Browse CVEs

MEDIUM 5.0 CVE-2005-4805 Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Editi… Java System Application Server Patch available Fix from $1,6002005-12-31 MEDIUM 5.0 CVE-2005-4806 Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unr… Java System Web Proxy Server Patch available Fix from $1,6002005-12-31 MEDIUM 5.0 CVE-2005-4845 The Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet> redirector controls, allow remote attackers to cause a denial… Java Plug In Mitigation only Fix from $1,6002005-12-31 HIGH 7.2 CVE-2005-4552 The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges. Solaris Pc Netlink Patch available Fix from $1,9502005-12-28 HIGH 7.8 CVE-2005-4350 Unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attac… Wbem Services Mitigation only Fix from $1,9502005-12-20 HIGH 7.5 CVE-2005-4045 Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote… Java Communications Services Delegated Administrator Patch available Fix from $1,9502005-12-07 MEDIUM 5.0 CVE-2005-3781 Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to "ma… Solaris Patch available Fix from $1,6002005-11-23 HIGH 7.8 CVE-2005-3674 The Internet Key Exchange version 1 (IKEv1) implementation in the libike library in Sun Solaris 9 and 10 allows remote attackers to cause a denial of… Solaris Mitigation only Fix from $1,9502005-11-18 HIGH 7.8 CVE-2005-3583 (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote a… Jre Mitigation only Fix from $1,9502005-11-16 MEDIUM 5.0 CVE-2005-3472 Unspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows local and remote attackers to read sensitive information… Java System Communications Express Patch available Fix from $1,6002005-11-03 HIGH 7.5 CVE-2005-3269 Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1,… Java System Directory Proxy Server Patch available Fix from $1,9502005-10-20 HIGH 7.5 CVE-2005-2870 Unknown vulnerability in the net-svc script on Solaris 10 allows remote authenticated users to execute arbitrary code on a DHCP client via certain DH… Solaris Mitigation only Fix from $1,9502005-09-08 HIGH 7.2 CVE-2005-2072 The runtime linker (ld.so) in Solaris 8, 9, and 10 trusts the LD_AUDIT environment variable in setuid or setgid programs, which allows local users to… Solaris No fix yet Fix from $1,9502005-06-29 MEDIUM 5.1 CVE-2005-1973 Java Web Start in Java 2 Platform Standard Edition (J2SE) 5.0 and 5.0 Update 1 allows applications to assign permissions to themselves and gain privi… J2se Mitigation only Fix from $1,6002005-06-16 MEDIUM 5.1 CVE-2005-1974 Unspecified vulnerability in Java 2 Platform, Standard Edition (J2SE) 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.2_07, as used in multiple product… J2se Mitigation only Fix from $1,6002005-06-16 HIGH 7.5 CVE-2005-1609 Unknown vulnerability in Sun StorEdge 6130 Arrays (SE6130) with serial numbers between 0451AWF00G and 0513AWF00J allows local users and remote attack… Storedge 6130 Arrays No fix yet Fix from $1,9502005-05-16 MEDIUM 5.0 CVE-2005-1591 Unknown vulnerability in NIS+ on Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (rpc.nisd disabled and NIS+ unavailable) vi… Solaris Patch available Fix from $1,6002005-05-16 HIGH 10.0 CVE-2005-0836 Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value param… J2se Patch available Fix from $1,9502005-05-02 HIGH 7.5 CVE-2005-0248 The Solaris Management Console (SMC) GUI for Solaris 8 and 9, when creating user accounts that are configured for password aging, creates the account… Solaris Patch available Fix from $1,9502005-05-02 HIGH 7.5 CVE-2005-0418 Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06, on Mac OS X, allows untrusted applications to gain privileges via t… J2se Patch available Fix from $1,9502005-05-02 HIGH 7.5 CVE-2005-1232 Buffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows remote attackers to execute arbitrary code via unknown … Java System Web Proxy Server Mitigation only Fix from $1,9502005-05-02 HIGH 7.2 CVE-2005-0816 Buffer overflow in newgrp in Solaris 7 through 9 allows local users to gain root privileges. Solaris Mitigation only Fix from $1,9502005-05-02 MEDIUM 5.0 CVE-2005-0223 The Software Development Kit (SDK) and Run Time Environment (RTE) 1.4.1 and 1.4.2 for Tru64 UNIX allows remote attackers to cause a denial of service… Rte Mitigation only Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2005-0426 Unknown vulnerability in Solaris 8 and 9 allows remote attackers to cause a denial of service (panic) via "Heavy UDP Usage" that triggers a NULL dere… Solaris Mitigation only Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2005-1080EPSS 6% Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or… Sdk No fix yet Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2005-1105EPSS 6% Directory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows remote attackers to write arbitrary files via a .. … Javamail Mitigation only Fix from $1,6002005-05-02 MEDIUM 5.0 CVE-2004-0791EPSS 20% Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a… Solaris Mitigation only Fix from $1,6002005-04-12 MEDIUM 5.0 CVE-2005-0447 Solaris 7, 8, and 9 allows remote attackers to cause a denial of service (hang) via a flood of certain ARP packets. Solaris Patch available Fix from $1,6002005-02-15 HIGH 7.5 CVE-2004-2393 Java Secure Socket Extension (JSSE) 1.0.3 through 1.0.3_2 does not properly validate the certificate chain of a client or server, which allows remote… Jsse Patch available Fix from $1,9502004-12-31 HIGH 7.5 CVE-2004-2758 Multiple unspecified vulnerabilities in the H.323 protocol implementation for Sun SunForum 3.2 and 3D 1.0 allow remote attackers to cause a denial of… Sunforum Mitigation only Fix from $1,9502004-12-31