CVE-2010-0088

CVE-2010-0088 is an Oracle Java SE/Java for Business JRE vulnerability affecting multiple older Java runtimes (e.g., Java 6 Update 18, 5.0 Update 23, 1.4.2_25, 1.3.1_27) via an unspecified vulnerability in the Java Runtime Environment. Connected sources specify the concrete issue as OpenJDK/OpenJ...

CVE-2010-3554

CVE-2010-3554 is referenced in multiple advisories as a vulnerability in the OpenJDK CORBA reflection component that was fixed by updating Java packages (e.g., IcedTea/OpenJDK builds). Connected documents confirm its inclusion in OpenJDK/OpenJDK-related patch lists and advisories; no explicit roo...

CVE-2010-3558

CVE-2010-3558 is linked to Oracle Java SE/Java for Business 6 Update 21, keyed to a Java Web Start component vulnerability. Red Hat advisories enumerate CVE-2010-3558 among multiple OpenJDK/Java Web Start issues (Java Web Start component vulnerability) and reference affected suites and required p...

CVE-2010-4447

Technical details for CVE-2010-4447 are not publicly available in the provided connected documents; monitor for updates.

CVE-2011-0872

CVE-2011-0872 affects Oracle Java SE/JRE 6 Update 25 and earlier. The vulnerability lies in the NIO component and can impact availability via unknown vectors, exploitable remotely. The connected records reference this CVE among Java-related issues and indicate later updates/patches address multip...

CVE-2010-0085

Technical details for CVE-2010-0085 are not publicly available in the provided documents. No explicit affected product/version or exploit information is provided here. Monitor for official advisories for updates.

CVE-2010-3570

CVE-2010-3570 refers to an unspecified vulnerability in the Oracle Java SE/Java for Business Deployment Toolkit, affecting Java 6 Update 21. The description shows remote attackers could impact confidentiality, integrity, and availability via unknown vectors. Connected sources indicate this family...

CVE-2013-0430

CVE-2013-0430 concerns Oracle Java SE JRE/JDK, listed in IBM GLSA-201401-30 as part of multiple Java vulnerabilities. The IBM advisories indicate affected products: IBM WebSphere ILOG JRules (V7.1.1 with Windows JDK) and IBM WebSphere Operational Decision Manager (V7.5, V8.0). The initial entry n...

CVE-2008-0628

CVE-2008-0628 affects Sun Java Runtime Environment (JRE/JDK) 6 Update 3 and earlier. The XML parsing code processes external entity references even when the “external general entities” property is false, enabling an XXE attack that can cause denial of service or allow access to restricted resourc...

CVE-2008-3113

CVE-2008-3113 affects Sun Java Web Start in Sun JDK/JRE 5.0 before Update 16 and J2SE 1.4.x before 1.4.2_18. The vulnerability is described as unspecified but allows remote attackers to create or delete arbitrary files via an untrusted application. The connected documents confirm the affected pro...

CVE-2008-5345

CVE-2008-5345 describes an unspecified vulnerability in Java Runtime Environment that affects Sun JDK/JRE up to certain old releases. The initial document lists affected products/versions: JRE/JDK 6 Update 10 and earlier; JDK/JRE 5.0 Update 16 and earlier; SDK/JRE 1.4.2_18 and earlier; and SDK/JR...

CVE-2009-3864

CVE-2009-3864 affects Sun Java JRE/JDK 5.0 before Update 22 and JDK/JRE 6 before Update 17 on non-English Windows; the Java update mechanism fails to fetch new JRE versions, leaving older releases vulnerable to pre-existing issues (Bug 6869694). Connected advisories corroborate that this CVE is a...

CVE-2010-0841

CVE-2010-0841 concerns an ImageIO/JPEGImageReader stepX integer overflow vulnerability in Oracle Java SE and Java for Business, affecting 6 Update 18, 5.0 Update 23, and 1.4.2_25. It can impact confidentiality, integrity, and availability via remote vectors as noted in the March 2010 CPU disclosu...

CVE-2010-0846

Technical details for CVE-2010-0846 are not provided in the connected documents. No concrete product/version/root-cause/impact/fix details are available here. Monitor for updates from authoritative sources.

CVE-2010-3567

CVE-2010-3567 affects Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25, with a root cause described as an out-of-bounds memory access caused by a calculation error in right-to-left text character counts for the ICU OpenType font rendering implementation. This leads to potential ...

CVE-2010-4473

CVE-2010-4473 is an unspecified vulnerability in Oracle Java SE/Java for Business prior to certain updates (6u23, 5.0u27, 1.4.2u29) that affects confidentiality, integrity and availability via unknown vectors related to Sound and unspecified APIs. It is distinguished from CVE-2010-4454 and CVE-20...

CVE-2010-0087

Technical details for CVE-2010-0087 are not publicly available in the provided connected documents. Monitor for updates.

