m=140852886808946&w=2 • CWE-134: Use of Externally-Controlled Format String •
CVSS: 7.5EPSS: 1%CPEs: 8EXPL: 0CVE-2014-4252 – OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)
https://notcve.org/view.php?id=CVE-2014-4252
16 Jul 2014 — Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security. Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60, y 8u5 permite a atacantes remotos afectar la confidencialidad a través de vectores desconocidos relacionados con Security. It was discovered that the Hotspot component in OpenJDK did not properly verify bytecode from the class files. An untrusted Java application or applet could ... • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html •
CVSS: 9.8EPSS: 0%CPEs: 9EXPL: 0CVE-2014-2428 – JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)
https://notcve.org/view.php?id=CVE-2014-2428
16 Apr 2014 — Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment. Vulnerabilidad no especificada en Oracle Java SE 6u71, 7u51, y 8, y Java SE Embedded 7u51, permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con la implementación. Oracle Java SE version 6 includes the Oracle Java Runt... • http://marc.info/?l=bugtraq&m=140852886808946&w=2 •
CVSS: 9.1EPSS: 0%CPEs: 6EXPL: 0CVE-2014-2420 – JDK: unspecified vulnerability fixed in 6u75, 7u55 and 8u5 (Deployment)
https://notcve.org/view.php?id=CVE-2014-2420
16 Apr 2014 — Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment. Vulnerabilidad no especificada en Oracle Java SE 6u71, 7u51, y 8, y Java SE Embedded 7u51, permite a atacantes remotos afectar la integridad a través de vectores desconocidos relacionados con la implementación. Oracle Java SE version 6 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This upd... • http://marc.info/?l=bugtraq&m=140852886808946&w=2 •
CVSS: 9.8EPSS: 0%CPEs: 5EXPL: 0CVE-2014-2422 – JDK: unspecified vulnerability fixed in 7u55 and 8u5 (JavaFX)
https://notcve.org/view.php?id=CVE-2014-2422
16 Apr 2014 — Unspecified vulnerability in Oracle Java SE 7u51 and 8, and JavaFX 2.2.51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. Vulnerabilidad no especificada en Oracle Java SE 7u51 y 8, y JavaFX 2.2.51, permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes several... • http://marc.info/?l=bugtraq&m=140852886808946&w=2 •