VYPR
← Sun Corporation

Vendor CVEs

Sun Corporation

All CVEs

2,062 total · sorted by risk
  • CVE-2005-0488Jun 14, 2005
    Microsoft
    Telnet Client
    risk 0.01cvss —epss 0.17

    Certain BSD-based Telnet clients, including those used on Solaris and SuSE Linux, allow remote malicious Telnet servers to read sensitive environment variables via the NEW-ENVIRON option with a SEND ENV_USERVAR command.

  • CVE-2005-1080May 2, 2005
    Openjdk
    OpenJDK
    risk 0.01cvss —epss 0.07

    Directory traversal vulnerability in the Java Archive Tool (Jar) utility in J2SE SDK 1.4.2 and 1.5, and OpenJDK, allows remote attackers to create or overwrite arbitrary files via a .. (dot dot) in filenames in a .jar file.

  • CVE-2005-0469May 2, 2005
    Ncsa
    Telnet
    risk 0.01cvss —epss 0.09

    Buffer overflow in the slc_add_reply function in various BSD-based Telnet clients, when handling LINEMODE suboptions, allows remote attackers to execute arbitrary code via a reply with a large number of Set Local Character (SLC) commands.

  • CVE-2004-2627Dec 31, 2004
    Sun Corporation
    Java 2 Micro Edition (J2ME)
    risk 0.01cvss —epss 0.06

    Java 2 Micro Edition (J2ME) does not properly validate bytecode, which allows remote attackers to escape the Kilobyte Virtual Machine (KVM) sandbox and execute arbitrary code.

  • CVE-2004-1307Dec 21, 2004
    LibTIFF
    Libtiff
    risk 0.01cvss —epss 0.06

    Integer overflow in the TIFFFetchStripThing function in tif_dirread.c for libtiff 3.6.1 allows remote attackers to execute arbitrary code via a TIFF file with the STRIPOFFSETS flag and a large number of strips, which causes a zero byte buffer to be allocated and leads to a…

  • CVE-2004-0081Nov 23, 2004
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.07

    OpenSSL 0.9.6 before 0.9.6d does not properly handle unknown message types, which allows remote attackers to cause a denial of service (infinite loop), as demonstrated using the Codenomicon TLS Test Tool.

  • CVE-2004-0112Nov 23, 2004
    OpenSSL Project
    OpenSSL
    risk 0.01cvss —epss 0.10

    The SSL/TLS handshaking code in OpenSSL 0.9.7a, 0.9.7b, and 0.9.7c, when using Kerberos ciphersuites, does not properly check the length of Kerberos tickets during a handshake, which allows remote attackers to cause a denial of service (crash) via a crafted SSL/TLS handshake…

  • CVE-2004-1350Oct 30, 2004
    Sun Corporation
    Java System Web Proxy Server
    risk 0.01cvss —epss 0.08

    Multiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6 through 3.6 SP4 allow remote attackers to execute arbitrary code via unknown vectors, possibly CONNECT requests.

  • CVE-2004-0523Aug 18, 2004
    Mit
    Kerberos
    risk 0.01cvss —epss 0.12

    Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.

  • CVE-2004-0368May 4, 2004
    Microfocus
    CDE
    risk 0.01cvss —epss 0.11

    Double free vulnerability in dtlogin in CDE on Solaris, HP-UX, and other operating systems allows remote attackers to execute arbitrary code via a crafted XDMCP packet.

  • CVE-2004-1082Feb 3, 2004
    Apache
    HTTP Server
    risk 0.01cvss —epss 0.08

    mod_digest_apple for Apache 1.3.31 and 1.3.32 on Mac OS X Server does not properly verify the nonce of a client response, which allows remote attackers to replay credentials.

  • CVE-2003-0028Mar 25, 2003
    dietlibc
    dietlibc
    risk 0.01cvss —epss 0.15

    Integer overflow in the xdrmem_getbytes() function, and possibly other functions, of XDR (external data representation) libraries derived from SunRPC, including libnsl, libc, glibc, and dietlibc, allows remote attackers to execute arbitrary code via certain integer values in…

  • CVE-2002-0845Aug 12, 2002
    Iplanet
    Iplanet Web Server
    risk 0.01cvss —epss 0.13

    Buffer overflow in Sun ONE / iPlanet Web Server 4.1 and 6.0 allows remote attackers to execute arbitrary code via an HTTP request using chunked transfer encoding.

