Fixes 29 records
Priority MEDIUM 53
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vec…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07418 · Published 2014-04-15 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related t…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06765 · Published 2014-04-16 · Fixed
Priority MEDIUM 52
Unspecified vulnerability in Oracle Java SE 5.0u61, SE 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality, integrity, and availability via unknown…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06765 · Published 2014-04-16 · Fixed
Priority MEDIUM 49
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05963 · Published 2014-04-16 · Fixed
Priority MEDIUM 48
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vuln…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05486 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05173 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Sound.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAXB.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, SE 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JAX-WS, a different vulnerab…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT, a different vul…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-16 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 7u51 and 8 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment.
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.05173 · Published 2014-04-15 · Fixed
Priority MEDIUM 41
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05072 · Published 2014-04-15 · Fixed
Priority MEDIUM 40
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vuln…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04078 · Published 2014-04-16 · Fixed
Priority MEDIUM 40
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Security.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04666 · Published 2014-04-16 · Fixed
Priority LOW 36
The png_do_expand_palette function in libpng before 1.6.8 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via (1) a PLTE chunk of zero bytes or (2) a NULL palette, re…
CVSS 3.1MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.04692 · Published 2014-01-12 · Fixed CWE-476
Priority LOW 35
The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of componen…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0973 · Published 2013-11-15 · Fixed CWE-200
Priority LOW 34
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment.
CVSS 2.0MEDIUM 6.4· Network · No auth · Interaction — · EPSS 0.03155 · Published 2014-04-16 · Fixed
Priority LOW 33
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via vectors related to JNDI.
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.04334 · Published 2014-04-16 · Fixed
Priority LOW 33
Unspecified vulnerability in Oracle Java SE 7u51 and 8, and Java SE Embedded 7u51, allows remote attackers to affect availability via unknown vectors related to 2D.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.04082 · Published 2014-04-16 · Partial fix
Priority LOW 30
The IBMSecureRandom component in the IBMJCE and IBMSecureRandom cryptographic providers in IBM SDK Java Technology Edition 5.0 before Service Refresh 16 FP6, 6 before Service Refresh 16, 6.0.1 before Service Refresh 8, 7…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.02093 · Published 2014-05-26 · Fixed CWE-310
Priority LOW 29
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality via unknown vectors related to 2D.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03611 · Published 2014-04-16 · Fixed
Priority LOW 29
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect confidentiality via unknown vectors related to Deployment.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03155 · Published 2014-04-15 · Fixed
Priority LOW 27
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 allows remote attackers to affect confidentiality and integrity via unknown vectors related to…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.04993 · Published 2014-04-16 · Fixed
Priority LOW 22
Unspecified vulnerability in Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JavaFX 2.2.51; and JRockit R27.8.1 and R28.3.1 allows remote authenticated users to affect integrity via unknown vectors related to Javadoc.
CVSS 2.0LOW 3.5· Network · Low privileges · Interaction — · EPSS 0.02566 · Published 2014-04-16 · Fixed
Priority LOW 21
The unpacker::redirect_stdio function in unpack.cpp in unpack200 in OpenJDK 6, 7, and 8; Oracle Java SE 5.0u61, 6u71, 7u51, and 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51 does not securely create temporary…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00456 · Published 2014-02-10 · Partial fix CWE-59
Priority LOW 20
Unspecified vulnerability in Oracle Java SE 6u71, 7u51, and 8, and Java SE Embedded 7u51, allows remote attackers to affect integrity via unknown vectors related to Deployment.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.03611 · Published 2014-04-16 · Fixed