VYPR
← Sun Corporation

Vendor CVEs

Sun Corporation

All CVEs

2,062 total · sorted by risk
  • CVE-2013-1493Mar 5, 2013
    Sun Corporation
    Jdk
    risk 0.10cvss —epss 0.86

    The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster…

  • CVE-2010-4452Feb 17, 2011
    Sun Corporation
    Jre
    risk 0.10cvss —epss 0.83

    Unspecified vulnerability in the Deployment component in Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and…

  • CVE-2010-3563Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.10cvss —epss 0.84

    Unspecified vulnerability in the Deployment component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU.…

  • CVE-2010-0094Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.10cvss —epss 0.82

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 18 and 5.0 Update 23 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2008-5353Dec 5, 2008
    Sun Corporation
    Jdk
    risk 0.10cvss —epss 0.85

    The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during deserialization, which allows remote attackers to run…

  • CVE-2003-0722Sep 22, 2003
    Sun Corporation
    Solaris
    risk 0.10cvss —epss 0.88

    The default installation of sadmind on Solaris uses weak authentication (AUTH_SYS), which allows local and remote attackers to spoof Solstice AdminSuite clients and gain root privileges via a certain sequence of RPC packets.

  • CVE-2003-0201May 5, 2003
    Samba (software)
    Samba
    risk 0.10cvss —epss 0.84

    Buffer overflow in the call_trans2open function in trans2.c for Samba 2.2.x before 2.2.8a, 2.0.10 and earlier 2.0.x versions, and Samba-TNG before 0.3.2, allows remote attackers to execute arbitrary code.

  • CVE-2001-1583Dec 31, 2001
    Sun Corporation
    Solaris
    risk 0.10cvss —epss 0.83

    lpd daemon (in.lpd) in Solaris 8 and earlier allows remote attackers to execute arbitrary commands via a job request with a crafted control file that is not properly handled when lpd invokes a mail program. NOTE: this might be the same vulnerability as CVE-2000-1220.

  • CVE-2001-0797Dec 12, 2001
    Sgi
    Irix
    risk 0.10cvss —epss 0.89

    Buffer overflow in login in various System V based operating systems allows remote attackers to execute arbitrary commands via a large number of arguments through services such as telnet and rlogin.

  • CVE-2012-5088Oct 16, 2012
    Sun Corporation
    Java SE
    risk 0.09cvss —epss 0.79

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries.

  • CVE-2011-3556Oct 19, 2011
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.76

    Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, 1.4.2_33 and earlier, and JRockit R28.1.4 and earlier allows remote attackers to affect confidentiality, integrity, and…

  • CVE-2010-3552Oct 19, 2010
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.81

    Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0886Apr 20, 2010
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.70

    Unspecified vulnerability in the Java Deployment Toolkit component in Oracle Java SE and Java for Business JDK and JRE 6 Update 10 through 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.

  • CVE-2010-0842Apr 1, 2010
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.78

    Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was…

  • CVE-2010-0361Jan 20, 2010
    Sun Corporation
    Java System Web Server
    risk 0.09cvss —epss 0.81

    Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.

  • CVE-2009-3867Nov 5, 2009
    Sun Corporation
    Jdk
    risk 0.09cvss —epss 0.73

    Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2_24 allows remote attackers to execute arbitrary code via a…

  • CVE-2008-4556Oct 14, 2008
    Sun Corporation
    Solaris
    risk 0.09cvss —epss 0.70

    Stack-based buffer overflow in the adm_build_path function in sadmind in Sun Solstice AdminSuite on Solaris 8 and 9 allows remote attackers to execute arbitrary code via a crafted request.

  • CVE-2007-5365Oct 11, 2007
    Isc
    DHCP
    risk 0.09cvss —epss 0.80

    Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request…

  • CVE-2007-3370Jun 22, 2007
    Kim Kyoung Min
    Sun Board
    risk 0.09cvss —epss 0.75

    Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in (1) the sunPath parameter to include.php or (2) the dir parameter to skin/board/default/doctype.php.

