Vulnerability of the Java Platform software platform, allowing attackers to modify data

The vulnerability of the Java Platform is related to errors in the code. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through the use of the Java Web Start application or Java applet...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the RMI subsystem of the Java Platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a Java Web Start application or Java applet, from a remote location...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the 2D software platform of Java Platform is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via an Java Web Start application or Java applet, operating remotely...

Vulnerability of the Java Platform software platform, allowing attackers to modify data

The vulnerability of the Java Platform software platform’s sub-component is related to errors in the code. Exploiting this vulnerability allows a malicious actor to modify data remotely through an Java Web Start application or Java applet...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the Java Platform’s sub-component, Serialization, is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a Java Web Start application or Java applet, from a remote location...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the Java Platform software platform’s sub-component is related to errors in the code. Exploiting this vulnerability allows a malicious actor, operating locally, to execute arbitrary code using a Java Web Start application or Java applet...

Vulnerability of the Java Platform software platform, allowing a perpetrator to execute arbitrary code

The vulnerability of the Java Platform’s CORBA subsystem is related to errors in the code. Exploiting this vulnerability allows a malicious actor to execute arbitrary code via a Java Web Start application or Java applet, from a remote location...

Vulnerability of the Java Platform software platform, which allows attackers to gain access to protected information

The vulnerability of the 2D software platform of Java Platform is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information through a Java Web Start application or Java applet...

Mozilla: JavaScript garbage collection crash with Java applet (MFSA 2015-130)

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service incorrect garbage collection and application crash or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript...

Slack: File upload XSS (Java applet) on http://slackatwork.com/

The web application supports file uploads and I was able to upload a Java Applet .class/.jar file. If a web browser loads a Java applet from a trusted site, the browser provides no security warning. If an attacker can upload a CLASS/JAR file with an applet, the file is executed even if the web...

CVE-2015-7196

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service incorrect garbage collection and application crash or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript...

UBUNTU-CVE-2015-7196

Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a Java plugin is enabled, allow remote attackers to cause a denial of service incorrect garbage collection and application crash or possibly execute arbitrary code via a crafted Java applet that deallocates an in-use JavaScript...

JavaScript garbage collection crash with Java applet — Mozilla

Mozilla community member Vytautas Staraitis reported an issue with the interaction of Java applets and JavaScript. The Java plugin can deallocate a JavaScript wrapper when it is still in use, which leads to a JavaScript garbage collection crash. This crash is potentially exploitable...

PT-2015-2464

Name of the Vulnerable Software and Affected Versions Java Platform affected versions not specified Description The issue is related to errors in the code of the Java Platform. It can be exploited by a remote attacker to gain read access to protected information using a Java Web Start application...

PT-2015-2551

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u85 through 8u60 Description The issue is related to errors in the code of the Deployment subcomponent of the Java Platform. It may allow a local attacker to execute arbitrary code using a Java Web Start application or...

PT-2015-2476

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 8u60 Java SE Embedded version 8u51 Description The issue allows remote attackers to affect confidentiality through vectors related to RMI. It is related to errors in the code of the Java Platform, which ca...

PT-2015-2477

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Description The issue is related to an unspecified vulnerability in the Deployment component of Oracle Java SE, which can be exploited by remote attackers to affect integrity via unknown vectors...

PT-2015-2491

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 6u101 Oracle Java SE versions 7u85 through 7u85 Oracle Java SE versions 8u60 through 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Java Platform's RMI...

PT-2015-2513

Name of the Vulnerable Software and Affected Versions Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Java Platform's RMI subcomponent. Exploitation of this issue may allow a remote attacker to execute arbitrary co...

PT-2015-2478

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u60 Description The issue is related to an unspecified vulnerability in the Java Platform, which is caused by errors in the code. This vulnerability can be exploited by a remote attacker to affect confidentiality,...