CVE-2010-3555

CVE-2010-3555 affects Oracle Java SE and Java for Business 6 Update 21 (Deployment component). The vulnerability allows remote code execution via unknown vectors; the ActiveX Plugin may mishandle a window handle per the description. Connected advisories reference Java updates, but the provided do...

CVE-2010-3566

Technical details for CVE-2010-3566 are not publicly available in the provided documents. Monitor for updates.

CVE-2007-3716

CVE-2007-3716 affects Sun JDK/JRE 6 before Update 2, where the XML Digital Signature implementation mishandles XSLT transforms in signatures. A crafted XSLT stylesheet could allow a remote attacker to execute arbitrary code on the affected system. The CVE is tied to a related issue (CVE-2007-3715...

CVE-2008-1195

CVE-2008-1195 is described as an unspecified vulnerability in Sun JDK/JRE 6 Update 4 and earlier; 5.0 Update 14 and earlier; and SDK/JRE 1.4.2_16 and earlier, where remote attackers could use JavaScript/Java API vectors to access local network services. Red Hat advisories referencing this CVE (e....

CVE-2008-5355

CVE-2008-5355 affects Sun JDK/JRE where the Java Update mechanism fails to verify the signature of the downloaded JRE. A remote attacker could exploit this via DNS-based man-in-the-middle to execute arbitrary code on affected systems. Affected products include JRE/JDK/JRE updates for Sun JDK/JRE ...

CVE-2010-0092

CVE-2010-0092 is reported in OpenJDK/OpenJRE and Oracle Java SE/OpenJDK contexts. The connected documents indicate the flaw is in the OpenJDK/OpenJRE implementation where operations involving AtomicReferenceArray can lead to a crash (SIGSEGV) in affected Java runtimes, contributing to potential s...

CVE-2013-1479

CVE-2013-1479 describes an unspecified vulnerability in the Oracle JRE component within Oracle Java SE 7 up to Update 11, Java SE 6 up to Update 38, and JavaFX 2.2.4 and earlier that could allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors. The conne...

CVE-2008-1194

CVE-2008-1194 affects the color management library in Sun JDK/JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allowing a remote attacker to cause a denial of service (crash) via unknown vectors. Connected advisories reference the same vulnerability across multiple vendors (e.g., Red Ha...

CVE-2007-0243

CVE-2007-0243 is a memory-corruption vulnerability in Sun JDK/JRE GIF image handling. The issue arises when parsing a GIF block with a 0 width field, allowing an attacker to potentially execute arbitrary code or gain privileges within a browser-hosted Java applet context. Affected are Sun Java De...

CVE-2008-1193

CVE-2008-1193 concerns the Java Runtime Environment Image Parsing Library in Sun JDK/JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier. A remote untrusted application could gain privileges due to flaws in the image parsing library, as described in SUSE/Red Hat advisories linked to the CVE...

CVE-2008-5344

The CVE-2008-5344 entry describes an unspecified vulnerability in Sun Java Web Start (JWS) and Java Plug-in affecting Sun JDK/JRE 6u10 and earlier, JDK/JRE 5.0u16 and earlier, and SDK/JRE 1.4.2_18 and earlier. The issue allows untrusted applets to read arbitrary files and make unauthorized networ...

CVE-2010-0845

CVE-2010-0845 is addressed in Oracle’s March 2010 Java CPU advisory (and related Oracle/OpenJDK advisories). The connected documents indicate CVE-2010-0845 is among OpenJDK/JRE vulnerabilities fixed by the CPU update, which also bundles fixes for other OpenJDK issues and notes that affected Java ...

CVE-2010-4451

CVE-2010-4451 is observed in Oracle Java SE/Java for Business 6 Update 23 and earlier on Windows, related to Install during Java Update. The vulnerability affects confidentiality, integrity, and availability via unknown vectors; the OpenVAS/OSV entries and the 2011 Java CPU advisory indicate mult...

CVE-2010-4475

CVE-2010-4475 concerns a vulnerability in Oracle Java SE/Java for Business where the Java Runtime Environment allows remote untrusted Java Web Start applications and untrusted applets to affect confidentiality via unknown vectors in Deployment. Affected products/versions: JRE 6u23 and earlier, 5....

CVE-2008-1187

CVE-2008-1187 affects Sun Java Runtime Environment (JRE) and JDK family prior to several updates (J2SE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier). The vulnerability is described as unspecified, allowing remote attackers to cause a denial of service (JRE c...

CVE-2010-0844

Technical details for CVE-2010-0844 are not publicly provided in the supplied documents. No concrete affected products, versions, or fixes are present here. Monitor for updates.

CVE-2011-0786

CVE-2011-0786 affects Oracle Java SE 6 on Windows (JRE/Deployment components) and is part of a set of vulnerabilities addressed by Java 6 Update 26. The issue is described as an unspecified vulnerability in the JRE deployment area that could allow remote execution or disclosure via untrusted Web ...

