CVSS: 9.1EPSS: 0%CPEs: 7EXPL: 0CVE-2014-0423 – OpenJDK: XXE issue in decoder (Beans, 8023245)
https://notcve.org/view.php?id=CVE-2014-0423
15 Jan 2014 — Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote authenticated users to affect confidentiality and availability via unknown vectors related to Beans. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that this issue is an XML External Entity (XXE) vulnerability in DocumentHandler.java, related to Beans decoding. Vulnerabilidad no especificada en Oracle ... • http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/995b32f013f5 •
CVSS: 10.0EPSS: 9%CPEs: 5EXPL: 0CVE-2014-0428 – OpenJDK: insufficient security checks in IIOP streams (CORBA, 8025767)
https://notcve.org/view.php?id=CVE-2014-0428
15 Jan 2014 — Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to "insufficient security checks in IIOP streams," which allows attackers to escape the sandbox. Vulnerabilidad no especificada en Oracle Java SE 5.0u55, 6u65 y 7u4... • http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/0a879f00b698 •
CVSS: 9.8EPSS: 2%CPEs: 5EXPL: 0CVE-2013-5884 – OpenJDK: insufficient security checks in CORBA stub factories (CORBA, 8026193)
https://notcve.org/view.php?id=CVE-2013-5884
15 Jan 2014 — Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is related to an incorrect check for code permissions by CORBA stub factories. Vulnerabilidad no especificada en Oracle java SE 5.0u55, 6u65 y 7u45 y Java SE Embedded 7u45, permite a atacantes remotos afe... • http://hg.openjdk.java.net/jdk7u/jdk7u/corba/rev/b1548473f261 •
CVSS: 9.8EPSS: 6%CPEs: 6EXPL: 0CVE-2013-5896 – OpenJDK: com.sun.corba.se. should be restricted package (CORBA, 8025022)
https://notcve.org/view.php?id=CVE-2013-5896
15 Jan 2014 — Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect availability via vectors related to CORBA. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that com.sun.corba.se and its sub-packages are not included on the restricted package list. Vulnerabilidad no especificada en Oracle Java SE 5.0u55, 6u64 y 7u45; y Java SE Embedded 7u45; permite a atacantes remotos afectar... • http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/694ad155b344 •
CVSS: 10.0EPSS: 23%CPEs: 8EXPL: 0CVE-2013-5907 – Oracle Java TrueType LookupCount Buffer Overflow Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2013-5907
15 Jan 2014 — Unspecified vulnerability in Oracle Java SE 5.0u55, 6u65, and 7u45; JRockit R27.7.7 and R28.2.9; Java SE Embedded 7u45; and OpenJDK 7 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that the issue is due to incorrect input validation in LookupProcessor.cpp in the ICU Layout Engine, which allows attackers to cause a denial of service (cr... • http://hg.openjdk.java.net/jdk7u/jdk7u/jdk/rev/9d29c19f1de1 •
CVSS: 7.5EPSS: 2%CPEs: 34EXPL: 0CVE-2013-5851 – OpenJDK: XML stream factory finder information leak (JAXP, 8013502)
https://notcve.org/view.php?id=CVE-2013-5851
16 Oct 2013 — Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JAXP. Vulnerabilidad no especificada en Oracle Java SE v7u40 y anteriores, y Java SE Embedded v7u40 y anteriores permite a atacantes remotos afectar a la confidencialidad a través de vectores relacionados con JAXP. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Ki... • http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html •
CVSS: 10.0EPSS: 0%CPEs: 45EXPL: 0CVE-2013-5854 – JDK: multiple unspecified vulnerabilities fixed in 7u45 (JavaFX)
https://notcve.org/view.php?id=CVE-2013-5854
16 Oct 2013 — Unspecified vulnerability in Oracle Java SE 7u40 and earlier and JavaFX 2.2.40 and earlier allows remote attackers to affect confidentiality via unknown vectors. Vulnerabilidad no especificada en Oracle Java SE v7u40 y anteriores, y JavaFX v2.2.40 y anteriores permite a atacantes remotos afectar a la confidencialidad a través de vectores desconocidos. Oracle Java SE version 7 includes the Oracle Java Runtime Environment and the Oracle Java Software Development Kit. This update fixes several vulnerabilities ... • http://marc.info/?l=bugtraq&m=138674073720143&w=2 •
CVSS: 8.8EPSS: 1%CPEs: 118EXPL: 0CVE-2013-5852 – JDK: unspecified vulnerability fixed in 7u45 (Deployment)
https://notcve.org/view.php?id=CVE-2013-5852
16 Oct 2013 — Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5787, CVE-2013-5789, CVE-2013-5824, and CVE-2013-5832. Vulnerabilidad no especificada en Oracle Java SE 7u40 y versiones anteriores, Java SE 6u60 y versiones anteriores y Java SE Embedded 7u40 y versiones anteriores permite ... • http://marc.info/?l=bugtraq&m=138674031212883&w=2 •
CVSS: 5.3EPSS: 2%CPEs: 34EXPL: 0CVE-2013-5800 – OpenJDK: default keytab path information leak (JGSS, 8022931)
https://notcve.org/view.php?id=CVE-2013-5800
16 Oct 2013 — Unspecified vulnerability in Oracle Java SE 7u40 and earlier and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via vectors related to JGSS. Vulnerabilidad no especificada en Oracle Java SE v7u40 y anteriores, y Java SE Embedded v7u40 y anteriores permite a atacantes remotos afectar a la confidencialidad a través de vectores relacionados con JGSS. The java-1.7.0-openjdk packages provide the OpenJDK 7 Java Runtime Environment and the OpenJDK 7 Java Software Development Ki... • http://lists.opensuse.org/opensuse-security-announce/2013-11/msg00010.html •
CVSS: 7.8EPSS: 2%CPEs: 196EXPL: 0CVE-2013-5801 – JDK: unspecified vulnerability fixed in 7u45 (2D)
https://notcve.org/view.php?id=CVE-2013-5801
16 Oct 2013 — Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality via unknown vectors related to 2D. Vulnerabilidad no especificada en Oracle Java SE 7u40 y anteriores, Java SE 6u60 y anteriores, Java SE 5.0u51 y anteriores, y Java SE Embedded 7u40 y anteriores permite a atacantes remotos afectar la confidencialidad a través de vectores desconocidos relacionados con 2D. O... • http://lists.apple.com/archives/security-announce/2013/Oct/msg00001.html •