CVSS: 8.1EPSS: 5%CPEs: 164EXPL: 0CVE-2013-0429 – OpenJDK: PresentationManager incorrectly shared (CORBA, 7141694)
https://notcve.org/view.php?id=CVE-2013-0429
02 Feb 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue involves the creation of a single PresentationManager that is shared across multiple thr... • http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907460 •
CVSS: 9.8EPSS: 0%CPEs: 94EXPL: 0CVE-2013-0430 – JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Install)
https://notcve.org/view.php?id=CVE-2013-0430
02 Feb 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38, allows local users to affect confidentiality, integrity, and availability via unknown vectors related to the installation process of the client. Vulnerabilidad no especificada en el componente Java Runtime Environment (JRE) en Oracle Java SE v7 hasta Update 11 y v6 hasta Update 38, permite a usuarios locales afectar la confidencialiad, integridad y disponibilidad mediante ... • http://marc.info/?l=bugtraq&m=136733161405818&w=2 •
CVSS: 8.1EPSS: 2%CPEs: 241EXPL: 0CVE-2013-0432 – OpenJDK: insufficient clipboard access premission checks (AWT, 7186952)
https://notcve.org/view.php?id=CVE-2013-0432
02 Feb 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality and integrity via vectors related to AWT. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue is related to "insufficient clipboard access premission checks." Vulnerabilidad no ... • http://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=907219 •
CVSS: 8.1EPSS: 2%CPEs: 164EXPL: 0CVE-2013-0433 – OpenJDK: InetSocketAddress serialization issue (Networking, 7201071)
https://notcve.org/view.php?id=CVE-2013-0433
02 Feb 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect integrity via unknown vectors related to Networking. NOTE: the previous information is from the February 2013 CPU. Oracle has not commented on claims from another vendor that this issue allows remote attackers to avoid triggering an exception during the deserialization of invalid InetSocketAddre... • http://icedtea.classpath.org/hg/release/icedtea6-1.11/file/icedtea6-1.11.6/NEWS •
CVSS: 10.0EPSS: 16%CPEs: 94EXPL: 0CVE-2012-3213 – Oracle Java NativeJavaConstructor Class Serialization Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2012-3213
02 Feb 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting. Vulnerabilidad sin especificar en el componente Java Runtime Environment (JRE) en Oracle Java SE 7 a la Update 11 y 6 a la Update 38 , permite a atacantes remotos comprometer la integridad, disponibilidad y confidencialidad a través de vectores no especif... • http://marc.info/?l=bugtraq&m=136439120408139&w=2 •
CVSS: 10.0EPSS: 2%CPEs: 94EXPL: 0CVE-2012-3342 – JDK: unspecified vulnerability fixed in 6u39 and 7u13 (Deployment)
https://notcve.org/view.php?id=CVE-2012-3342
02 Feb 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs listed in the February 2013 CPU. Vulnerabilidad no especificada en el componente Java Runtime Environment (JRE) en Oracle Java SE v7 hasta Update 11 y v6 hasta Update 38 permite a atacantes remotos afectar la con... • http://marc.info/?l=bugtraq&m=136439120408139&w=2 •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2013-1490
https://notcve.org/view.php?id=CVE-2013-1490
31 Jan 2013 — Unspecified vulnerability in Oracle Java SE 7 Update 11 (JRE 1.7.0_11-b21) allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors, aka "Issue 51," a different vulnerability than CVE-2013-0431. NOTE: as of 20130130, this vulnerability does not contain any independently-verifiable details, and there is no vendor acknowledgement. A CVE identifier is being assigned because this vulnerability has received significant public attention, and the original researcher has an ... • http://arstechnica.com/security/2013/01/critical-java-vulnerabilies-confirmed-in-latest-version •
CVSS: 10.0EPSS: 3%CPEs: 8EXPL: 0CVE-2013-1489 – 7: bypass of the security level setting in browser plugin (Deployment, SE-2012-01 Issue 53)
https://notcve.org/view.php?id=CVE-2013-1489
31 Jan 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 10 and Update 11, when running on Windows using Internet Explorer, Firefox, Opera, and Google Chrome, allows remote attackers to bypass the "Very High" security level of the Java Control Panel and execute unsigned Java code without prompting the user via unknown vectors, aka "Issue 53" and the "Java Security Slider" vulnerability. Una Vulnerabilidad no especificada en el componente Java Runtime Environment (... • http://blogs.computerworld.com/malware-and-vulnerabilities/21693/yet-another-java-security-flaw-discovered-number-53 •
CVSS: 9.8EPSS: 90%CPEs: 12EXPL: 1CVE-2013-0431 – Oracle JRE Sandbox Bypass Vulnerability
https://notcve.org/view.php?id=CVE-2013-0431
31 Jan 2013 — Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbox via unspecified vectors related to JMX, aka "Issue 52," a different vulnerability than CVE-2013-1490. Una Vulnerabilidad no especificada en el componente Java Runtime Environment (JRE) en Java SE versión 7 hasta Update 11 y OpenJDK versión 7 de Oracle, permite a los atacantes remotos asistidos por el usuario ... • https://www.exploit-db.com/exploits/24539 • CWE-693: Protection Mechanism Failure •
CVSS: 10.0EPSS: 8%CPEs: 20EXPL: 0CVE-2012-3174 – Oracle Java Runtime Environment MethodHandle Security Manager Bypass Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2012-3174
14 Jan 2013 — Unspecified vulnerability in Oracle Java 7 before Update 11 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors, a different vulnerability than CVE-2013-0422. NOTE: some parties have mapped CVE-2012-3174 to an issue involving recursive use of the Reflection API, but that issue is already covered as part of CVE-2013-0422. This identifier is for a different vulnerability whose details are not public as of 20130114. Vulnerabilidad no especificada en Oracle Java 7 ... • http://blog.fuseyism.com/index.php/2013/01/15/security-icedtea-2-1-4-2-2-4-2-3-4-released • CWE-264: Permissions, Privileges, and Access Controls •