  • CVE-2004-0790Apr 12, 2005
    Sun Corporation
    Solaris
    risk 0.09cvss —epss 0.81

    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (reset TCP connections) via spoofed ICMP error messages, aka the "blind connection-reset attack." NOTE: CVE-2004-0790, CVE-2004-0791, and CVE-2004-1060 have been SPLIT based on…

  • CVE-2002-1337Mar 7, 2003
    Sendmail, Inc.
    Sendmail
    risk 0.09cvss —epss 0.72

    Buffer overflow in Sendmail 5.79 to 8.12.7 allows remote attackers to execute arbitrary code via certain formatted address fields, related to sender and recipient header comments as processed by the crackaddr function of headers.c.

  • CVE-2001-0236May 3, 2001
    Sun Corporation
    Solaris
    risk 0.09cvss —epss 0.72

    Buffer overflow in Solaris snmpXdmid SNMP to DMI mapper daemon allows remote attackers to execute arbitrary commands via a long "indication" event.

  • CVE-1999-0513Jan 5, 1998
    IBM
    Aix
    risk 0.09cvss —epss 0.70

    ICMP messages to broadcast addresses are allowed, allowing for a Smurf attack that can cause a denial of service.

  • CVE-1999-0128Dec 18, 1996
    IBM
    Aix
    risk 0.09cvss —epss 0.74

    Oversized ICMP ping packets can result in a denial of service, aka Ping o' Death.

  • CVE-2014-6593Jan 21, 2015
    Sun Corporation
    Java SE
    risk 0.08cvss —epss 0.67

    Unspecified vulnerability in Oracle Java SE 5.0u75, 6u85, 7u72, and 8u25; Java SE Embedded 7u71 and 8u6; and JRockit 27.8.4 and 28.3.4 allows remote attackers to affect confidentiality and integrity via vectors related to JSSE.

  • CVE-2012-5067Oct 16, 2012
    Sun Corporation
    Java SE
    risk 0.08cvss —epss 0.64

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier allows remote attackers to affect confidentiality via unknown vectors related to Deployment.

  • CVE-2012-1533Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.08cvss —epss 0.69

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, and 6 Update 35 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Deployment, a different…

  • CVE-2012-0500Feb 15, 2012
    Sun Corporation
    Jre
    risk 0.08cvss —epss 0.59

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 2 and earlier, 6 Update 30 and earlier, and JavaFX 2.0.2 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality,…

  • CVE-2011-0807Apr 20, 2011
    Sun Corporation
    Java System Application Server
    risk 0.08cvss —epss 0.61

    Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration.

  • CVE-2009-3869Nov 5, 2009
    Sun Corporation
    Jdk
    risk 0.08cvss —epss 0.65

    Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before…

  • CVE-2003-0694Oct 6, 2003
    Sendmail, Inc.
    Sendmail
    risk 0.08cvss —epss 0.60

    The prescan function in Sendmail 8.12.9 allows remote attackers to execute arbitrary code via buffer overflow attacks, as demonstrated using the parseaddr function in parseaddr.c.

  • CVE-2001-0779Oct 18, 2001
    Sun Corporation
    Solaris
    risk 0.08cvss —epss 0.62

    Buffer overflow in rpc.yppasswdd (yppasswd server) in Solaris 2.6, 7 and 8 allows remote attackers to gain root access via a long username.

  • CVE-2012-5081Oct 16, 2012
    Sun Corporation
    Jre
    risk 0.07cvss —epss 0.45

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 7 and earlier, 6 Update 35 and earlier, 5.0 Update 36 and earlier, and 1.4.2_38 and earlier allows remote attackers to affect availability, related to JSSE.

  • CVE-1999-0502Mar 1, 1998
    Sun Corporation
    Solaris
    risk 0.07cvss —epss 0.52

    A Unix account has a default, null, blank, or missing password.

  • CVE-1999-0046Feb 6, 1997
    Bsdi
    BSD OS
    risk 0.07cvss —epss 0.53

    Buffer overflow of rlogin program using TERM environmental variable.

