CVE-2010-4451

CVE-2010-4451 is observed in Oracle Java SE/Java for Business 6 Update 23 and earlier on Windows, related to Install during Java Update. The vulnerability affects confidentiality, integrity, and availability via unknown vectors; the OpenVAS/OSV entries and the 2011 Java CPU advisory indicate mult...

CVE-2010-4452

CVE-2010-4452 is a vulnerability in the Deployment component of the Oracle (formerly Sun) Java Runtime Environment (JRE) and Java for Business (versions 6 Update 23 and earlier). The root cause is insufficient validation of URLs supplied by an implicitly trusted applet, specifically within the fi...

CVE-2010-4466

CVE-2010-4466 concerns a vulnerability in the Deployment component of Oracle Java SE/JRE (and Java for Business) affecting multiple platforms. According to connected Red Hat advisory RHSA-2011:0870, it is categorized as a JDK Deployment-component vulnerability and is identified among several CVEs...

CVE-2010-4465

CVE-2010-4465 is described in the MiracleLinux AXSA:2011-61:02 advisory as an unspecified vulnerability in the Java Runtime Environment that affects Oracle Java SE/Java for Business up to certain older builds. The issue is associated with Swing and allows remote untrusted Java Web Start applicati...

CVE-2010-4467

CVE-2010-4467 is documented as a vulnerability in Oracle Java SE/JRE 6 Update 10 through 6 Update 23 that could allow remote untrusted Java Web Start applications and untrusted applets to affect confidentiality, integrity, and availability via deployment-related vectors. Connected advisories show...

CVE-2010-4469

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, an...

CVE-2010-4448

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors...

CVE-2010-4476

The Double.parseDouble method in Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier, as used in OpenJDK, Apache, JBossweb, and other products, allows remote attackers to cause a denial of service via a...

CVE-2010-4422

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment...

JDK unspecified vulnerability in Deployment component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown...

JDK unspecified vulnerability in Deployment component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier for Windows, Solaris, and, Linux; 5.0 Update 27 and earlier for Windows; and 1.4.229 and earlier for Windows allows remote untrusted Java Web Start applications and...

JDK unspecified vulnerability in JDBC component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, and 5.0 Update 27 and earlier, allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity via unknown vectors...

JDK unspecified vulnerability in Deployment component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality via unknown...

OpenJDK Launcher incorrect processing of empty library path entries (6983554)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier for Solaris and Linux; 5.0 Update 27 and earlier for Solaris and Linux; and 1.4.229 and earlier for Solaris and Linux allows local standalone applications to affect...

OpenJDK DNS cache poisoning by untrusted applets (6981922)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors...

JDK unspecified vulnerability in Deployment component

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 10 through 6 Update 23 allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related t...

OpenJDK DNS cache poisoning by untrusted applets (6981922)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.229 earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect integrity via unknown vectors...

Important: Red Hat Security Advisory: java-1.6.0-openjdk security update

Updated java-1.6.0-openjdk packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

OpenJDK JAXP untrusted component state manipulation (6927050)

Unspecified vulnerability in the Java Runtime Environment JRE in Oracle Java SE and Java for Business 6 Update 23, and, and earlier allows remote attackers to affect availability via unknown vectors related to JAXP and unspecified APIs. NOTE: the previous information was obtained from the Februar...

PT-2011-1572

Name of the Vulnerable Software and Affected Versions Java Runtime Environment JRE versions 5.0 Update 27 and earlier Java Runtime Environment JRE versions 6 Update 23 and earlier Description The issue allows remote untrusted Java Web Start applications and untrusted Java applets to compromise...