CentOS 6 : java-1.7.0-openjdk (CESA-2014:0026)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5898 and CVE-2014-0375...

JDK: unspecified vulnerability fixed in 6u71 and 7u51 (Deployment)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different vulnerability than CVE-2013-5889, CVE-2013-5902, CVE-2014-0410, CVE-2014-0418, and CVE-2014-0424...

Critical: Red Hat Security Advisory: java-1.7.0-oracle security update

Updated java-1.7.0-oracle packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6 Supplementary. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give...

OpenJDK: XML canonicalizer mutable strings passed to untrusted code (Security, 8026417)

Unspecified vulnerability in Oracle Java SE 6u65 and 7u45, Java SE Embedded 7u45, and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Security. NOTE: the previous information is from the January 2014 CPU. Oracle has not commented on third-party claims that...

PT-2014-1253

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote...

PT-2014-1226

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote...

PT-2014-1225

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Description The issue is related to a component...

PT-2014-1231

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u51 and 8 Java SE Embedded version 7u51 lcms versions prior to 2.6-r1 Java Runtime Environment affected versions not specified Jrockit affected versions not specified Java Development Kit affected versions not specifie...

PT-2014-1260

Name of the Vulnerable Software and Affected Versions Java Runtime Environment affected versions not specified Java Development Kit affected versions not specified Description The issue is related to a component of the Java platform, specifically the Deployment component. It allows a remote...

PT-2014-1252

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Oracle Java SE affected versions not specified Description The issue is related to a vulnerability in the Java Development Kit, Java...

RHEL 5 : java-1.7.0-openjdk (RHSA-2014:0027)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

PT-2014-1264

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u65 through 7u45 Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Description The issue affects confidentiality, integrity, and availability. It is related t...

PT-2014-1273

Name of the Vulnerable Software and Affected Versions Java Development Kit affected versions not specified Java Runtime Environment affected versions not specified Oracle JDK affected versions not specified Oracle JRE affected versions not specified Description The issue allows a remote attacker ...

JDK: unspecified vulnerability fixed in 7u45 (Deployment)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, and JavaFX 2.2.40 and earlier allows remote attackers to affect integrity via unknown vectors related to Deployment...

OpenJDK: JPEGImageReader and JPEGImageWriter missing band size checks (2D, 8013510)

Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, and Java SE Embedded 7u40 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D, a different vulnerability tha...

flash-plugin: multiple code execution flaws (APSB13-26)

Adobe Flash Player before 11.7.700.252 and 11.8.x and 11.9.x before 11.9.900.152 on Windows and Mac OS X and before 11.2.202.327 on Linux, Adobe AIR before 3.9.0.1210, Adobe AIR SDK before 3.9.0.1210, and Adobe AIR SDK & Compiler before 3.9.0.1210 allow attackers to execute arbitrary code or caus...

JDK: unspecified sandbox bypass (ORB)

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to execute arbitrary code via unspecified vectors...

JDK: unspecified sandbox bypass (XML)

Unspecified vulnerability in IBM Java SDK 7.0.0 before SR6 allows remote attackers to execute arbitrary code via unspecified vectors...

JDK: unspecified sandbox bypass (JVM)

Unspecified vulnerability in IBM Java SDK 5.0.0 before SR16 FP4, 7.0.0 before SR6, 6.0.1 before SR7, and 6.0.0 before SR15 allows remote attackers to access restricted classes via unspecified vectors...