  • CVE-1999-0209Aug 14, 1990
    Sun Corporation
    SunView
    risk 0.07cvss —epss 0.49

    The SunView (SunTools) selection_svc facility allows remote users to read files.

  • CVE-2012-0217Jun 12, 2012
    Microsoft
    Windows Server 2008
    risk 0.06cvss —epss 0.37

    The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta…

  • CVE-2010-2632Jan 19, 2011
    Sun Corporation
    Sunos
    risk 0.06cvss —epss 0.32

    Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this…

  • CVE-2003-0161Apr 2, 2003
    Sendmail, Inc.
    Sendmail
    risk 0.06cvss —epss 0.38

    The prescan() function in the address parser (parseaddr.c) in Sendmail before 8.12.9 does not properly handle certain conversions from char and int types, which can cause a length check to be disabled when Sendmail misinterprets an input value as a special "NOCHAR" control…

  • CVE-2001-0554Aug 14, 2001
    Telnetd
    Telnetd
    risk 0.06cvss —epss 0.38

    Buffer overflow in BSD-based telnetd telnet daemon on various operating systems allows remote attackers to execute arbitrary commands via a set of options including AYT (Are You There), which is not properly handled by the telrcv function.

  • CVE-1999-0015Dec 16, 1997
    Sun Corporation
    Sunos
    risk 0.06cvss —epss 0.36

    Teardrop IP denial of service.

  • CVE-2013-2472Jun 18, 2013
    Openjdk
    OpenJDK
    risk 0.05cvss —epss 0.23

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown…

  • CVE-2013-2470Jun 18, 2013
    Openjdk
    OpenJDK
    risk 0.05cvss —epss 0.23

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and OpenJDK 7, allows remote attackers to affect confidentiality, integrity, and availability via unknown…

  • CVE-2013-1571Jun 18, 2013
    Openjdk
    OpenJDK
    risk 0.05cvss —epss 0.67

    Unspecified vulnerability in the Javadoc component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier; JavaFX 2.2.21 and earlier; and OpenJDK 7 allows remote attackers to affect integrity via unknown vectors related to Javadoc.…

  • CVE-2013-2419Apr 17, 2013
    Openjdk
    OpenJDK
    risk 0.05cvss —epss 0.23

    Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 17 and earlier, 6 Update 43 and earlier, and 5.0 Update 41 and earlier; and OpenJDK 6 and 7; allows remote attackers to affect availability via unknown vectors related to 2D. …

  • CVE-2005-4797Dec 31, 2005
    Sun Corporation
    Solaris
    risk 0.05cvss —epss 0.29

    Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary files via ".." sequences in an "Unlink data file" command.

  • CVE-2004-0791Apr 12, 2005
    Sun Corporation
    Solaris
    risk 0.05cvss —epss 0.20

    Multiple TCP/IP and ICMP implementations allow remote attackers to cause a denial of service (network throughput reduction for TCP connections) via a blind throughput-reduction attack using spoofed Source Quench packets, aka the "ICMP Source Quench attack." NOTE: CVE-2004-0790,…

  • CVE-2003-0027Feb 7, 2003
    Sun Corporation
    KCMS
    risk 0.05cvss —epss 0.26

    Directory traversal vulnerability in Sun Kodak Color Management System (KCMS) library service daemon (kcms_server) allows remote attackers to read arbitrary files via the KCS_OPEN_PROFILE procedure.

  • CVE-2002-1317Dec 11, 2002
    Sun Corporation
    Solaris
    risk 0.05cvss —epss 0.24

    Buffer overflow in Dispatch() routine for XFS font server (fs.auto) on Solaris 2.5.1 through 9 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a certain XFS query.

  • CVE-2002-0033May 29, 2002
    Sun Corporation
    Solaris
    risk 0.05cvss —epss 0.23

    Heap-based buffer overflow in cfsd_calloc function of Solaris cachefsd allows remote attackers to execute arbitrary code via a request with a long directory and cache name.

Page 4 of 42