Browse CVEs

MEDIUM 5.0 CVE-2008-5339 Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlie… Jdk after 6 Fix from $1,6002008-12-05 MEDIUM 5.0 CVE-2008-5341 Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and ea… Jdk after 6 Fix from $1,6002008-12-05 MEDIUM 5.0 CVE-2008-5342 Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0… Jdk after 6 Fix from $1,6002008-12-05 MEDIUM 5.0 CVE-2008-5350 Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and S… Jdk after 6 Fix from $1,6002008-12-05 HIGH 9.3 CVE-2008-2086EPSS 7% Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earl… Jdk after 6 Fix from $1,9502008-12-05 MEDIUM 5.8 CVE-2008-5133 ipnat in IP Filter in Sun Solaris 10 and OpenSolaris before snv_96, when running on a DNS server with Network Address Translation (NAT) configured, i… Opensolaris Patch available Fix from $1,6002008-11-18 HIGH 7.8 CVE-2008-5116 Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote … Java System Identity Manager Patch available Fix from $1,9502008-11-18 MEDIUM 6.8 CVE-2008-5115 Cross-site request forgery (CSRF) vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to hija… Java System Identity Manager Patch available Fix from $1,6002008-11-18 MEDIUM 6.4 CVE-2008-5117 Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitr… Java System Identity Manager Patch available Fix from $1,6002008-11-18 HIGH 10.0 CVE-2008-5010 in.dhcpd in the DHCP implementation in Sun Solaris 8 through 10, and OpenSolaris before snv_103, allows remote attackers to cause a denial of service… Opensolaris Patch available Fix from $1,9502008-11-10 HIGH 10.0 CVE-2008-4910EPSS 10% The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the sh… Java Web Start Mitigation only Fix from $1,9502008-11-04 HIGH 9.0 CVE-2008-4722 Unspecified vulnerability in Sun Integrated Lights-Out Manager (ILOM) 2.0.1.5 through 2.0.4.26 allows remote authenticated users to (1) access the se… Integrated Lights Out Manager after 7.1.6 Fix from $1,9502008-10-23 HIGH 10.0 CVE-2008-4619EPSS 12% The RPC subsystem in Sun Solaris 9 allows remote attackers to cause a denial of service (daemon crash) via a crafted request to procedure 8 in progra… Sunos No fix yet Fix from $1,9502008-10-21 HIGH 10.0 CVE-2008-4556EPSS 70% Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execut… Solaris No fix yet Fix from $1,9502008-10-14 HIGH 10.0 CVE-2008-4541EPSS 8% Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary co… Java System Web Proxy Server Mitigation only Fix from $1,9502008-10-13 HIGH 7.2 CVE-2008-4131 Multiple unspecified vulnerabilities in Sun Solaris 8 through 10 allow local users to gain privileges via vectors related to handling of tags with (1… Solaris Patch available Fix from $1,9502008-09-19 HIGH 7.8 CVE-2008-4117 Unspecified vulnerability in a web page in the PRM module in Sun Management Center (SunMC) 3.6.1 and 4.0 allows remote attackers to cause a denial of… Management Center Patch available Fix from $1,9502008-09-18 HIGH 7.2 CVE-2008-3875 The kernel in Sun Solaris 8 through 10 and OpenSolaris before snv_90 allows local users to bypass chroot, zones, and the Solaris Trusted Extensions m… Opensolaris Patch available Fix from $1,9502008-09-02 HIGH 7.2 CVE-2008-3838 Unspecified vulnerability in the NFS Remote Procedure Calls (RPC) zones implementation in Sun Solaris 10 and OpenSolaris before snv_88 allows local a… Opensolaris Patch available Fix from $1,9502008-08-27 MEDIUM 5.0 CVE-2008-3683 Unspecified vulnerability in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.5 before SP6 allows remote attackers to cause a de… Java System Web Proxy Server Patch available Fix from $1,6002008-08-14 HIGH 7.1 CVE-2008-3666 Unspecified vulnerability in Sun Solaris 10 and OpenSolaris before snv_96 allows (1) context-dependent attackers to cause a denial of service (panic)… Opensolaris Patch available Fix from $1,9502008-08-13 HIGH 10.0 CVE-2008-3551EPSS 6% Multiple unspecified vulnerabilities in Sun Java Platform Micro Edition (aka Java ME, J2ME, or mobile Java), as distributed in Sun Wireless Toolkit 2… Java Platform Micro Edition No fix yet Fix from $1,9502008-08-08 HIGH 10.0 CVE-2008-3553EPSS 6% Multiple unspecified vulnerabilities in Nokia Series 40 3rd edition devices allow remote attackers to execute arbitrary code via unknown vectors, pro… J2me No fix yet Fix from $1,9502008-08-08 HIGH 9.3 CVE-2008-0964EPSS 14% Multiple stack-based buffer overflows in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remote… Opensolaris No fix yet Fix from $1,9502008-08-08 HIGH 9.3 CVE-2008-0965EPSS 6% Multiple format string vulnerabilities in snoop on Sun Solaris 8 through 10 and OpenSolaris before snv_96, when the -o option is omitted, allow remot… Opensolaris Mitigation only Fix from $1,9502008-08-08 HIGH 7.2 CVE-2008-3450 Unspecified vulnerability in the namefs kernel module in Sun Solaris 8 through 10 allows local users to gain privileges or cause a denial of service … Sunos Patch available Fix from $1,9502008-08-04 HIGH 7.5 CVE-2008-3440 Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-mi… Java after 1.6.0 Fix from $1,9502008-08-01 MEDIUM 6.5 CVE-2008-3425 Unspecified vulnerability in the Sun Java System Web Server 7.0 plugin in Sun N1 Service Provisioning System (SPS) 5.2 and 6.0 allows remote authenti… Java System Web Server Plugin Mitigation only Fix from $1,6002008-07-31 HIGH 10.0 CVE-2008-3107 Unspecified vulnerability in the Virtual Machine in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Updat… Jdk after 6 Fix from $1,9502008-07-09 HIGH 10.0 CVE-2008-3108 Buffer overflow in Sun Java Runtime Environment (JRE) in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.2_18, and SDK and JRE 1.3.x b… Jre Mitigation only Fix from $1,9502008-07-09