CVE-2013-0437

CVE-2013-0437 affects Oracle Java SE 7 up to Update 11 and JavaFX 2.2.4 and earlier. The vulnerability is described as unspecified with remote attackers potentially impacting confidentiality, integrity, and availability via unknown vectors related to 2D. The NVD entry assigns a CVSS v2 base score...

CVE-2013-0449

CVE-2013-0449 is an unspecified vulnerability in the Oracle Java SE 7 JRE (Deployment area) up to Update 11 that could allow remote confidentiality impact. Public details in provided documents are limited; no exploitation specifics are given. Remediation across connected advisories generally invo...

CVE-2013-1475

CVE-2013-1475 is an IBM-referenced vulnerability describing an I/O/serialization cache collision in ObjectStreamClass: when two classes share the same serialPersistentFields, a type-confusion risk arises. IBM documents tie this to CORBA-related Java runtimes and note an affected IBM product stack...

CVE-2013-0446

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than other CVEs...

CVE-2013-0426

CVE-2013-0426 is present in IBM Tivoli System Automation for Integrated Operations Management (TADDM) 7.2.x family where the IBM JRE is embedded. The vulnerability concerns Logging Level objects with non-final methods that could enable code execution across applets; IBM’s remediation is to upgrad...

CVE-2012-3342

CVE-2012-3342 is listed in IBM security advisories as part of a set of Java/JRE related flaws. IBM reports affected products as IBM WebSphere ILOG JRules V7.1.1 (Windows with a provided JDK) and IBM Operational Decision Manager V7.5/V8.0 (all distributed platforms). Remediation is via APAR RS0128...

CVE-2013-0445

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 7 through Update 11, 6 through Update 38, and 5.0 through Update 38, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and availability via vectors related to AWT. NOTE: the...

CVE-2013-0427

CVE-2013-0427 is an unspecified vulnerability in the Java Runtime Environment (JRE) component used by Oracle Java SE 7 (up to Update 11), 6 (up to Update 38), and 5.0 (up to Update 38), as well as OpenJDK 6/7. The MiracleLinux AXSA-2013-99 advisory groups CVE-2013-0427 with other JRE flaws and st...

CVE-2013-1478

CVE-2013-1478 is an unspecified vulnerability in the Java Runtime Environment (JRE) affecting Oracle Java SE 7 up to Update 11, OpenJDK 6/7, and older JREs, with vectors related to 2D. Disclosures describe an issue where an attacker could craft a harmful java.awt.image.Raster object to trigger me...

CVE-2013-0428

CVE-2013-0428 is reported for IBM’s embedded JRE in IBM TADDM (Tivoli Application Dependency Discovery Manager) 7.2.x. The connected IBM bulletin describes the flaw as: in the java.lang.reflect package, package access permission checks may fail under certain conditions, enabling reflective proxie...

CVE-2013-1473

CVE-2013-1473 is described as an unspecified vulnerability in the JRE Deployment component of Oracle Java SE 7 (up to Update 11) and Java SE 6 (up to Update 38). Connected IBM bulletins identify this CVE among a set of IBM JRE/JRules/ODM vulnerabilities and provide remediation: RS01283 with Windo...

CVE-2013-1479

CVE-2013-1479 describes an unspecified vulnerability in the Oracle JRE component within Oracle Java SE 7 up to Update 11, Java SE 6 up to Update 38, and JavaFX 2.2.4 and earlier that could allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors. The conne...

CVE-2013-0419

CVE-2013-0419 affects Oracle Java SE JRE: Java 7 up to update 11 and Java 6 up to update 38. The vulnerability, linked to Deployment, is described as unspecified with unknown vectors, and impacts confidentiality, integrity, and availability. In IBM WebSphere contexts, remediation references APAR ...

CVE-2013-0448

CVE-2013-0448 is linked to Oracle Java SE 7 up to Update 11, with an unspecified integrity impact and remote attack potential via unknown vectors. Connected sources corroborate that CVEs around Oracle Java/JRE 7-1.7.x were disseminated and that remediation commonly involves upgrading to newer Ora...

CVE-2013-0450

CVE-2013-0450 affects Oracle JRE 7 up to Update 11, Oracle JDK 6/7 up to Update 38, OpenJDK 6/7. Root cause per sources: improper access control context checks in JMX RequiredModelMBean. Impact: remote attackers can affect confidentiality, integrity, and availability via JMX-related vectors. Publ...

CVE-2013-0433

CVE-2013-0433 is an unspecified vulnerability in the Java Runtime Environment (JRE) component affecting Oracle Java SE 7 up to Update 11, 6 up to Update 38, and 5.0 up to Update 38, plus OpenJDK 6/7. The issue is related to Networking and, per the MiracleLinux AXSA entries, may involve deserializ...

CVE-2012-3213

CVE-2012-3213 is listed in connected IBM advisories alongside multiple JRE vulnerabilities. The Nessus/NASL entry confirms an unspecified vulnerability in Oracle JRE (Java SE 7u11 and 6u38) that could affect confidentiality, integrity, and availability through scripting, with remote exploitation....

CVE-2013-0442

CVE-2013-0442 affects the Java Runtime Environment (Oracle Java SE 7u11, 6u38, 5.0u38 and earlier; OpenJDK 6/7) with an unspecified vulnerability in the JRE related to AWT that could allow remote attackers to compromise confidentiality, integrity and availability. The MiracleLinux and other Nessu...

CVE-2013-0443

CVE-2013-0443 is an unspecified vulnerability in the Java Runtime Environment (JRE) affecting Oracle Java SE 7 up to Update 11, Java SE 6 up to Update 38, Java SE 5.0 up to Update 38, and OpenJDK 6/7. The issue allows remote attackers to affect confidentiality and integrity via vectors related to...

CVE-2013-0434

CVE-2013-0434 is a disclosed vulnerability in the Java Runtime Environment (JRE) affecting Oracle Java SE 7 up to Update 11, OpenJDK 6/7, and related JAXP components. The issue is described as an unspecified confidentiality impact via JAXP vectors, with a note that claims relate to the loadProper...