CVE-2013-2440

Technical details about CVE-2013-2440 are not provided in the connected documents. The initial description notes JRE deployment issue but lacks affected products, versions, root cause, or fixes.

CVE-2013-2423

CVE-2013-2423 is an unspecified remote vulnerability in the Java Runtime Environment (JRE) component affecting Oracle Java SE 7 (Update 17 and earlier) and OpenJDK 7. The root cause, as per connected advisories, involves hotspot-related code and unknown vectors allowing reflection/type-confusion ...

CVE-2013-2431

CVE-2013-2431 is a Java/HotSpot vulnerability reported in Oracle's April 2013 CPU. Affects Oracle Java SE 7u17 and earlier and OpenJDK 6/7; vulnerability is described as unspecified/unknown vectors in HotSpot that could breach confidentiality, integrity, and availability. Exploitation details are...

CVE-2013-2394

CVE-2013-2394 involves an unspecified vulnerability in the Oracle JRE/JVM components (JRE in Oracle Java SE 7u17 and earlier, Java SE 6u43 and earlier, 5.0u41 and earlier, and JavaFX 2.2.7 and earlier) that could affect confidentiality, integrity, and availability via unknown vectors related to 2...

CVE-2013-2417

CVE-2013-2417 is listed in MiracleLinux AXSA advisories for OpenJDK/JRE components in Oracle Java SE 7u17 and earlier (and 6u43/5.0u41 and earlier) with unspecified vectors affecting availability via Networking. The MiracleLinux AXSA-2013-427/428 and related Nessus entries enumerate CVE-2013-2417...

CVE-2013-2415

CVE-2013-2415 is an unspecified vulnerability in the Java Runtime Environment (JRE) component found in Oracle Java SE 7 Update 17 and earlier, and in OpenJDK 6 and 7, that allows local users to affect confidentiality via vectors related to JAX-WS. Connected advisories from MiracleLinux (AXSA-2013...

CVE-2013-2434

CVE-2013-2434 is an unspecified vulnerability in the JRE component of Oracle Java SE 7 (Update 17 and earlier) and JavaFX 2.2.7 and earlier. It is described as affecting confidentiality, integrity, and availability via unknown vectors related to 2D. The CVE is listed with high impact (CVSS 2.0/10...

CVE-2013-2384

CVE-2013-2384 is a font layout issue in the International Components for Unicode (ICU) library. Connected advisories indicate the problem affected ICU components as shipped in Linux distributions (e.g., icu in Debian stable/wheezy and in newer Debian releases). The Debian security entries list CV...

CVE-2013-1564

Technical details for CVE-2013-1564 are not publicly provided in the supplied connected documents. Please monitor for updates from the referenced advisories and OSV entries.

CVE-2013-1540

Technical details for CVE-2013-1540 are not provided in the connected documents; no specifics on affected products, root cause, or fixes are available here. Monitor for updates.

CVE-2013-1561

The IBM Security Bulletin RHSA-2013:0757 and related IBM JRE advisories include CVE-2013-1561 as part of a set of Java vulnerabilities addressed by IBM updates. Affected products are IBM WebSphere ILOG JRules (V7.1) on Windows with IBM JRE, and IBM Operational Decision Manager (V7.5, V8.0, V8.5) ...

CVE-2013-1563

Technical details for CVE-2013-1563 are not publicly available in the provided documents; monitor for updates.

CVE-2013-1558

CVE-2013-1558 is a vulnerability in the Java Runtime Environment (JRE) component, described as an unspecified issue that could affect confidentiality, integrity, and availability. Publicly, it is tied to Oracle Java SE 7 Update 17 and earlier and Java SE 6 Update 43 and earlier, with the attack v...

CVE-2013-1557

CVE-2013-1557 is described in multiple advisories as an unspecified vulnerability in the Java Runtime Environment (JRE) related to RMI, potentially allowing a remote attacker to affect confidentiality, integrity, and availability. Connected sources (including MiracleLinux AXSA advisories and IBM ...

CVE-2013-2415

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 Update 17 and earlier, and OpenJDK 6 and 7, allows local users to affect confidentiality via vectors related to JAX-WS. NOTE: the previous information is from the April 2013 CPU. Oracle has not commented o...

CVE-2013-1518

CVE-2013-1518 is an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE (7u17 and earlier; 6u43 and earlier; 5.0u41 and earlier) and in OpenJDK 6/7. The issue allows remote attackers to affect confidentiality, integrity, and availability via vectors related...

CVE-2013-2432

CVE-2013-2432 affects the Java Runtime Environment used in IBM WebSphere products when IBM JRE is bundled with WebSphere Application Server. IBM notes this vulnerability (in the Oracle Java CPU April 2013 family) as a high-severity issue with CVSS 10, affecting 2D vectors. The recommended remedia...

CVE-2013-2438

CVE-2013-2438 describes an unspecified vulnerability in the Java Runtime Environment (JRE) component of Oracle Java SE 7 Update 17 and earlier, related to JavaFX, that could allow remote attackers to affect integrity. The connected documents confirm this CVE is addressed by security advisories an...

CVE-2013-2416

CVE-2013-2416 is an unspecified vulnerability in the JRE component of Oracle Java SE 7 Update 17 and earlier. The description indicates it could affect integrity via unknown vectors related to Deployment; the connected IBM/OSV entries confirm it as a JRE-related issue in the 2013 Oracle CPU conte...

CVE-2013-2421

CVE-2013-2421 affects the Java Runtime Environment (JRE) in Oracle Java SE 7 Update 17 and earlier, and in OpenJDK 6/7, via an unspecified vulnerability in HotSpot that could impact confidentiality, integrity, and availability. The connected advisories enumerate affected JRE/OpenJDK versions and ...