Browse CVEs

HIGH 7.5 CVE-2009-1099EPSS 6% Integer signedness error in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, … Java Runtime Environment Patch available Fix from $1,9502009-03-25 HIGH 7.5 CVE-2009-1105 The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to… Java Patch available Fix from $1,9502009-03-25 MEDIUM 6.4 CVE-2009-1102 Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows r… Java Patch available Fix from $1,6002009-03-25 MEDIUM 6.4 CVE-2009-1103 Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update… Java Patch available Fix from $1,6002009-03-25 MEDIUM 5.8 CVE-2009-1104 The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19… Java Patch available Fix from $1,6002009-03-25 MEDIUM 5.0 CVE-2009-1093 LdapCtx in the LDAP service in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; S… Jdk after 1.6.0 Fix from $1,6002009-03-25 HIGH 9.0 CVE-2009-1082 Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Adm… Java System Identity Manager Patch available Fix from $1,9502009-03-25 HIGH 9.0 CVE-2009-1083 Sun Java System Identity Manager (IdM) 7.0 through 8.0 on Linux, AIX, Solaris, and HP-UX permits "control characters" in the passwords of user accoun… Java System Identity Manager Patch available Fix from $1,9502009-03-25 MEDIUM 6.5 CVE-2009-1077 The Change My Password implementation in the admin interface in Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not enforce the RequiresC… Java System Identity Manager Patch available Fix from $1,6002009-03-25 MEDIUM 6.4 CVE-2009-1084 Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not properly restrict access to the System Configuration object, which allows remote auth… Java System Identity Manager Patch available Fix from $1,6002009-03-25 MEDIUM 5.0 CVE-2009-1074 Sun Java System Identity Manager (IdM) 7.0 through 8.0 does not use SSL in all expected circumstances, which makes it easier for remote attackers to … Java System Identity Manager Patch available Fix from $1,6002009-03-25 MEDIUM 5.0 CVE-2009-1075 Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the Forgot Password feature depending on whether the use… Java System Identity Manager Patch available Fix from $1,6002009-03-25 MEDIUM 5.0 CVE-2009-1076 Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on w… Java System Identity Manager Patch available Fix from $1,6002009-03-25 HIGH 7.8 CVE-2009-0923 Unspecified vulnerability in Kerberos Incremental Propagation in Solaris 10 and OpenSolaris snv_01 through snv_110 allows remote attackers to cause a… Opensolaris Mitigation only Fix from $1,9502009-03-17 MEDIUM 6.9 CVE-2009-0875 Race condition in the Doors subsystem in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_94, allows local users to cause a denial … Opensolaris Patch available Fix from $1,6002009-03-12 MEDIUM 6.9 CVE-2009-0876 Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink atta… Xvm Virtualbox Patch available Fix from $1,6002009-03-12 MEDIUM 6.8 CVE-2009-0872 The NFS server in Sun Solaris 10, and OpenSolaris before snv_111, does not properly implement the AUTH_NONE (aka sec=none) security mode in combinati… Opensolaris Patch available Fix from $1,6002009-03-11 MEDIUM 6.8 CVE-2009-0873 The NFS daemon (aka nfsd) in Sun Solaris 10 and OpenSolaris before snv_106, when NFSv3 is used, does not properly implement combinations of security … Opensolaris Patch available Fix from $1,6002009-03-11 HIGH 7.8 CVE-2009-0609 Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does … Java System Directory Server Patch available Fix from $1,9502009-02-17 HIGH 7.8 CVE-2009-0576 Unspecified vulnerability in Sun Java System Directory Server 5.2 p6 and earlier, and Enterprise Edition 5, allows remote attackers to cause a denial… Java System Directory Server after 5.2 Fix from $1,9502009-02-13 HIGH 7.2 CVE-2009-0477 Unspecified vulnerability in the process (aka proc) filesystem in Sun OpenSolaris snv_85 through snv_100 allows local users to gain privileges via ve… Opensolaris No fix yet Fix from $1,9502009-02-08 MEDIUM 5.4 CVE-2008-6024 Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv_37, when automountd is used, allows u… Opensolaris Patch available Fix from $1,6002009-02-02 HIGH 10.0 CVE-2009-0344 Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 a… Fire X2100 M2 after 3.19 Fix from $1,9502009-01-29 HIGH 10.0 CVE-2009-0345 Unspecified vulnerability in the Embedded Lights Out Manager (ELOM) on the Sun Fire X2100 M2 and X2200 M2 x86 platforms before SP/BMC firmware 3.20 a… Fire X2100 M2 after 3.19 Fix from $1,9502009-01-29 MEDIUM 5.0 CVE-2009-0348EPSS 8% The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login attempt dep… Java System Access Manager Patch available Fix from $1,6002009-01-29 MEDIUM 6.9 CVE-2009-0319 Unspecified vulnerability in the autofs module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_108, allows local users to cause… Opensolaris Patch available Fix from $1,6002009-01-28 HIGH 7.8 CVE-2009-0304EPSS 10% The kernel in Sun Solaris 10 and 11 snv_101b, and OpenSolaris before snv_108, allows remote attackers to cause a denial of service (system crash) via… Opensolaris No fix yet Fix from $1,9502009-01-27 MEDIUM 5.0 CVE-2009-0278 Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2)… Java System Application Server Patch available Fix from $1,6002009-01-27 HIGH 7.8 CVE-2009-0277 Unspecified vulnerability in the kernel in OpenSolaris snv_100 through snv_102 on the Sun UltraSPARC T2 and T2+ sun4v platforms allows local users to… Opensolaris Patch available Fix from $1,9502009-01-27 MEDIUM 5.0 CVE-2009-0267 libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of s… Opensolaris Patch available Fix from $1,6002009-01-26