Oracle warned that a dozen of new Java security vulnerabilities could be exploitable remotely to gain access to a target application without login.