Vulnerability index

Browse CVEs

713 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Sunos MEDIUM 5.0
CVE-2007-2045

Unspecified vulnerability in the IP implementation in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (CPU consumption) via …

Patch available
Fix from $1,600 2007-04-16
Java System Directory Server HIGH 7.8
CVE-2006-4175

The LDAP server (ns-slapd) in Sun Java System Directory Server 5.2 Patch4 and earlier and ONE Directory Server 5.1 and 5.2 allows remote attackers to…

Mitigation only
Fix from $1,950 2007-03-26
Sun Fire MEDIUM 6.6
CVE-2007-1346

Unspecified vulnerability in ipmitool for Sun Fire X2100M2 and X2200M2 allows local users to gain privileges and reset or turn off the server.

Mitigation only
Fix from $1,600 2007-03-08
Solaris MEDIUM 5.8
CVE-2006-7140

The libike library, as used by in.iked, elfsign, and kcfd in Sun Solaris 9 and 10, when using an RSA key with exponent 3, removes PKCS-1 padding befo…

Patch available
Fix from $1,600 2007-03-07
Solaris HIGH 7.8
CVE-2006-7028

Single CPU Sun systems running Solaris 7, 8, or 9, such as Netra, allows remote attackers to cause a denial of service (console hang) via a flood of …

Mitigation only
Fix from $1,950 2007-02-23
Solaris HIGH 7.1
CVE-2007-0914

Race condition in the TCP subsystem for Solaris 10 allows remote attackers to cause a denial of service (system panic) via unknown vectors.

Patch available
Fix from $1,950 2007-02-14
Solaris MEDIUM 6.2
CVE-2007-0668

The Loopback Filesystem (LOFS) in Sun Solaris 10 allows local users in a non-global zone to move and rename files in a read-only filesystem, which co…

Patch available
Fix from $1,600 2007-02-02
Solaris HIGH 7.8
CVE-2007-0634EPSS 9%

Unspecified vulnerability in Sun Solaris 10 before 20070130 allows remote attackers to cause a denial of service (system crash) via certain ICMP pack…

Patch available
Fix from $1,950 2007-01-31
Solaris MEDIUM 6.9
CVE-2007-0503

Unspecified vulnerability in kcms_calibrate in Sun Solaris 8 and 9 before 20071122 allows local users to execute arbitrary commands via unknown vecto…

Patch available
Fix from $1,600 2007-01-25
Solaris HIGH 7.2
CVE-2007-0470

Multiple unspecified vulnerabilities in tip in Sun Solaris 8, 9, and 10 allow local users to gain uucp account privileges via unspecified vectors.

Patch available
Fix from $1,950 2007-01-24
Jdk MEDIUM 6.8
CVE-2007-0243EPSS 11%

Buffer overflow in Sun JDK and Java Runtime Environment (JRE) 5.0 Update 9 and earlier, SDK and JRE 1.4.2_12 and earlier, and SDK and JRE 1.3.1_18 an…

Fix: after 1.5.0
Fix from $1,600 2007-01-17
Iplanet Web Server MEDIUM 6.8
CVE-2007-0183

Cross-site scripting (XSS) vulnerability in /search in iPlanet Web Server 4.x allows remote attackers to inject arbitrary web script or HTML via the …

Patch available
Fix from $1,600 2007-01-12
Solaris HIGH 7.8
CVE-2007-0165EPSS 10%

Unspecified vulnerability in libnsl in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (crash) via malformed RPC requests th…

Patch available
Fix from $1,950 2007-01-10
Java System Content Delivery Server MEDIUM 5.0
CVE-2007-0114

Sun Java System Content Delivery Server 5.0 and 5.0 PU1 allows remote attackers to obtain sensitive information regarding "content details" via unspe…

Patch available
Fix from $1,600 2007-01-09
Jdk HIGH 9.3
CVE-2006-6731

Multiple buffer overflows in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, Java System Development Kit …

Patch available
Fix from $1,950 2006-12-26
J2se HIGH 9.3
CVE-2006-6745

Multiple unspecified vulnerabilities in Sun Java Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 7 and earlier, and Java System D…

Patch available
Fix from $1,950 2006-12-26
Solaris MEDIUM 6.6
CVE-2006-6494

Directory traversal vulnerability in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via a .. (dot dot) sequence in …

Patch available
Fix from $1,600 2006-12-13
Solaris MEDIUM 6.6
CVE-2006-6495

Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in…

Patch available
Fix from $1,600 2006-12-13
Java System Application Server MEDIUM 6.8
CVE-2006-6276

HTTP request smuggling vulnerability in Sun Java System Proxy Server before 20061130, when used with Sun Java System Application Server or Sun Java S…

Patch available
Fix from $1,600 2006-12-04
Solaris HIGH 7.8
CVE-2006-5073

Unspecified vulnerability in Sun Solaris 8, 9 and 10 allows remote attackers to cause a denial of service (panic) via crafted IPv6 packets, a differe…

Patch available
Fix from $1,950 2006-09-29
Solaris HIGH 7.8
CVE-2006-5075

The Kernel SSL Proxy service (svc:/network/ssl/proxy) in Sun Solaris 10 before 20060926 allows remote attackers to cause a denial of service (system …

Patch available
Fix from $1,950 2006-09-29
Solaris HIGH 7.8
CVE-2006-5013

Sun Solaris 10 before patch 118855-16 (20060925), when run on x64 systems using IPv6, allows remote attackers to cause a denial of service (kernel pa…

Mitigation only
Fix from $1,950 2006-09-27
Solaris MEDIUM 6.6
CVE-2006-5012

Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a denial of service (disable syslog) and prevent se…

Patch available
Fix from $1,600 2006-09-27
Secure Global Desktop MEDIUM 6.8
CVE-2006-4958

Multiple cross-site scripting (XSS) vulnerabilities in Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.20.983 allows remote attackers to in…

Mitigation only
Fix from $1,600 2006-09-23
Secure Global Desktop MEDIUM 5.0
CVE-2006-4959

Sun Secure Global Desktop (SSGD, aka Tarantella) before 4.3 allows remote attackers to obtain sensitive information, including hostnames, versions, a…

No fix yet
Fix from $1,600 2006-09-23
Storedge 6130 Arrays MEDIUM 5.0
CVE-2006-4773

Sun StorEdge 6130 Array Controllers with firmware 06.12.10.11 and earlier allow remote attackers to cause a denial of service (controller reboot) via…

Fix: after 06.12.10.11
Fix from $1,600 2006-09-14
Java System Content Delivery Server MEDIUM 5.0
CVE-2006-4353

Unspecified vulnerability in Sun Java System Content Delivery Server 4.0, 4.1, and 5.0 allows local and remote attackers to read data from arbitrary …

Patch available
Fix from $1,600 2006-08-25
Solaris HIGH 7.2
CVE-2006-4319

Buffer overflow in the format command in Solaris 8, 9, and 10 allows local users with access to format (such as the "File System Management" RBAC pro…

Patch available
Fix from $1,950 2006-08-24
Solaris HIGH 7.2
CVE-2006-4306

Unspecified vulnerability in Sun Solaris 8 and 9 before 20060821 allows local users to execute arbitrary commands via unspecified vectors, involving …

Mitigation only
Fix from $1,950 2006-08-23
Solaris HIGH 7.2
CVE-2006-4307

Unspecified vulnerability in the format command in Sun Solaris 8 and 9 before 20060821 allows local users to modify arbitrary files via unspecified v…

Mitigation only
Fix from $1,950 2006-08-23