CVE-2006-6737

CVE-2006-6737 affects Sun JDK/JRE 5.0 Update 5 and earlier, J2SDK/JRE 1.4.2_10 and earlier (1.4.x), and JRE/JDK 1.3.1_18 and earlier. The issue allows an untrusted applet to access data in other applets (cross-applet data access). Red Hat and SUSE/OpenVAS entries confirm IBM/Java updates mitigate...

CVE-2008-1188

CVE-2008-1188 is a Java Web Start buffer-overflow issue in Sun/Oracle JRE/JDK (6 Upd 4 and earlier, 5.0 Upd 14 and earlier) exploited via a crafted JNLP file (long key name in XML header or long charset). The connected RHSA-2008:0267 notes the vulnerability affects Java 1.6.0 IBM and lists affect...

CVE-2011-3555

Technical details for CVE-2011-3555 are not provided in the supplied connected documents. Public specifics (affected products, exploit vectors, or fixes) are not disclosed here; monitor for updates as more information becomes available.

CVE-2010-0849

CVE-2010-0849 affects Oracle Java SE/Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27. The described issue is a heap-based overflow in a JPEGImageDecoderImpl decoding routine (claimed) that could enable code execution via a crafted JPEG image, impacting confidentiality, integr...

CVE-2006-0617

The CVE-2006-0617 entry describes multiple unspecified vulnerabilities in Sun Java JDK/JRE 5.0 Update 5 and earlier that allow remote attackers to bypass the Java sandbox via reflection APIs, enabling privilege escalation. Affected components are Sun JDK/JRE implementations; the underlying issue ...

CVE-2006-5201

CVE-2006-5201 affects Sun Solaris components (notably NSS, NSS-based libraries, Java JDK/JRE, JSSE, IPSec/IKE, and related Sun products). The root cause is when using an RSA key with exponent 3 that removes PKCS #1 padding prior to hash generation, enabling remote attackers to forge a PKCS #1 v1....

CVE-2007-2788

CVE-2007-2788 describes an integer overflow in Sun JDK/JRE image parsers that can be triggered by crafted JPEG or BMP files, leading to remote arbitrary code execution or JVM crash via a buffer overflow. Affected are Sun JDK/JRE versions prior to 1.5.0_11-b03 (JDK) and prior to 1.6.x before 1.6.0...

CVE-2007-5273

CVE-2007-5273 affects Sun JRE/JDK across multiple versions (JDK/JRE 6 Update 2 and earlier; 5.0 Update 12 and earlier; 1.4.2_15 and earlier; 1.3.1_20 and earlier). Root cause described as a multi-pin DNS rebinding issue when using an HTTP proxy: the applet download relies on DNS on the proxy whil...

CVE-2010-0839

Technical details about CVE-2010-0839 are not publicly available in the provided documents; monitor for updates from official advisories.

CVE-2010-4474

CVE-2010-4474 is reported as an unspecified vulnerability in the Java DB component of Oracle Java SE and Java for Business 6 Update 23 and earlier, with confidentiality impact via unknown vectors. Connected documents provide limited concrete detail for this CVE; one openSUSE patch entry lists CVE...

CVE-2007-5238

CVE-2007-5238 affects Sun JDK/JRE: Java Web Start in Sun JDK/JRE 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, and SDK/JRE 1.4.2_15 and earlier. The vulnerability does not properly enforce access restrictions for untrusted applications, allowing a user‑assisted remote attacker to obt...

CVE-2007-5240

CVE-2007-5240: Visual truncation vulnerability in Sun JDK/JRE (Java Runtime Environment) affecting JRE/JDK 6 Update 2 and earlier, JDK/JRE 5.0 Update 12 and earlier, SDK/JRE 1.4.2_15 and earlier, and SDK/JRE 1.3.1_20 and earlier. An attacker could bypass the display of the untrusted-code warning ...

CVE-2008-1185

CVE-2008-1185 refers to an unspecified vulnerability in Sun Java Runtime Environment (JRE) and JDK across multiple legacy versions: JRE/JDK 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier. The description states that remote attackers could gain privileges via a...

CVE-2009-1190

CVE-2009-1190 is an algorithmic complexity vulnerability in java.util.regex.Pattern.compile. The issue arises when the JVM compiles long regex patterns containing multiple optional groups, leading to CPU exhaustion and a potential denial of service. Affected products listed in the description inc...

CVE-2006-0614

CVE-2006-0614 concerns Sun JDK/JRE: Applets can escape the sandbox via reflection APIs, allowing remote privilege escalation. Affected products include Sun JDK/JRE 5.0 Update 3 and earlier, SDK/JRE 1.3.x through 1.3.1_16 and 1.4.x through 1.4.2_08. The vulnerability enables a malicious Java apple...

CVE-2004-1029

The vulnerability CVE-2004-1029 affects Sun Java Plug-in in JRE 1.4.2_01, 1.4.2_04, and possibly earlier versions, where data transfer between JavaScript and Java applets fails to restrict access. The root cause is improper isolation that allows a remote attacker to use reflection to access priva...