CVSS: 9.3EPSS: 1%CPEs: 2EXPL: 0CVE-2015-4901 – JDK: unspecified vulnerability fixed in 8u65 (JavaFX)
https://notcve.org/view.php?id=CVE-2015-4901
Unspecified vulnerability in Oracle Java SE 8u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to JavaFX. Vulnerabilidad no especificada en Oracle Java SE 8u60 permite a atacantes remotos afectar a la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con JavaFX. • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html http://rhn.redhat.com/errata/RHSA-2015-1926.html http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html http://www.securityfocus.com/bid/77226 http://www.securitytracker.com/id/1033884 https://security.gentoo.org/glsa/201603-11 https://access.redhat.com/security/cve/CVE-2015-4901 https://bugzilla.redhat.com/show_bug.c •
CVSS: 5.0EPSS: 7%CPEs: 9EXPL: 0CVE-2015-4911 – OpenJDK: incomplete supportDTD enforcement (JAXP, 8130078)
https://notcve.org/view.php?id=CVE-2015-4911
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4893. Vulnerabilidad no especificada en Oracle Java SE 6u101, 7u85 y 8u60; Java SE Embedded 8u51 y JRockit R28.3.7 permite a atacantes remotos afectar a la disponibilidad a través de vectores relacionados con JAXP, una vulnerabilidad diferente a CVE-2015-4803 y CVE-2015-4893. • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html http://lists.opensuse.org/opensuse-security-announce/2015-12 •
CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 0CVE-2015-4916 – JDK: unspecified vulnerability fixed in 8u65 (JavaFX)
https://notcve.org/view.php?id=CVE-2015-4916
Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via unknown vectors, a different vulnerability than CVE-2015-4906 and CVE-2015-4908. Vulnerabilidad no especificada en Oracle Java SE 8u60 y JavaFX 2.2.85 permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos, una vulnerabilidad diferente a CVE-2015-4906 y CVE-2015-4908. • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2016-01/msg00045.html http://rhn.redhat.com/errata/RHSA-2015-1926.html http://www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html http://www.securityfocus.com/bid/77221 http://www.securitytracker.com/id/1033884 https://security.gentoo.org/glsa/201603-11 https://access.redhat.com/security/cve/CVE-2015-4916 https://bugzilla.redhat.com/show_bug.c •
CVSS: 5.0EPSS: 0%CPEs: 6EXPL: 0CVE-2015-4840 – OpenJDK: OOB access in CMS code (2D, 8086092)
https://notcve.org/view.php?id=CVE-2015-4840
Unspecified vulnerability in Oracle Java SE 7u85 and 8u60, and Java SE Embedded 8u51, allows remote attackers to affect confidentiality via unknown vectors related to 2D. Vulnerabilidad no especificada en Oracle Java SE 7u85 y 8u60 y Java SE Embedded 8u51, permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos relacionados con 2D. • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html http://lists.opensuse.org/opensuse-security-announce/2015-12 • CWE-125: Out-of-bounds Read •
CVSS: 5.0EPSS: 3%CPEs: 9EXPL: 0CVE-2015-4893 – OpenJDK: incomplete MaxXMLNameLimit enforcement (JAXP, 8086733)
https://notcve.org/view.php?id=CVE-2015-4893
Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows remote attackers to affect availability via vectors related to JAXP, a different vulnerability than CVE-2015-4803 and CVE-2015-4911. Vulnerabilidad no especificada en Oracle Java SE 6u101, 7u85 y 8u60; Java SE Embedded 8u51 y JRockit R28.3.7 permite a atacantes remotos afectar a la disponibilidad a través de vectores relacionados con JAXP, una vulnerabilidad diferente a CVE-2015-4803 y CVE-2015-4911. • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00000.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00001.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00008.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00009.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00010.html http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00019.html http://lists.opensuse.org/opensuse-security-announce/2015-12 • CWE-770: Allocation of Resources Without Limits or Throttling •