CVE-2014-0429

CVE-2014-0429 is an unspecified vulnerability in the Java 2D component affecting Oracle Java SE 5.0u61, 6u71, 7u51, 8; JRockit R27.8.1 and R28.3.1; and Java SE Embedded 7u51. Impact is described as complete confidentiality, integrity, and availability violations via unknown vectors in the 2D comp...

CVE-2014-4263

CVE-2014-4263 is an unspecified security vulnerability with partial confidentiality and partial integrity impact (no availability impact) affecting IBM Java SDK/JRE components used in IBM SAN Volume Controller and Storwize family, among others. IBM’s remediation guidance consistently recommends u...

CVE-2015-4000

CVE-2015-4000 is the Logjam vulnerability: when a server enables DHE_EXPORT ciphers and the client does not, the TLS handshake may downgrade to 512‑bit export‑grade DH, allowing a MITM to decrypt traffic. Public details describe the issue in TLS as a downgrade attack on Diffie–Hellman key exchang...

CVE-2016-3427

CVE-2016-3427 is an unspecified vulnerability in Oracle Java SE (affecting 6u113, 7u99, 8u77) and JRockit, tied to the Java Management Extensions (JMX) component. Exploitation can affect confidentiality, integrity, and availability via JMX-related vectors; the issue is described as an unspecified...

CVE-2018-3183

CVE-2018-3183 affects OpenJDK/OpenJDK-based runtimes (Java SE/Java SE Embedded/JRockit) specifically the Scripting engine. Public records in connected advisories show affected OpenJDK versions including Java 8u182 and 11 (and 8u181 for embedded/JRockit R28.3.19). The underlying issue is a scripti...

CVE-2018-3180

CVE-2018-3180 is an Oracle Java SE/Embedded/JRockit vulnerability disclosed across multiple advisories. The connected documents confirm affected products and components and provide concrete impact scopes: vulnerable are OpenJDK/OpenJDK-based builds of Java SE/Embedded and related JSSE/JNDI/Hotspo...

CVE-2018-3214

CVE-2018-3214 affects Oracle Java SE components (Sound, JRockit, JSSE, JNDI, Networking) across Java SE 6u201/7u191/8u182, Java SE Embedded 8u181, and JRockit R28.3.19. Descriptions indicate unauthenticated network access could lead to partial DOS, data exposure or data modification depending on ...

CVE-2018-2952

CVE-2018-2952 affects OpenJDK/OpenJDK-derived Java runtimes (Java SE 7/8 and JRockit) in the Concurrency component. The root cause is insufficient index validation in PatternSyntaxException getMessage(), enabling unauthenticated network-based exploitation that can cause a denial of service via me...

CVE-2018-3149

CVE-2018-3149 affects Oracle Java SE family (Java SE, Java SE Embedded, JRockit) in the JNDI component, with vulnerable Java runtimes including Java 6u201, 7u191, 8u182 and 11; Java SE Embedded 8u181; JRockit R28.3.19. The root cause is within the Java components referenced (JNDI) and can allow a...

CVE-2013-5780

CVE-2013-5780 is described as an unspecified vulnerability in Oracle Java/JVM libraries affecting confidentiality (partial) and is rated CVSS 4.3 (NVD). IBM advisories reiterate that the IBM SDK/JAVA components (versions 5, 6, 7) are affected and provide remediation by upgrading to newer IBM JRE/...

CVE-2013-5803

CVE-2013-5803 involves an unspecified vulnerability in Oracle Java SE 7u40 and earlier (also Java 6u60, 5.0u51, JRockit, and Java SE Embedded 7u40 and earlier) that could affect availability via vectors related to JGSS. Public disclosures in IBM advisories map this to the IBM SDK for Java, which ...

CVE-2013-5797

CVE-2013-5797 is an Oracle Java SE vulnerability described as an unspecified issue in Java components (7u40 and earlier, 6u60 and earlier, 5.0u51 and earlier, JRockit, JavaFX 2.2.40 and earlier) that could allow remote authenticated users to affect integrity via unknown vectors related to Javadoc...

