Vulnerability index

Browse CVEs

713 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Openjdk HIGH 10.0
CVE-2009-2476

The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which …

Fix: after 6
Fix from $1,950 2009-08-10
Openjdk HIGH 10.0
CVE-2009-2689

JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecifie…

Fix: after 6
Fix from $1,950 2009-08-10
Openjdk HIGH 7.8
CVE-2009-2475

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vec…

Fix: after 6
Fix from $1,950 2009-08-10
Openjdk MEDIUM 5.0
CVE-2009-2690

The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-depe…

Fix: after 6
Fix from $1,600 2009-08-10
Java Se MEDIUM 6.8
CVE-2009-2676

Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Updat…

Fix: after 1.6.0
Fix from $1,600 2009-08-05
Opensolaris MEDIUM 6.8
CVE-2009-2652

Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv_37 through snv_120, allows remote attackers to cause a…

Patch available
Fix from $1,600 2009-08-03
Java System Access Manager Policy Agent HIGH 7.8
CVE-2009-2597

The Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service (d…

Patch available
Fix from $1,950 2009-07-27
Opensolaris HIGH 7.8
CVE-2009-2486

Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of …

Patch available
Fix from $1,950 2009-07-16
Opensolaris HIGH 7.8
CVE-2009-2487

Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through sn…

Patch available
Fix from $1,950 2009-07-16
Sun Fire Server MEDIUM 5.4
CVE-2009-2458

Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash le…

Patch available
Fix from $1,600 2009-07-14
Opensolaris HIGH 10.0
CVE-2009-2296

The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows r…

Patch available
Fix from $1,950 2009-07-02
Opensolaris HIGH 7.1
CVE-2009-2297

Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108, when Solaris Trusted Extensio…

Patch available
Fix from $1,950 2009-07-02
Opensolaris HIGH 7.8
CVE-2009-2136

Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_117, when a…

Patch available
Fix from $1,950 2009-06-19
Opensolaris HIGH 7.8
CVE-2009-2137

Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-…

Patch available
Fix from $1,950 2009-06-19
Jdk HIGH 10.0
CVE-2009-2030

Unspecified vulnerability in the XML Digital Signature verification functionality in JVA-RUN in JDK 6.0 in IBM OS/400 i5/OS V5R4M0 and V6R1M0 has unk…

Patch available
Fix from $1,950 2009-06-11
Opensolaris MEDIUM 5.0
CVE-2009-2029

Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv_104, allows remote authenticated users to cause a denia…

Patch available
Fix from $1,600 2009-06-11
Jre HIGH 10.0
CVE-2004-2764

Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and un…

Mitigation only
Fix from $1,950 2009-06-02
J2ee HIGH 10.0
CVE-2003-1573EPSS 5%

The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduc…

No fix yet
Fix from $1,950 2009-06-01
Jmf HIGH 9.3
CVE-2003-1572

Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized m…

Mitigation only
Fix from $1,950 2009-06-01
Iplanet Web Server MEDIUM 5.8
CVE-2004-2763

The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can al…

No fix yet
Fix from $1,600 2009-06-01
Solaris HIGH 10.0
CVE-2008-3869EPSS 8%

Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to …

Patch available
Fix from $1,950 2009-05-26
Solaris HIGH 10.0
CVE-2008-3870EPSS 8%

Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-b…

Patch available
Fix from $1,950 2009-05-26
Opensolaris HIGH 7.2
CVE-2009-1763

Unspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun OpenSolaris snv_105 through snv_108 on the x86 platform allow…

Mitigation only
Fix from $1,950 2009-05-22
Java System Delegated Administrator MEDIUM 6.8
CVE-2009-1357EPSS 7%

CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HT…

Patch available
Fix from $1,600 2009-04-23
Java System Directory Server MEDIUM 5.0
CVE-2009-1332

The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files …

Mitigation only
Fix from $1,600 2009-04-17
Openjdk MEDIUM 5.0
CVE-2009-0794

Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used…

Mitigation only
Fix from $1,600 2009-04-13
Java System Calendar Server MEDIUM 5.0
CVE-2009-1219EPSS 9%

Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers …

Patch available
Fix from $1,600 2009-04-01
Opensolaris MEDIUM 6.9
CVE-2009-1170

Unspecified vulnerability in Sun OpenSolaris snv_100 through snv_101 allows local users, with privileges in a non-global zone, to execute arbitrary c…

Mitigation only
Fix from $1,600 2009-03-30
Jdk HIGH 10.0
CVE-2009-1094

Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6…

Fix: after 1.6.0
Fix from $1,950 2009-03-25
Jdk HIGH 9.3
CVE-2009-1098EPSS 7%

Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and …

Fix: after 1.6.0
Fix from $1,950 2009-03-25