CVSS: 4.0EPSS: 0%CPEs: 10EXPL: 0CVE-2014-4263 – OpenJDK: insufficient Diffie-Hellman public key validation (Security, 8037162)
https://notcve.org/view.php?id=CVE-2014-4263
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5, and JRockit R27.8.2 and R28.3.2, allows remote attackers to affect confidentiality and integrity via unknown vectors related to "Diffie-Hellman key agreement." Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60, y 8u5, y JRockit R27.8.2 y R28.3.2, permite a atacantes remotos afectar a la confidencialidad y la integridad a través de vectores desconocidos relacionados con el 'Acuerdo de Claves Diffie-Hellman' • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html http://marc.info/?l=bugtraq&m=140852886808946&w=2 http://marc.info/?l=bugtraq&m=140852974709252&w=2 http://rhn.redhat.com/errata/RHSA-2015-0264.html http://seclists.org/fulldisclosure/2014/Dec/23 http://secunia.com/advisories/58830 http://secunia.com/adviso •
CVSS: 5.0EPSS: 1%CPEs: 8EXPL: 0CVE-2014-4252 – OpenJDK: Prevent instantiation of service with non-public constructor (Security, 8035004)
https://notcve.org/view.php?id=CVE-2014-4252
Unspecified vulnerability in Oracle Java SE 5.0u65, 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality via unknown vectors related to Security. Vulnerabilidad no especificada en Oracle Java SE 5.0u65, 6u75, 7u60, y 8u5 permite a atacantes remotos afectar la confidencialidad a través de vectores desconocidos relacionados con Security. • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html http://marc.info/?l=bugtraq&m=140852886808946&w=2 http://marc.info/?l=bugtraq&m=140852974709252&w=2 http://rhn.redhat.com/errata/RHSA-2015-0264.html http://seclists.org/fulldisclosure/2014/Dec/23 http://secunia.com/advisories/59404 http://secunia.com/adviso •
CVSS: 5.0EPSS: 1%CPEs: 4EXPL: 0CVE-2014-4266 – OpenJDK: InfoBuilder incorrect return values (Serviceability, 8033301)
https://notcve.org/view.php?id=CVE-2014-4266
Unspecified vulnerability in Oracle Java SE 7u60 and 8u5 allows remote attackers to affect integrity via unknown vectors related to Serviceability. Vulnerabilidad no especificada en Oracle Java SE 7u60 y 8u5 permite a atacantes remotos afectar a la integridad a través de vectores relacionados con Serviceability • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html http://marc.info/?l=bugtraq&m=140852886808946&w=2 http://seclists.org/fulldisclosure/2014/Dec/23 http://secunia.com/advisories/59680 http://secunia.com/advisories/59924 http://secunia.com/advisories/59987 http://secunia.com/advisories/60081 http://secunia.com/advisories/60129 http://secunia.com/advisories/60317 http://secunia.com/advisories/60485 http://secunia.com/advisories/60622 http://secunia.c •
CVSS: 9.3EPSS: 1%CPEs: 2EXPL: 0CVE-2014-4223 – OpenJDK: Incorrect handling of invocations with exhausted ranks (Libraries, 8035793)
https://notcve.org/view.php?id=CVE-2014-4223
Unspecified vulnerability in Oracle Java SE 7u60 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2014-2483. Vulnerabilidad no especificada en Oracle Java SE 7u60 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Libraries, una vulnerabilidad diferente a CVE-2014-2483. • http://marc.info/?l=bugtraq&m=140852886808946&w=2 http://seclists.org/fulldisclosure/2014/Dec/23 http://secunia.com/advisories/60485 http://secunia.com/advisories/60812 http://security.gentoo.org/glsa/glsa-201502-12.xml http://www.debian.org/security/2014/dsa-2987 http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html http://www.securityfocus.com/archive/1/534161/100/0/threaded http://www.securityfocus.com/bid/68590 http://www.securitytracker.com/id/ •
CVSS: 9.3EPSS: 9%CPEs: 6EXPL: 0CVE-2014-4219 – OpenJDK: Bytecode verification does not prevent ctor calls to this() and super() (Hotspot, 8035119)
https://notcve.org/view.php?id=CVE-2014-4219
Unspecified vulnerability in Oracle Java SE 6u75, 7u60, and 8u5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot. Vulnerabilidad no especificada en Oracle Java SE 6u75, 7u60 y 8u5 permite a atacantes remotos afectar la confidencialidad, integridad y disponibilidad a través de vectores desconocidos relacionados con Hotspot. • http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00026.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00033.html http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00036.html http://marc.info/?l=bugtraq&m=140852974709252&w=2 http://rhn.redhat.com/errata/RHSA-2015-0264.html http://seclists.org/fulldisclosure/2014/Dec/23 http://secunia.com/advisories/59404 http://secunia.com/advisories/59680 http://secunia.com/advisories/59924 http: •