VYPR
← Sun Corporation

Vendor CVEs

Sun Corporation

All CVEs

2,062 total · sorted by risk
  • CVE-2013-0425Feb 2, 2013
    Openjdk
    OpenJDK
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, 6 through Update 38, 5.0 through Update 38, and 1.4.2_40 and earlier, and OpenJDK 6 and 7, allows remote attackers to affect confidentiality, integrity, and…

  • CVE-2013-0423Feb 2, 2013
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different…

  • CVE-2013-0419Feb 2, 2013
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different…

  • CVE-2012-3342Feb 2, 2013
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different…

  • CVE-2012-3213Feb 2, 2013
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.

  • CVE-2012-1541Feb 2, 2013
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.11

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11 and 6 through Update 38 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different…

  • CVE-2012-5083Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, 1.4.2_38 and earlier, and JavaFX 2.2 and earlier allows remote attackers to affect confidentiality, integrity,…

  • CVE-2012-0499Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, 5.0 Update 33 and earlier, and 1.4.2_35 and earlier; and JavaFX 2.0.2 and earlier; allows remote attackers to affect confidentiality,…

  • CVE-2011-0873Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, and 5.0 Update 29 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D.

  • CVE-2011-0862Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Multiple unspecified vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allow remote attackers to affect confidentiality, integrity, and availability via unknown vectors…

  • CVE-2011-0814Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…

  • CVE-2011-0802Jun 14, 2011
    Sun Corporation
    Jre
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.2_31 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to…

  • CVE-2010-3571Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.09

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-3569Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous…

  • CVE-2010-3562Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-3559Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.10

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-3555Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.08

    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the January 2011 CPU.…

  • CVE-2010-0887Apr 20, 2010
    Sun Corporation
    Java SE
    risk 0.01cvss —epss 0.09

    Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0849Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the Java 2D component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-0846Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Unspecified vulnerability in the ImageIO component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2009-3874Nov 5, 2009
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.10

    Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via large subsample…

  • CVE-2009-3871Nov 5, 2009
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Heap-based buffer overflow in the setBytePixels function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before…

  • CVE-2009-3865Nov 5, 2009
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.09

    The launch method in the Deployment Toolkit plugin in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 6 before Update 17 allows remote attackers to execute arbitrary commands via a crafted web page, aka Bug Id 6869752.

  • CVE-2009-2139Sep 8, 2009
    Sun Corporation
    OpenOffice.org
    risk 0.01cvss —epss 0.06

    Heap-based buffer overflow in svtools/source/filter.vcl/wmf/enhwmf.cxx in Go-oo 2.x and 3.x before 3.0.1, previously named ooo-build and related to OpenOffice.org (OOo), allows remote attackers to execute arbitrary code via a crafted EMF file, a similar issue to CVE-2008-2238.

  • CVE-2009-2674Aug 5, 2009
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.06

    Integer overflow in javaws.exe in Sun Java Web Start in Sun Java Runtime Environment (JRE) in JDK and JRE 6 before Update 15 allows context-dependent attackers to execute arbitrary code via a crafted JPEG image that is not properly handled during display to a splash screen,…

  • CVE-2008-3870May 26, 2009
    Sun Corporation
    Solaris
    risk 0.01cvss —epss 0.08

    Integer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request that triggers a heap-based buffer overflow, related to improper memory allocation.

  • CVE-2008-3869May 26, 2009
    Sun Corporation
    Solaris
    risk 0.01cvss —epss 0.08

    Heap-based buffer overflow in sadmind in Sun Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted RPC request, related to improper decoding of request parameters.

  • CVE-2009-1098Mar 25, 2009
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Buffer overflow in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files or execute arbitrary code via a crafted GIF image, aka…

  • CVE-2009-1097Mar 25, 2009
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Multiple buffer overflows in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allow remote attackers to access files or execute arbitrary code via (1) a crafted PNG image that triggers an integer overflow during memory allocation for…

  • CVE-2009-1096Mar 25, 2009
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.08

    Buffer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.

