CVE-2013-2447

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality via unknown vectors related to Networking. NOTE: the previous...

CVE-2013-2437

Technical details about CVE-2013-2437 are not publicly available in the provided documents. Monitor for updates from Oracle and OSV entries for any concrete details, affected versions, and remediation.

CVE-2013-2450

CVE-2013-2450 is an unspecified vulnerability in the Java Runtime Environment (JRE) Serialization path reported in MiracleLinux AXSA-2013-553:03. The MiracleLinux advisory indicates affected: MiracleLinux 3 with java-1.6.0-openjdk (OpenJDK 7/6 family as referenced) and lists CVE-2013-1500 through...

CVE-2013-2458

CVE-2013-2458 (Oracle JRE/OpenJDK) affects the Java Runtime Environment in Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, allowing remote attackers to affect confidentiality and integrity via unknown vectors related to Libraries. The description in the Initial document is non-specific abo...

CVE-2013-2471

CVE-2013-2471 is a remote-code-execution type vulnerability in the Java 2D/awt stack affecting Oracle JRE/JDK and OpenJDK (across 6 and 7 lines) identified by multiple advisories. The issue is described as memory corruption in the 2D component related to IntegerComponentRaster size checks, with p...

CVE-2013-2453

CVE-2013-2453 is documented in the MiracleLinux AXSA-2013-553:03 advisory and in Oracle's JRE CPU notes as an unspecified vulnerability in the Java Runtime Environment related to JMX. The MiracleLinux block confirms the issue affects OpenJDK/OpenJRE lines and mirrors the description that the vuln...

CVE-2013-2412

CVE-2013-2412 is an unspecified vulnerability in the Java Runtime Environment (JRE) Serviceability area that Oracle/OpenJDK-related CPUs list as allowing remote/confidentiality impact via unknown vectors. In connected documents, MiracleLinux AXSA-2013-553:03 documents CVE-2013-2412 as one of mult...

CVE-2013-2469

CVE-2013-2469 is a Java Runtime Environment (JRE) vulnerability reported across IBM advisories related to IBM Java SDK shipped with Tivoli/TPC, WebSphere Real Time, and ITM components. The issue affects JREs included in Oracle Java SE 7u21 and earlier, 6u45 and earlier, 5.0u45 and earlier, and Op...

CVE-2013-2461

CVE-2013-2461 is an unspecified vulnerability in the Java Runtime Environment components (Oracle JRE 7 Update 21 and earlier; JRockit/OpenJDK 7; and OpenJDK 7) enabling remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, with a specifi...

CVE-2013-2443

CVE-2013-2443 is documented across connected IBM security bulletins as a Java JRE vulnerability (Libraries component) with confidentiality/integrity impact and unknown attack vectors. IBM remediation guidance centers on applying the provided fixes in the affected IBM products (e.g., WebSphere/ODM...

CVE-2013-1500

CVE-2013-1500 is described in multiple IBM advisories as an unspecified vulnerability in the Java Runtime Environment (JRE) 2D component that can affect confidentiality and integrity, primarily via local vectors. MiracleLinux/OpenJDK/Oracle Java references (CVE-2013-1500) indicate affected platfo...

CVE-2013-2451

CVE-2013-2451 is one of the Oracle June 2013 Java CPU vulnerabilities addressed by IBM Java SDK/JRE. The IBM-issued bulletins indicate an unspecified vulnerability in the JRE Networking component that could affect confidentiality, integrity, and availability via unknown vectors. IBM remediation p...

CVE-2013-2447

CVE-2013-2447 is listed in MiracleLinux advisories as an unspecified vulnerability in the Java Runtime Environment (JRE) component affecting OpenJDK/OpenJDK builds. The affected products are MiracleLinux 3 (java-1.6.0-openjdk) and MiracleLinux 4 (java-1.7.0-openjdk). The description notes remote ...

CVE-2013-2472

CVE-2013-2472 is an unspecified vulnerability in the JRE component of Oracle Java SE up to 7u21, 6u45, 5.0u45 and OpenJDK 7, with unknown vectors related to 2D. It is described as potentially bypassing the Java sandbox, impacting confidentiality, integrity, and availability. No public remediation...

CVE-2013-2460

CVE-2013-2460 is a Java Runtime Environment (JRE) vulnerability affecting Oracle Java SE 7 Update 21 and earlier, and OpenJDK 7, related to Serviceability. IBM advisories map this to JRE components and list remediation via June 2013 CPU fixes and updates to IBM Java SDK/JRE shipped with affected ...

CVE-2013-2453

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 21 and earlier and 6 Update 45 and earlier allows remote attackers to affect integrity via vectors related to JMX. NOTE: the previous information is from the June 2013 CPU. Oracle has not commented ...

CVE-2013-2456

CVE-2013-2456 is an Oracle/OpenJDK JRE/OpenJDK vulnerability described as an unspecified issue in the JRE component related to Serialization, with a note that it may involve improper access checks for subclasses in ObjectOutputStream. Connected documentation from MiracleLinux AXSA-2013-553:03 con...

CVE-2013-2470

CVE-2013-2470 affects Oracle Java SE (7u21 and earlier, 6u45 and earlier, 5.0u45 and earlier) and OpenJDK 7. The flaw is a memory corruption/heap-buffer overflow in the 2D ImagingLib.lookupByteBI path, enabling a remote attacker to execute arbitrary code or potentially terminate the JVM. Public a...

CVE-2013-2452

CVE-2013-2452 is referenced in IBM WebSphere Real Time advisories as an unspecified vulnerability in the JRE Libraries component that could allow a remote attacker to obtain sensitive information. Affected products/versions: IBM WebSphere Real Time v2 and v3 SR4-FP2 and earlier. Remediation: upgr...

CVE-2013-2467

CVE-2013-2467 is a Java Runtime Environment (JRE) vulnerability listed in IBM advisories as addressed by upgrading the IBM JRE to 1.7 SR5 or later (or switching to Oracle JRE) for affected IBM products such as Host On-Demand. IBM’s bulletin groups CVE-2013-2467 among many JRE-related flaws fixed ...