Browse CVEs

HIGH 10.0 CVE-2008-3111 Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.… Jdk Patch available Fix from $1,9502008-07-09 HIGH 10.0 CVE-2008-3112EPSS 26% Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x bef… Jdk after 6 Fix from $1,9502008-07-09 HIGH 10.0 CVE-2008-3113EPSS 6% Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to … Jdk after 5.0 Fix from $1,9502008-07-09 MEDIUM 6.8 CVE-2008-3104 Multiple unspecified vulnerabilities in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK an… Jdk after 6 Fix from $1,6002008-07-09 MEDIUM 5.0 CVE-2008-3114 Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.… Jdk after 6 Fix from $1,6002008-07-09 HIGH 7.8 CVE-2008-2946 The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a deni… Solaris Mitigation only Fix from $1,9502008-06-30 HIGH 7.5 CVE-2008-2945 Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT trans… Java System Access Manager Mitigation only Fix from $1,9502008-06-30 HIGH 7.1 CVE-2008-2749 Unspecified vulnerability in cshttpd in Sun Java System Calendar Server 6 and 6.3, and Sun ONE Calendar Server 6.0, when access logging (aka service.… Java System Calendar Server Patch available Fix from $1,9502008-06-18 HIGH 7.2 CVE-2008-2710 Integer signedness error in the ip_set_srcfilter function in the IP Multicast Filter in uts/common/inet/ip/ip_multi.c in the kernel in Sun Solaris 10… Opensolaris after 10 Fix from $1,9502008-06-16 HIGH 9.3 CVE-2008-2705 Unspecified vulnerability in Sun Java System Access Manager (AM) 7.1, when used with certain versions and configurations of Sun Directory Server Ente… Java System Access Manager No fix yet Fix from $1,9502008-06-16 HIGH 10.0 CVE-2008-2403EPSS 19% Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote a… Java Asp Server after 4.0.2 Fix from $1,9502008-06-04 HIGH 10.0 CVE-2008-2404EPSS 7% Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers … Java Asp Server after 4.0.2 Fix from $1,9502008-06-04 HIGH 7.5 CVE-2008-2401 The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via t… Java Active Server Mitigation only Fix from $1,9502008-06-04 HIGH 7.5 CVE-2008-2405 Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP request… Java Active Server Pages after 4.0.2 Fix from $1,9502008-06-04 HIGH 7.5 CVE-2008-2406 The administration application server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to bypass authentication via … Java Asp Server after 4.0.2 Fix from $1,9502008-06-04 MEDIUM 5.0 CVE-2008-2402EPSS 11% The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access c… Java Asp Server after 4.0.2 Fix from $1,6002008-06-04 HIGH 7.2 CVE-2008-2539 The Sun Cluster Global File System in Sun Cluster 3.1 on Sun Solaris 8 through 10, when an underlying ufs filesystem is used, might allow local users… Cluster Mitigation only Fix from $1,9502008-06-03 MEDIUM 6.9 CVE-2008-2538 Unspecified vulnerability in crontab on Sun Solaris 8 through 10, and OpenSolaris before snv_93, allows local users to insert cron jobs into the cron… Solaris Mitigation only Fix from $1,6002008-06-03 HIGH 10.0 CVE-2008-2144EPSS 16% Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or exe… Sunos Mitigation only Fix from $1,9502008-05-12 HIGH 7.8 CVE-2008-2121 The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection timeouts)… Sunos Patch available Fix from $1,9502008-05-09 MEDIUM 5.0 CVE-2008-2120 Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update… Java System Application Server after 7.0 Fix from $1,6002008-05-09 HIGH 8.5 CVE-2008-2112 Unspecified vulnerability in Sun Ray Kiosk Mode 4.0 allows local and remote authenticated Sun Ray administrators to gain root privileges via unknown … Ray Server Software Mitigation only Fix from $1,9502008-05-08 HIGH 7.8 CVE-2008-2089 Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (panic) via a cr… Solaris Mitigation only Fix from $1,9502008-05-06 HIGH 7.8 CVE-2008-2090 Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption… Solaris Mitigation only Fix from $1,9502008-05-06 HIGH 7.5 CVE-2008-1995 Sun Java System Directory Proxy Server 6.0, 6.1, and 6.2 classifies a connection using the "bind-dn" criteria, which can cause an incorrect applicati… Java System Directory Server Mitigation only Fix from $1,9502008-04-28 MEDIUM 6.8 CVE-2007-5747 Integer underflow in OpenOffice.org before 2.4 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a… Openoffice.org after 2.3.0 Fix from $1,6002008-04-17 MEDIUM 6.8 CVE-2008-1779 Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP pa… Solaris Mitigation only Fix from $1,6002008-04-14 MEDIUM 6.6 CVE-2008-1778 Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cau… Sunos Mitigation only Fix from $1,6002008-04-14 HIGH 10.0 CVE-2008-1369 A certain incorrect Sun Solaris 10 image on SPARC Enterprise T5120 and T5220 servers has /etc/default/login and /etc/ssh/sshd_config files that confi… Sunos Mitigation only Fix from $1,9502008-03-18 MEDIUM 6.3 CVE-2008-1356 Unspecified vulnerability in xscreensaver in Sun Solaris 10 Java Desktop System (JDS), when using the GNOME On-Screen Keyboard (GOK), allows local us… Solaris Patch available Fix from $1,6002008-03-17