PT-2015-2473

Name of the Vulnerable Software and Affected Versions Java Platform affected versions not specified Description The issue is related to errors in the code of the Java Platform. It allows a remote attacker to gain read access to protected information using a Java Web Start application or a Java...

PT-2015-2476

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 8u60 Java SE Embedded version 8u51 Description The issue allows remote attackers to affect confidentiality through vectors related to RMI. It is related to errors in the code of the Java Platform, which ca...

PT-2015-2478

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 8u60 Description The issue is related to an unspecified vulnerability in the Java Platform, which is caused by errors in the code. This vulnerability can be exploited by a remote attacker to affect confidentiality,...

PT-2015-2491

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 6u101 Oracle Java SE versions 7u85 through 7u85 Oracle Java SE versions 8u60 through 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Java Platform's RMI...

PT-2015-2493

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Oracle Java SE Embedded version 8u51 Description The issue is related to errors in the CORBA subcomponent code of the Java Platform. It may allow a remote attacker to execute arbitrary code using a...

PT-2015-2525

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the 2D subcomponent code of the Java Platform. It allows remote attackers to affect confidentiality, integrity, and...

PT-2015-2526

Name of the Vulnerable Software and Affected Versions Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Java Platform's Libraries component. It may allow a remote attacker to execute arbitrary code using Java Web Sta...

PT-2015-2527

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue allows remote attackers to affect confidentiality via vectors related to JAXP. It is associated with errors in the code of the JAXP subcomponent ...

PT-2015-2529

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u85 through 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the 2D subcomponent of the Java Platform. It allows remote attackers to affect confidentiality via unknown vector...

PT-2015-2554

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Libraries subcomponent of the Java Platform. It allows remote attackers to affect confidentiality and...

PT-2015-2555

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Java SE Embedded version 8u51 Description The issue is related to errors in the code of the Java Platform's Serialization component. It may allow a remote attacker to execute arbitrary code using...

PT-2015-2569

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101 through 8u60 Java SE Embedded version 8u51 Description The issue allows remote attackers to affect confidentiality via vectors related to JGSS. It is related to errors in the code of the JGSS subcomponent of the...

PT-2015-2477

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 6u101, 7u85, and 8u60 Description The issue is related to an unspecified vulnerability in the Deployment component of Oracle Java SE, which can be exploited by remote attackers to affect integrity via unknown vectors...

PT-2015-2551

Name of the Vulnerable Software and Affected Versions Oracle Java SE versions 7u85 through 8u60 Description The issue is related to errors in the code of the Deployment subcomponent of the Java Platform. It may allow a local attacker to execute arbitrary code using a Java Web Start application or...

PT-2015-2502

Name of the Vulnerable Software and Affected Versions Oracle Java SE version 7u85 Description The issue affects the confidentiality and integrity of the system, allowing remote attackers to exploit it through unknown vectors related to Libraries. This vulnerability is associated with errors in th...

ICU: integer overflow in LETableReference verifyLength() (OpenJDK 2D, 8077520)

An information leak flaw was found in the 2D component in OpenJDK. An untrusted Java application or applet could use this flaw to bypass certain Java sandbox restrictions...

OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)

A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...

OpenJDK: incorrect permissions check in resource loading (Beans, 8068320)

A flaw was discovered in the Beans component in OpenJDK. An untrusted Java application or applet could use these flaws to bypass certain Java sandbox restrictions...

PT-2015-04: JNLP File Inclusion in Inductive Automation Ignition

The specialists of the Positive Research center have detected a JNLP File Inclusion vulnerability in Inductive Automation Ignition. Adding any symbols to users’ web request for starting Java applet allow including into jnlp file in the field indicating applet to be executed. By manipulating this...

ICU: font parsing OOB read (OpenJDK 2D, 8055489)

A boundary check flaw was found in the font parsing code in the 2D component in OpenJDK. A specially crafted font file could allow an untrusted Java application or applet to disclose portions of the Java Virtual Machine memory...