Browse CVEs

HIGH 10.0 CVE-2007-5019EPSS 10% Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact… Java Web Start No fix yet Fix from $1,9502007-09-20 MEDIUM 5.0 CVE-2007-4511 The Sun Admin Console in Sun Application Server 9.0_0.1 does not apply certain configuration changes persistently, which causes the (1) SSL and (2) S… Java System Application Server Mitigation only Fix from $1,6002007-08-23 MEDIUM 6.8 CVE-2007-2267 Unspecified vulnerability in Sun Cluster 3.1 and Solaris Cluster 3.2 before 20070424 allows remote authenticated users, operating from a different cl… Cluster Mitigation only Fix from $1,6002007-04-25 HIGH 7.5 CVE-2007-1681 Format string vulnerability in libwebconsole_services.so in Sun Java Web Console 2.2.2 through 2.2.5 allows remote attackers to cause a denial of ser… Java Web Console Mitigation only Fix from $1,9502007-04-19 HIGH 7.8 CVE-2006-4175 The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to… Java System Directory Server Mitigation only Fix from $1,9502007-03-26 MEDIUM 6.6 CVE-2007-1346 Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the server. Sun Fire Mitigation only Fix from $1,6002007-03-08 HIGH 7.8 CVE-2006-7028 Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service (console hang) via a flood of … Solaris Mitigation only Fix from $1,9502007-02-23 HIGH 7.8 CVE-2006-5013 Sun Solaris 10 before patch 118855-16 (20060925), when run on x64 systems using IPv6, allows remote attackers to cause a denial of service (kernel pa… Solaris Mitigation only Fix from $1,9502006-09-27 MEDIUM 6.8 CVE-2006-4958 Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to in… Secure Global Desktop Mitigation only Fix from $1,6002006-09-23 MEDIUM 5.0 CVE-2006-4959 Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, a… Secure Global Desktop No fix yet Fix from $1,6002006-09-23 HIGH 7.2 CVE-2006-4306 Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving … Solaris Mitigation only Fix from $1,9502006-08-23 HIGH 7.2 CVE-2006-4307 Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified v… Solaris Mitigation only Fix from $1,9502006-08-23 MEDIUM 5.4 CVE-2006-4117 The squeue_drain function in Sun Solaris 10, possibly only when run on CMT processors, allows remote attackers to cause a denial of service ("bad tra… Solaris Mitigation only Fix from $1,6002006-08-14 HIGH 7.8 CVE-2006-3781 Unspecified vulnerability in Sun Solaris 10 allows context-dependent attackers to cause a denial of service (panic) via unspecified vectors involving… Solaris No fix yet Fix from $1,9502006-07-24 HIGH 7.8 CVE-2006-3127 Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2… Java Enterprise System Mitigation only Fix from $1,9502006-06-21 MEDIUM 6.4 CVE-2006-2426EPSS 13% Sun Java Runtime Environment (JRE) 1.5.0_6 and earlier, JDK 1.5.0_6 and earlier, and SDK 1.5.0_6 and earlier allows remote attackers to cause a denia… Jdk No fix yet Fix from $1,6002006-05-17 MEDIUM 5.0 CVE-2006-0647EPSS 10% LDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other platforms, allows remote attackers to cause a denial of ser… Java System Directory Server No fix yet Fix from $1,6002006-02-13 HIGH 10.0 CVE-2005-2529 Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors… Java Mitigation only Fix from $1,9502005-12-31 HIGH 10.0 CVE-2005-2530 Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specifi… Java Mitigation only Fix from $1,9502005-12-31 MEDIUM 5.0 CVE-2005-1753 ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments v… Javamail Mitigation only Fix from $1,6002005-12-31 MEDIUM 5.0 CVE-2005-2738 Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allow… Java Mitigation only Fix from $1,6002005-12-31 MEDIUM 5.0 CVE-2005-4845 The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial… Java Plug In Mitigation only Fix from $1,6002005-12-31 HIGH 7.8 CVE-2005-4350 Unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attac… Wbem Services Mitigation only Fix from $1,9502005-12-20 HIGH 7.8 CVE-2005-3674 The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Sun Solaris 9 and 10 allows remote attackers to cause a denial of… Solaris Mitigation only Fix from $1,9502005-11-18 HIGH 7.8 CVE-2005-3583 (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote a… Jre Mitigation only Fix from $1,9502005-11-16 HIGH 7.5 CVE-2005-2870 Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DH… Solaris Mitigation only Fix from $1,9502005-09-08 HIGH 7.2 CVE-2005-2072 The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid programs, which allows local users to… Solaris No fix yet Fix from $1,9502005-06-29 MEDIUM 5.1 CVE-2005-1973 Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privi… J2se Mitigation only Fix from $1,6002005-06-16 MEDIUM 5.1 CVE-2005-1974 Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple product… J2se Mitigation only Fix from $1,6002005-06-16 HIGH 7.5 CVE-2005-1609 Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attack… Storedge 6130 Arrays No fix yet Fix from $1,9502005-05-16