  • CVE-2002-0677Jul 23, 2002
    Tooltalk
    Tooltalk Database Server
    risk 0.01cvss —epss 0.07

    CDE ToolTalk database server (ttdbserver) allows remote attackers to overwrite arbitrary memory locations with a zero, and possibly gain privileges, via a file descriptor argument in an AUTH_UNIX procedure call, which is used as a table index by the _TT_ISCLOSE procedure.

  • CVE-2002-0678Jul 23, 2002
    Cde
    Cde
    risk 0.01cvss —epss 0.09

    CDE ToolTalk database server (ttdbserver) allows local users to overwrite arbitrary files via a symlink attack on the transaction log file used by the _TT_TRANSACTION RPC procedure.

  • CVE-2002-0573Jul 3, 2002
    Sun Corporation
    Solaris
    risk 0.01cvss —epss 0.09

    Format string vulnerability in RPC wall daemon (rpc.rwalld) for Solaris 2.5.1 through 8 allows remote attackers to execute arbitrary code via format strings in a message that is not properly provided to the syslog function when the wall command cannot be executed.

  • CVE-2002-0348Jun 25, 2002
    Cobalt
    RaQ
    risk 0.01cvss —epss 0.08

    service.cgi in Cobalt RAQ 4 allows remote attackers to cause a denial of service, and possibly execute arbitrary code, via a long service argument.

  • CVE-2002-0346Jun 25, 2002
    Cobalt
    RaQ
    risk 0.01cvss —epss 0.06

    Cross-site scripting vulnerability in Cobalt RAQ 4 allows remote attackers to execute arbitrary script as other Cobalt users via Javascript in a URL to (1) service.cgi or (2) alert.cgi.

  • CVE-2002-0058Mar 15, 2002
    Netscape
    Netscape
    risk 0.01cvss —epss 0.09

    Vulnerability in Java Runtime Environment (JRE) allows remote malicious web sites to hijack or sniff a web client's sessions, when an HTTP proxy is being used, via a Java applet that redirects the session to another server, as seen in (1) Netscape 6.0 through 6.1 and 4.79 and…

  • CVE-2001-1328Jun 22, 2001
    Sun Corporation
    Solaris
    risk 0.01cvss —epss 0.17

    Buffer overflow in ypbind daemon in Solaris 5.4 through 8 allows remote attackers to execute arbitrary code.

  • CVE-1999-1478Jul 6, 1999
    Sun Corporation
    HotSpot Performance Engine VM
    risk 0.01cvss —epss 0.18

    The Sun HotSpot Performance Engine VM allows a remote attacker to cause a denial of service on any server running HotSpot via a URL that includes the [ character.

  • CVE-1999-0057Nov 16, 1998
    Eric Allman
    Vacation
    risk 0.01cvss —epss 0.08

    Vacation program allows command execution by remote users through a sendmail command.

  • CVE-1999-0104Dec 16, 1997
    Caldera
    Openlinux
    risk 0.01cvss —epss 0.09

    A later variation on the Teardrop IP denial of service attack, a.k.a. Teardrop-2.

  • CVE-1999-0185Oct 1, 1997
    Sun Corporation
    Solaris
    risk 0.01cvss —epss 0.07

    In SunOS or Solaris, a remote user could connect from an FTP server's data port to an rlogin server on a host that trusts the FTP server, allowing remote command execution.

  • CVE-1999-1467Oct 26, 1989
    Sun Corporation
    Sunos
    risk 0.01cvss —epss 0.10

    Vulnerability in rcp on SunOS 4.0.x allows remote attackers from trusted hosts to execute arbitrary commands as root, possibly related to the configuration of the nobody user.

