Browse CVEs

HIGH 10.0 CVE-2009-2476 The Java Management Extensions (JMX) implementation in Sun Java SE 6 before Update 15, and OpenJDK, does not properly enforce OpenType checks, which … Openjdk after 6 Fix from $1,9502009-08-10 HIGH 10.0 CVE-2009-2689 JDK13Services.getProviders in Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, grants full privileges to instances of unspecifie… Openjdk after 6 Fix from $1,9502009-08-10 HIGH 7.8 CVE-2009-2475 Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vec… Openjdk after 6 Fix from $1,9502009-08-10 MEDIUM 5.0 CVE-2009-2690 The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-depe… Openjdk after 6 Fix from $1,6002009-08-10 MEDIUM 6.8 CVE-2009-2676 Unspecified vulnerability in JNLPAppletlauncher in Sun Java SE, and SE for Business, in JDK and JRE 6 Update 14 and earlier and JDK and JRE 5.0 Updat… Java Se after 1.6.0 Fix from $1,6002009-08-05 MEDIUM 6.8 CVE-2009-2652 Unspecified vulnerability in Solaris Trusted Extensions in Sun Solaris 10, and OpenSolaris snv_37 through snv_120, allows remote attackers to cause a… Opensolaris Patch available Fix from $1,6002009-08-03 HIGH 7.8 CVE-2009-2597 The Sun Java System (SJS) Access Manager Policy Agent module 2.2 for SJS Web Proxy Server 4.0 allows remote attackers to cause a denial of service (d… Java System Access Manager Policy Agent Patch available Fix from $1,9502009-07-27 HIGH 7.8 CVE-2009-2486 Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of … Opensolaris Patch available Fix from $1,9502009-07-16 HIGH 7.8 CVE-2009-2487 Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through sn… Opensolaris Patch available Fix from $1,9502009-07-16 MEDIUM 5.4 CVE-2009-2458 Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardware dash le… Sun Fire Server Patch available Fix from $1,6002009-07-14 HIGH 10.0 CVE-2009-2296 The NFSv4 server kernel module in Sun Solaris 10, and OpenSolaris before snv_119, does not properly implement the nfs_portmon setting, which allows r… Opensolaris Patch available Fix from $1,9502009-07-02 HIGH 7.1 CVE-2009-2297 Unspecified vulnerability in the udp subsystem in the kernel in Sun Solaris 10, and OpenSolaris snv_90 through snv_108, when Solaris Trusted Extensio… Opensolaris Patch available Fix from $1,9502009-07-02 HIGH 7.8 CVE-2009-2136 Unspecified vulnerability in the TCP/IP networking stack in Sun Solaris 10, and OpenSolaris snv_01 through snv_82 and snv_111 through snv_117, when a… Opensolaris Patch available Fix from $1,9502009-06-19 HIGH 7.8 CVE-2009-2137 Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-… Opensolaris Patch available Fix from $1,9502009-06-19 HIGH 10.0 CVE-2009-2030 Unspecified vulnerability in the XML Digital Signature verification functionality in JVA-RUN in JDK 6.0 in IBM OS/400 i5/OS V5R4M0 and V6R1M0 has unk… Jdk Patch available Fix from $1,9502009-06-11 MEDIUM 5.0 CVE-2009-2029 Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv_104, allows remote authenticated users to cause a denia… Opensolaris Patch available Fix from $1,6002009-06-11 HIGH 10.0 CVE-2004-2764 Sun SDK and Java Runtime Environment (JRE) 1.4.2 through 1.4.2_04, 1.4.1 through 1.4.1_07, and 1.4.0 through 1.4.0_04 allows untrusted applets and un… Jre Mitigation only Fix from $1,9502009-06-02 HIGH 10.0 CVE-2003-1573EPSS 5% The PointBase 4.6 database component in the J2EE 1.4 reference implementation (J2EE/RI) allows remote attackers to execute arbitrary programs, conduc… J2ee No fix yet Fix from $1,9502009-06-01 HIGH 9.3 CVE-2003-1572 Sun Java Media Framework (JMF) 2.1.1 through 2.1.1c allows unsigned applets to cause a denial of service (JVM crash) and read or write unauthorized m… Jmf Mitigation only Fix from $1,9502009-06-01 MEDIUM 5.8 CVE-2004-2763 The default configuration of Sun ONE/iPlanet Web Server 4.1 SP1 through SP12 and 6.0 SP1 through SP5 responds to the HTTP TRACE request, which can al… Iplanet Web Server No fix yet Fix from $1,6002009-06-01 HIGH 10.0 CVE-2008-3869EPSS 8% Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to … Solaris Patch available Fix from $1,9502009-05-26 HIGH 10.0 CVE-2008-3870EPSS 8% Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-b… Solaris Patch available Fix from $1,9502009-05-26 HIGH 7.2 CVE-2009-1763 Unspecified vulnerability in the Solaris Secure Digital slot driver (aka sdhost) in Sun OpenSolaris snv_105 through snv_108 on the x86 platform allow… Opensolaris Mitigation only Fix from $1,9502009-05-22 MEDIUM 6.8 CVE-2009-1357EPSS 7% CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HT… Java System Delegated Administrator Patch available Fix from $1,6002009-04-23 MEDIUM 5.0 CVE-2009-1332 The Online Help feature in Sun Java System Directory Server 5.2 and Enterprise Edition 5 allows remote attackers to determine the existence of files … Java System Directory Server Mitigation only Fix from $1,6002009-04-17 MEDIUM 5.0 CVE-2009-0794 Integer overflow in the PulseAudioTargetDataL class in src/java/org/classpath/icedtea/pulseaudio/PulseAudioTargetDataLine.java in Pulse-Java, as used… Openjdk Mitigation only Fix from $1,6002009-04-13 MEDIUM 5.0 CVE-2009-1219EPSS 9% Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers … Java System Calendar Server Patch available Fix from $1,6002009-04-01 MEDIUM 6.9 CVE-2009-1170 Unspecified vulnerability in Sun OpenSolaris snv_100 through snv_101 allows local users, with privileges in a non-global zone, to execute arbitrary c… Opensolaris Mitigation only Fix from $1,6002009-03-30 HIGH 10.0 CVE-2009-1094 Unspecified vulnerability in the LDAP implementation in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6… Jdk after 1.6.0 Fix from $1,9502009-03-25 HIGH 9.3 CVE-2009-1098EPSS 7% Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and … Jdk after 1.6.0 Fix from $1,9502009-03-25