Privilege Escalation

Java SE, Java SE Embedded and JRockit component of Oracle Java SE are vulnerable to Privilege Escalation. A remote authenticated user can exploit this flaw in the JAAS component for unauthorized creation, deletion or modification access to critical data...

Denial Of Service

Java SE, Java SE Embedded and JRockit component of Oracle Java SE are vulnerable to denial of service attacks. An attacker is able to make a Java application parse a specially crafted PNG image causing the application to consume an excessive amount of memory and crash. Affected component is 2D...

Privilege Escalation

Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to privilege escalation attacks. Affected Libraries component allows a remote attacker to exploit this flaw. Successful attacks can result in the takeover of Java SE, Java SE Embedded...

Information Disclosure

Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to information disclosure. A remote unauthenticated attacker is able to gain unauthorized read access to a subset of Java SE, Java SE Embedded accessible data via the Networking component...

Privilege Escalation

Java SE and Java SE Embedded component of Oracle Java SE are vulnerable to privilege escalation. A remote unauthenticated attacker can exploit the flaw in Hotspot component to gain elevated privileges. Successful exploitation of this vulnerability can result in takeover of Java SE, Java SE Embedd...

Unauthenticated Access

oracle java SE is vulnerable to unauthenticated access vulnerability. This exists due to not validating the length of the object identifier read from the DER input in Libraries component of OpenJDK before allocating memory to store the OID. An attacker able to make a Java application decode a...

Information Disclosure

Oracle Java SE and Java SE Embedded are vulnerable to information disclosure. A remote user can exploit a flaw in the Networking component to access sensitive information...

Sandbox Restrictions Bypass

Oracle Java SE and Java SE Embedded are vulnerable to sandbox restrictions bypass. Mishandled classloaders in the component JMX of OpenJDK allows an untrusted Java application or applet to bypass certain Java sandbox restrictions to perform unauthorized actions...

Privilege Escalation

Oracle Java SE and Java SE EmbeddedA is vulnerable to privilege escalation attacks. A remote user can exploit a flaw in the Hotspot component to gain elevated privileges and perform unauthorized actions...

Privilege Escalation

Oracle Java SE and Java SE Embedded are vulnerable to privilege escalation attacks. A remote user can manipulate the component, Hotspot with an unknown input in order to gain elevated privileges. The attacker may then be able to perform unauthorized actions...

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...

Sandbox Restrictions Bypass

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation attacks. An unspecified vulnerability allows an local users to affect confidentiality, integrity, and availability via vectors related to Libraries which leads to a denial of service attacks and an information disclosure...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation attacks. An unspecified vulnerability allows a local users to affect confidentiality, integrity, and availability via vectors related to Hotspot which leads to a denial of service attacks and an information disclosure...

Denial Of Service (DoS)

Java SE is vulnerable to denial of service DoS. An unspecified vulnerability allows an local users to affect availability via vectors related to JAXP causing the application to crash...

Denial Of Service (DoS)

java SE is vulnerable to denial of service DoS. An unspecified vulnerability allows an local users to affect availability via vectors related to JAXP causing the application to crash...

Information Disclosure

Oracle Java SE is vulnerable to information disclosure. An unspecified vulnerability allows an local users to affect confidentiality via vectors related to Hotspot and access sensitive information...

Privilege Escalation

Oracle Java SE is vulnerable to privilege escalation attacks. An unspecified vulnerability allows an local users to affect confidentiality, integrity, and availability via vectors related to Hotspot which leads to a denial of service attacks and an information disclosure...

Information Disclosure

IBM Java SE is vulnerable to information disclosure. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to conduct plaintext-recovery attacks against the...

Insecure TLS Configurations

IBM Java SE version 6 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit. This update fixes several vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java...