CVE-2013-5823

CVE-2013-5823 is an unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier that could allow remote attackers to affect availability via unknown vectors related to Secur...

CVE-2013-5802

CVE-2013-5802 : Unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier. Existence of vulnerability in the JAXP pathway could affect confiden...

CVE-2013-5825

CVE-2013-5825 is an unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, JRockit R27.7.6 and earlier, and Java SE Embedded 7u40 and earlier. It allows remote attackers to affect availability via vectors re...

CVE-2018-2799

CVE-2018-2799 is an OpenJDK/Oracle Java SE vulnerability affecting the JAXP component. Affected are Java SE: 7u171, 8u162, 10; Java SE Embedded: 8u161; JRockit: R28.3.17. The issue permits an unauthenticated attacker with network access to trigger a partial denial of service. The vulnerability is...

CVE-2013-5804

CVE-2013-5804 is described as an unspecified vulnerability in Oracle Java SE 7u40 and earlier, Java SE 6u60 and earlier, Java SE 5.0u51 and earlier, JRockit R28.2.8 and earlier, and JRockit R27.7.6 and earlier, enabling remote attackers to affect confidentiality and integrity via unknown vectors ...

CVE-2017-10355

CVE-2017-10355 is documented across multiple openJDK/OpenJDK-derived advisories (CentOS, Debian, Amazon, IBM, etc.) as a networking vulnerability in the FtpClient component of OpenJDK’s Java SE/Java SE Embedded. Technical details in connected sources specify that the FtpClient did not set default...

CVE-2013-5782

CVE-2013-5782 is one of multiple Oracle Java/IBM SDK vulnerabilities disclosed in October 2013 CPU updates. The IBM bulletins enumerate affected IBM SDK/JAVA components (IBM SDK Java Technology Edition versions 5, 6, 7 and associated WebSphere products) and describe the root issue as an unspecifi...

CVE-2018-2798

CVE-2018-2798 affects Oracle Java/OpenJDK with the AWT component (and related JRE/JDK bundles). The connected advisories describe an issue: unbounded memory allocation during deserialization in the Container (AWT) path, enabling potentially unauthenticated network-accessed exploitation. Public di...

CVE-2015-4748

CVE-2015-4748 is an OpenJDK/OpenJDK family vulnerability affecting OCSP verification in the Libraries component. Description across connected documents shows the root cause: OCSP responses with no nextUpdate were treated as indefinitely valid, potentially allowing revoked certificates to be accep...

CVE-2011-3556

CVE-2011-3556 is a remote, RMI-related vulnerability in the Java platform (Oracle Java SE JDK/JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier) that can affect confidentiality, integrity, and availability. Connected sources corrobora...

CVE-2015-4749

CVE-2015-4749 is a JNDI DNS resolution issue in OpenJDK where DnsClient may fail to remove outgoing DNS request information after errors, potentially enabling memory consumption blocks and denial of service. Public advisories (Debian, CentOS/Red Hat, Ubuntu arches, IBM AIX) reference OpenJDK 6/7/...

CVE-2018-2800

CVE-2018-2800 affects Oracle Java SE/JRockit (RMI) and is reflected in multiple public advisories. Affected Java SE: 6u181, 7u171, 8u162; JRockit: R28.3.17. The vulnerability involves the Java SE JRockit RMI component and can allow an unauthenticated network-access attacker to compromise data via...

CVE-2015-2625

CVE-2015-2625 is an OpenJDK/JSSE vulnerability where TLS/SSL certificate identity verification could incorrectly use reverse-DNS-derived hostnames for IP address-based connections, potentially allowing a certificate issued for a different identity to be accepted. Public notes reference affected J...

CVE-2017-10281

CVE-2017-10281 affects Oracle/OpenJDK components (Java SE, Java SE Embedded, JRockit) with the Serialization subcomponent. The vulnerability is exploitable remotely via network protocols and can be triggered by sandboxed Web Start/Applet use or by supplying data to APIs, potentially causing parti...