  • CVE-2025-30761Jul 15, 2025
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Scripting). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf and 11.0.27; Oracle GraalVM Enterprise Edition: 21.3.14. Difficult to exploit…

  • CVE-2025-50106Jul 15, 2025
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK:…

  • CVE-2025-50063Jul 15, 2025
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.00

    Vulnerability in Oracle Java SE (component: Install). The supported version that is affected is Oracle Java SE: 8u451. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Java SE executes to compromise Oracle Java SE. …

  • CVE-2025-30754Jul 15, 2025
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.00

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK:…

  • CVE-2025-30752Jul 15, 2025
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK product of Oracle Java SE (component: Compiler). The supported version that is affected is Oracle Java SE: 24.0.1; Oracle GraalVM for JDK: 24.0.1. Difficult to exploit vulnerability allows unauthenticated attacker…

  • CVE-2025-30749Jul 15, 2025
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u451, 8u451-perf, 11.0.27, 17.0.15, 21.0.7, 24.0.1; Oracle GraalVM for JDK:…

  • CVE-2025-4178May 1, 2025
    Sun Corporation
    Java Asp Server
    risk 0.00cvss —epss 0.01

    A vulnerability was found in xiaowei1118 java_server up to 11a5bac8f4ba1c17e4bc1b27cad6d24868500e3a on Windows and classified as critical. This issue affects some unknown processing of the file /src/main/java/com/changyu/foryou/controller/FoodController.java of the component…

  • CVE-2024-56518Apr 17, 2025
    Sun Corporation
    Management\+center
    risk 0.00cvss —epss 0.01

    Hazelcast Management Center through 6.0 allows remote code execution via a JndiLoginModule user.provider.url in a hazelcast-client XML document (aka a client configuration file), which can be uploaded at the /cluster-connections URI.

  • CVE-2025-30698Apr 15, 2025
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u441, 8u441-perf, 11.0.26, 17.0.14, 21.0.6, 24; Oracle GraalVM for JDK: 17.0.14,…

  • CVE-2025-30691Apr 15, 2025
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.00

    Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6, 24; Oracle GraalVM for JDK: 21.0.6 and 24. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…

  • CVE-2025-0830Mar 17, 2025
    Sun Corporation
    Change Manager
    risk 0.00cvss —epss 0.00

    A stored Cross-site Scripting (XSS) vulnerability affecting Meeting Management in ENOVIA Change Manager from Release 3DEXPERIENCE R2022x through Release 3DEXPERIENCE R2024x allows an attacker to execute arbitrary script code in user's browser session.

  • CVE-2025-21502Jan 21, 2025
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u431-perf, 11.0.25, 17.0.13, 21.0.5, 23.0.1; Oracle GraalVM for JDK: 17.0.13,…

  • CVE-2024-21235Oct 15, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK:…

  • CVE-2024-21217Oct 15, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK:…

  • CVE-2024-21211Oct 15, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 23; Oracle GraalVM for JDK: 17.0.12, 21.0.4, 23; Oracle GraalVM Enterprise…

  • CVE-2024-21210Oct 15, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4 and 23. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to…

  • CVE-2024-21208Oct 15, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected are Oracle Java SE: 8u421, 8u421-perf, 11.0.24, 17.0.12, 21.0.4, 23; Oracle GraalVM for JDK:…

  • CVE-2024-21147Jul 16, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:…

  • CVE-2024-21145Jul 16, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: 2D). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:…

  • CVE-2024-21144Jul 16, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23; Oracle GraalVM Enterprise Edition: 20.3.14 and 21.3.10. Difficult to…

  • CVE-2024-21140Jul 16, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:…

  • CVE-2024-21138Jul 16, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u411, 8u411-perf, 11.0.23, 17.0.11, 21.0.3, 22.0.1; Oracle GraalVM for JDK:…

  • CVE-2024-21094Apr 16, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK:…

  • CVE-2024-21085Apr 16, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Oracle Java SE: 8u401, 8u401-perf, 11.0.22; Oracle GraalVM Enterprise Edition: 20.3.13 and 21.3.9. Difficult to…

  • CVE-2024-21068Apr 16, 2024
    Sun Corporation
    Java SE
    risk 0.00cvss —epss 0.01

    Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Oracle Java SE: 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22; Oracle GraalVM for JDK: 17.0.10,…

Page 11 of 42