OpenJDK: insufficient access control checks in ImageWatched (AWT, 8174098)

Vulnerability in the Java SE component of Oracle Java SE subcomponent: AWT. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attac...

PT-2017-11109

Name of the Vulnerable Software and Affected Versions Java SE version 8u131 Java SE Embedded version 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require human interaction...

CVE-2017-10115

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with networ...

CVE-2017-10118

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JCE. Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network acces...

CVE-2017-10067

Vulnerability in the Java SE component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successfu...

CVE-2017-10096

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

CVE-2017-10176

Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 7u141 and 8u131; Java SE Embedded: 8u131; JRockit: R28.3.14. Easily exploitable vulnerability allows unauthenticated attacker with network...

PT-2017-11076

Name of the Vulnerable Software and Affected Versions Java SE version 8u131 Description The issue allows a low-privileged attacker with network access via multiple protocols to compromise Java SE, resulting in unauthorized creation, deletion, or modification access to critical data or all Java SE...

PT-2017-11072

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, 8u131 Java SE Embedded version 8u131 Description A difficult to exploit vulnerability in Java SE and Java SE Embedded allows an unauthenticated attacker with network access via multiple protocols to compromise th...

PT-2017-11066

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, and 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks require human interaction from a person other than the...

PT-2017-11112

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u141 and 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE, potentially leading to a takeover. Successful attacks require human interaction...

PT-2017-11084

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u141 and 8u131 Description The issue allows an unauthenticated attacker with network access to compromise Java SE, potentially leading to its takeover. Successful attacks require human interaction and can significantly...

PT-2017-11079

Name of the Vulnerable Software and Affected Versions Java SE versions 6u151, 7u141, 8u131 Java SE Embedded version 8u131 Description The issue allows an unauthenticated attacker with network access via multiple protocols to compromise Java SE and Java SE Embedded. Successful attacks require huma...

Oracle JRockit R28.3.14 Multiple Vulnerabilities (July 2017 CPU)

The version of Oracle JRockit installed on the remote Windows host is R28.3.14. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists in the 2D component that allows an unauthenticated, remote attacker to cause a denial of service condition. CVE-2017-10053 - Multip...

CVE-2017-10086

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. Supported versions that are affected are Java SE: 7u141 and 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks...

CVE-2017-10114

Vulnerability in the Java SE component of Oracle Java SE subcomponent: JavaFX. Supported versions that are affected are Java SE: 7u141 and 8u131. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Java SE. Successful attacks...

CVE-2017-10087

Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Libraries. Supported versions that are affected are Java SE: 6u151, 7u141 and 8u131; Java SE Embedded: 8u131. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple...

GLSA-201707-01 : IcedTea: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201707-01 IcedTea: Multiple vulnerabilities Multiple vulnerabilities have been discovered in IcedTea. Please review the CVE identifiers referenced below for details. Note: If the web browser plug-in provided by the...

BSA-2017-325

Security Advisory ID : BSA-2017-325 Component : JAVA SE JAXP Revision : 3.0: Final Vulnerability in the Java SE, Java SE Embedded, JRockit component of Oracle Java SE subcomponent: JAXP. Supported versions that are affected are Java SE: 6u141, 7u131 and 8u121; Java SE Embedded: 8u121; JRockit:...

BSA-2017-308

Security Advisory ID : BSA-2017-308 Component : Java Revision : 2.0: Interim Vulnerability in the Java SE, Java SE Embedded,JRockitcomponent of Oracle Java SE subcomponent: Networking. Supported versions that are affected are Java SE: 6u131, 7u121 and 8u112; Java SE Embedded: 8u111;JRockit:...