CVE-2018-2794

CVE-2018-2794 is an OpenJDK/Java SE issue affecting multiple deserialization-related paths (including JCEKS, security/JAXP, and RMI) with a vulnerability in a range of Java versions (e.g., 6u/7u/8u and 10). Connected advisories confirm affected products and provide fixes: Debian openjdk-7 update ...

CVE-2015-2601

CVE-2015-2601 involves non-constant-time comparisons in the Java Cryptography Extension (JCE) within OpenJDK/OpenJDK-derived stacks. The issue could allow an attacker to obtain sensitive information via timing-side channels in cryptographic operations. The connected documents indicate affected co...

CVE-2017-10345

CVE-2017-10345 affects Oracle Java SE/Embedded/JRockit serialization. The vulnerability allows an unauthenticated attacker with network access to compromise the target, potentially causing a partial denial of service; exploitation is difficult and may require human interaction. Affected versions ...

CVE-2017-3241

OpenJDK/OpenJDK RMI component deserialization vulnerability (CVE-2017-3241) affects Java SE 6u131, 7u121, 8u112; Java SE Embedded 8u111; JRockit R28.3.12. Root cause: deserialization of untrusted inputs in RMI registry/DCG, exploitable via APIs with network access; not via Web Start/applets. Cons...

CVE-2016-5546

CVE-2016-5546 affects OpenJDK/OpenJDK Libraries (Java SE Libraries). Connected documents confirm affected Java versions: Java 6u131, 7u121, 8u112 (and Java SE Embedded 8u111). The issue is described as non-canonical DER encoding of ECSDA signatures, potentially affecting signature validation. Exp...

CVE-2017-10115

CVE-2017-10115 is a covert timing-channel vulnerability in the DSA implementation of the JCE in OpenJDK/OpenJRE/JRockit, affecting Java SE 6u151, 7u141, 8u131 and related packages (e.g., OpenJDK 7 on Debian/Ubuntu, RHEL/CentOS, Arch Linux advisories). A remote attacker could potentially exploit t...

CVE-2017-10135

CVE-2017-10135 is a timing-channel vulnerability in the PKCS#8 implementation of the JCE component of OpenJDK/OpenJDK-derived JREs. Public sources in the dataset describe it as a covert timing channel flaw that could enable a remote attacker to glean information about the private key via timing a...

CVE-2017-3252

CVE-2017-3252 details (from provided documents): A vulnerability in Oracle Java SE, Java SE Embedded, and JRockit (subcomponent JAAS) affects Java SE 6u131, 7u121, 8u112; Java SE Embedded 8u111; JRockit R28.3.12. The issue is exploitable under network conditions by a low-privilege attacker with n...

CVE-2018-2815

CVE-2018-2815 is a deserialization flaw in Oracle Java SE, Java SE Embedded, and JRockit (Serialization component) that can be exploited over network without authentication to cause a partial denial of service. Affected are Java SE 6u181, 7u171, 8u162, 10; Java SE Embedded 8u161; JRockit R28.3.17...

CVE-2017-10295

CVE-2017-10295 affects OpenJDK (Java SE/Java SE Embedded) Networking: HttpURLConnection/HttpsURLConnection failed to detect newline characters in URLs, enabling potential HTTP header injection via attacker-provided URLs. Public notices in connected docs show affected package openjdk-7/openjdk-8 w...

CVE-2013-4002

CVE-2013-4002 affects the Xerces2 Java XML parser. XMLScanner.java in Xerces2 Java Parser before 2.12.0 (as used in various JREs and Oracle/Jakarta distributions) could allow remote denial of service via vectors related to XML attribute names. IBM and other vendors document DoS impact on affected...

CVE-2017-10116

CVE-2017-10116 affects Oracle Java SE / Java SE Embedded / JRockit (OpenJDK-related vulnerabilities also reflected in various advisories). The vulnerability arises in the Security component’s LDAPCertStore where LDAP referrals to arbitrary URLs could be used by an unauthenticated network attacker...