  • CVE-2009-1095Mar 25, 2009
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Integer overflow in unpack200 in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier, and 6 Update 12 and earlier, allows remote attackers to access files or execute arbitrary code via a JAR file with crafted Pack200 headers.

  • CVE-2008-5359Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.11

    Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code, related to a…

  • CVE-2008-5358Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier might allow remote attackers to execute arbitrary code via a crafted GIF file that triggers memory corruption during display of the splash screen, possibly related to splashscreen.dll.

  • CVE-2008-5357Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.10

    Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow remote attackers to execute arbitrary code via a crafted…

  • CVE-2008-5356Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.09

    Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file.

  • CVE-2008-5355Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.08

    The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the JRE that is downloaded, which allows remote attackers to…

  • CVE-2008-2086Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Sun Java Web Start and Java Plug-in for JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier allow remote attackers to execute arbitrary code via a crafted jnlp file that modifies the (1) java.home, (2) java.ext.dirs,…

  • CVE-2008-4541Oct 13, 2008
    Sun Corporation
    Java System Web Proxy Server
    risk 0.01cvss —epss 0.08

    Heap-based buffer overflow in the FTP subsystem in Sun Java System Web Proxy Server 4.0 through 4.0.7 allows remote attackers to execute arbitrary code via a crafted HTTP GET request.

  • CVE-2008-3115Jul 9, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases.

  • CVE-2008-3113Jul 9, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.06

    Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6704077.

  • CVE-2008-2402Jun 4, 2008
    Sun Corporation
    Java Asp Server
    risk 0.01cvss —epss 0.11

    The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read password hashes and configuration data via direct requests for unspecified documents.

  • CVE-2008-2404Jun 4, 2008
    Sun Corporation
    Java Active Server Pages
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in the request handling implementation in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary code via an unspecified string field.

  • CVE-2008-2144May 12, 2008
    Sun Corporation
    Solaris
    risk 0.01cvss —epss 0.17

    Multiple unspecified vulnerabilities in Solaris print service for Sun Solaris 8, 9, and 10 allow remote attackers to cause a denial of service or execute arbitrary code via unknown vectors.

  • CVE-2008-1196Mar 6, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Stack-based buffer overflow in Java Web Start (javaws.exe) in Sun JDK and JRE 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to execute arbitrary code via a crafted JNLP file.

  • CVE-2008-1190Mar 6, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.17

    Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application, a different issue than CVE-2008-1191, aka the "fourth"…

  • CVE-2008-1188Mar 6, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.12

    Multiple buffer overflows in the useEncodingDecl function in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, and 5.0 Update 14 and earlier, allow remote attackers to execute arbitrary code via a JNLP file with (1) a long key name in the xml header or (2) a long charset…

  • CVE-2008-1189Mar 6, 2008
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.07

    Buffer overflow in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to execute arbitrary code via unknown vectors, a different issue than CVE-2008-1188, aka the "third" issue.

  • CVE-2007-2834Sep 18, 2007
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.11

    Integer overflow in the TIFF parser in OpenOffice.org (OOo) before 2.3; and Sun StarOffice 6, 7, and 8 Office Suite (StarSuite); allows remote attackers to execute arbitrary code via a TIFF file with crafted values of unspecified length fields, which triggers allocation of an…

  • CVE-2007-3504Jun 30, 2007
    Sun Corporation
    Jdk
    risk 0.01cvss —epss 0.06

    Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier, for Windows allows remote attackers to perform unauthorized actions via an application that grants…

  • CVE-2006-5870Dec 31, 2006
    Openoffice
    Openoffice
    risk 0.01cvss —epss 0.08

    Multiple integer overflows in OpenOffice.org (OOo) 2.0.4 and earlier, and possibly other versions before 2.1.0; and StarOffice 6 through 8; allow user-assisted remote attackers to execute arbitrary code via a crafted (a) WMF or (b) EMF file that triggers heap-based buffer…

Page 10 of 42