Browse CVEs

HIGH 10.0 CVE-2008-4619EPSS 12% The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8 in progra… Sunos No fix yet Fix from $1,9502008-10-21 HIGH 10.0 CVE-2008-4556EPSS 70% Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execut… Solaris No fix yet Fix from $1,9502008-10-14 HIGH 10.0 CVE-2008-4541EPSS 8% Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary co… Java System Web Proxy Server Mitigation only Fix from $1,9502008-10-13 HIGH 10.0 CVE-2008-3551EPSS 6% Multiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or mobile Java), as distributed in Sun Wireless Toolkit 2… Java Platform Micro Edition No fix yet Fix from $1,9502008-08-08 HIGH 10.0 CVE-2008-3553EPSS 6% Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary code via unknown vectors, pro… J2me No fix yet Fix from $1,9502008-08-08 HIGH 9.3 CVE-2008-0964EPSS 14% Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote… Opensolaris No fix yet Fix from $1,9502008-08-08 HIGH 9.3 CVE-2008-0965EPSS 6% Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remot… Opensolaris Mitigation only Fix from $1,9502008-08-08 MEDIUM 6.5 CVE-2008-3425 Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenti… Java System Web Server Plugin Mitigation only Fix from $1,6002008-07-31 HIGH 10.0 CVE-2008-3108 Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x b… Jre Mitigation only Fix from $1,9502008-07-09 HIGH 7.8 CVE-2008-2946 The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a deni… Solaris Mitigation only Fix from $1,9502008-06-30 HIGH 7.5 CVE-2008-2945 Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT trans… Java System Access Manager Mitigation only Fix from $1,9502008-06-30 HIGH 9.3 CVE-2008-2705 Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Ente… Java System Access Manager No fix yet Fix from $1,9502008-06-16 HIGH 7.5 CVE-2008-2401 The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via t… Java Active Server Mitigation only Fix from $1,9502008-06-04 HIGH 7.2 CVE-2008-2539 The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow local users… Cluster Mitigation only Fix from $1,9502008-06-03 MEDIUM 6.9 CVE-2008-2538 Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to insert cron jobs into the cron… Solaris Mitigation only Fix from $1,6002008-06-03 HIGH 10.0 CVE-2008-2144EPSS 16% Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or exe… Sunos Mitigation only Fix from $1,9502008-05-12 HIGH 8.5 CVE-2008-2112 Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown … Ray Server Software Mitigation only Fix from $1,9502008-05-08 HIGH 7.8 CVE-2008-2089 Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) via a cr… Solaris Mitigation only Fix from $1,9502008-05-06 HIGH 7.8 CVE-2008-2090 Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption… Solaris Mitigation only Fix from $1,9502008-05-06 HIGH 7.5 CVE-2008-1995 Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind-dn" criteria, which can cause an incorrect applicati… Java System Directory Server Mitigation only Fix from $1,9502008-04-28 MEDIUM 6.8 CVE-2008-1779 Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP pa… Solaris Mitigation only Fix from $1,6002008-04-14 MEDIUM 6.6 CVE-2008-1778 Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cau… Sunos Mitigation only Fix from $1,6002008-04-14 HIGH 10.0 CVE-2008-1369 A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that confi… Sunos Mitigation only Fix from $1,9502008-03-18 HIGH 9.3 CVE-2008-1190EPSS 17% Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier al… Jdk Mitigation only Fix from $1,9502008-03-06 HIGH 7.2 CVE-2008-0242 Unspecified vulnerability in libdevinfo in Sun Solaris 10 allows local users to access files and gain privileges via unknown vectors, related to logi… Solaris Mitigation only Fix from $1,9502008-01-12 MEDIUM 5.0 CVE-2007-6059 Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the do… Javamail No fix yet Fix from $1,6002007-11-20 MEDIUM 6.4 CVE-2007-5482 Unspecified vulnerability in the FTP service in Sun StorEdge/StorageTek 3510 FC Array with firmware before 4.21 allows remote attackers, with access … Storagetek 3510 Mitigation only Fix from $1,6002007-10-16 HIGH 7.8 CVE-2007-5462 Unspecified vulnerability in the Sun Solaris RPC services library (librpcsvc) on Solaris 8 through 10 allows remote attackers to cause a denial of se… Solaris Mitigation only Fix from $1,9502007-10-15 HIGH 7.5 CVE-2007-5152 Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 9.1 container, does not demand authentication after a cont… Java System Access Manager Mitigation only Fix from $1,9502007-10-01 MEDIUM 6.8 CVE-2007-5153 Unspecified vulnerability in Sun Java System Access Manager 7.1, when installed in a Sun Java System Application Server 8.x container, allows remote … Java System Access Manager No fix yet Fix from $1,6002007-10-01