Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the 2D software platform of Java Platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via an Java Web Start application or Java applet, operating remotely...

Vulnerability of the Java Platform software platform, allowing attackers to modify data

The vulnerability of the Java Platform software platform’s sub-component is related to errors in the code. Exploiting this vulnerability allows a malicious actor to modify data remotely through an Java Web Start application or Java applet...

Vulnerability of the Java Platform software platform, allowing attackers to modify data

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through the use of the Java Web Start application or Java applet...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via the Java Web Start application or Java applet, from a remote location...

Vulnerability of the Java Platform software platform, which allows attackers to gain access to protected information

The vulnerability of the 2D software platform of Java Platform is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information through a Java Web Start application or Java applet...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the Java Platform software platform’s sub-component is related to errors in the code. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary code using a Java Web Start application or Java applet...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the Java Platform’s CORBA subsystem is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a Java Web Start application or Java applet, from a remote location...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the Java Platform’s sub-component, Serialization, is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a Java Web Start application or Java applet, from a remote location...

Mozilla: JavaScript garbage collection crash with Java applet (MFSA 2015-130)

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service incorrect garbage collection and application crash or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript...

Slack: File upload XSS (Java applet) on http://slackatwork.com/

The web application supports file uploads and I was able to upload a Java Applet .class/.jar file. If a web browser loads a Java applet from a trusted site, the browser provides no security warning. If an attacker can upload a CLASS/JAR file with an applet, the file is executed even if the web...

CVE-2015-7196

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service incorrect garbage collection and application crash or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript...

UBUNTU-CVE-2015-7196

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service incorrect garbage collection and application crash or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript...

JavaScript garbage collection crash with Java applet — Mozilla

Mozilla community member Vytautas Staraitis reported an issue with the interaction of Java applets and JavaScript. The Java plugin can deallocate a JavaScript wrapper when it is still in use, which leads to a JavaScript garbage collection crash. This crash is potentially exploitable...

PT-2015-2478

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u60 Description The issue is related to an unspecified vulnerability in the Java Platform, which is caused by errors in the code. This vulnerability can be exploited by a remote attacker to affect confidentiality,...

PT-2015-2493

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Oracle Java SE Embedded version 8u51 Description The issue is related to errors in the CORBA subcomponent code of the Java Platform. It may allow a remote attacker to execute arbitrary code using a...

PT-2015-2569

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 8u60 Java SE Embedded version 8u51 Description The issue allows remote attackers to affect confidentiality via vectors related to JGSS. It is related to errors in the code of the JGSS subcomponent of the...

PT-2015-2471

Name of the Vulnerable Software and Affected Versions Java Platform affected versions not specified Description The issue is related to errors in the code of the Java Platform. It may allow a remote attacker to gain read access to protected information using a Java Web Start application or a Java...

PT-2015-2473

Name of the Vulnerable Software and Affected Versions Java Platform affected versions not specified Description The issue is related to errors in the code of the Java Platform. It allows a remote attacker to gain read access to protected information using a Java Web Start application or a Java...

PT-2015-2529

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u85 through 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the 2D subcomponent of the Java Platform. It allows remote attackers to affect confidentiality via unknown vector...

PT-2015-2525

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the 2D subcomponent code of the Java Platform. It allows remote attackers to affect confidentiality, integrity, and...