CVE-2018-2633

CVE-2018-2633 affects OpenJDK/OpenJDK-based runtimes (Java SE/Java SE Embedded/JRockit) via the JNDI LDAP path, specifically the LDAPCertStore in JNDI. The vulnerability arises from insecure handling of LDAP referrals, which could allow a remote attacker to cause a security impact by manipulating...

CVE-2017-10243

CVE-2017-10243 affects Oracle Java SE, Java SE Embedded, and JRockit (JAX-WS subcomponent). Affected: Java SE 6u151, 7u141, 8u131; Java SE Embedded 8u131; JRockit R28.3.14. Exploitation: unauthenticated attacker with network access via multiple protocols can read a subset of data and cause a part...

CVE-2018-2603

CVE-2018-2603 is an OpenJDK/Oracle Java Libraries vulnerability: unbounded memory allocation when reading DER-encoded input in the Libraries (and related JNDI/AWT/JMX contexts). This can allow an unauthenticated attacker with network access via multiple protocols to cause a partial denial of serv...

CVE-2018-2579

CVE-2018-2579 affects OpenJDK components (Java SE/OpenJDK/JRockit) across multiple platforms; connected sources document an issue with unsynchronized access to encryption key data in Libraries, enabling potential information disclosure under network access. Public advisories show affected package...

CVE-2018-2783

CVE-2018-2783 is an Oracle Java SE/Java SE Embedded/JRockit security vulnerability exploitable by an unauthenticated attacker over network connections to cause high confidentiality and integrity impact (CVSS 3.0 base 7.4). Affected product families and versions include Java SE 6u181, 7u161, 8u152...

CVE-2018-2629

CVE-2018-2629 corresponds to a GSS context use-after-free vulnerability in the OpenJDK JGSS component (Oracle Java SE/JRockit/JRE). Affected products/versions include Oracle Java SE (client/server), Java SE Embedded, and JRockit with affected releases such as Java SE 6u171, 7u161, 8u152, 9.0.1; J...

CVE-2018-2797

CVE-2018-2797 (OpenJDK/OpenJDK for Java SE/Java SE Embedded/JRockit; subcomponent: JMX) concerns unbounded memory allocation during deserialization in the JMX-related path, enabling a network-exposed attacker to cause a partial denial of service. Public advisories and vendor pages (CentOS CESA-20...

CVE-2016-0483

CVE-2016-0483 affects Oracle Java SE 6u105, 7u91, 8u66; Java SE Embedded 8u65; and JRockit R28.3.8. Described as an unspecified vulnerability with potential to affect confidentiality, integrity, and availability via vectors related to AWT; some sources note a heap-based buffer overflow in readIma...

CVE-2018-2599

CVE-2018-2599 (Oracle Java SE/JRockit JNDI) affects Java SE 6u171, 7u161, 8u152 and 9.0.1; Java SE Embedded 8u151; JRockit R28.3.16. It is exploitable over network with unauthenticated access and can lead to partial data integrity/availability impact. Connected advisories corroborate multiple aff...

CVE-2018-2618

CVE-2018-2618 affects the Java cryptography (JCE) key-agreement in OpenJDK/OpenJDK-derived OpenJDK builds such as Java SE, Java SE Embedded, and JRockit. The connected sources describe insufficient strength of keys in the JCE component, enabling an unauthenticated attacker with network access to ...

CVE-2018-2796

CVE-2018-2796 causes unbounded memory allocation during deserialization in PriorityBlockingQueue (Concurrency) in Oracle/OpenJDK Java SE. Affected: Java SE/Embedded and JRockit components with Java 7u171, 8u162 and 10, plus related JDK/JRE packages (e.g., OpenJDK builds) per the CVE references. I...

CVE-2017-10053

CVE-2017-10053 is an OpenJDK/OpenJDK 2D JPEGImageReader vulnerability. The issue affects Java SE components (Java SE, Java SE Embedded, JRockit) with affected versions including Java 6u151, 7u141, 8u131 (and 8u131 for Java SE Embedded; JRockit R28.3.14). The vulnerability could allow an unauthent...