Skip to content

Sun Java vulnerabilities

sun java enterprise system, java system directory server +1 moreMemory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4...CVE-2006-31277.8 HighJune 21, 2006
sun java system directory serverUnspecified vulnerability in the installation process in Sun Java System Directory Server 5.2...CVE-2006-25137.5 HighMay 22, 2006
sun java system application server, java system web server, one application server +1 more +3 moreCross-site scripting (XSS) vulnerability in Sun ONE Web Server 6.0 SP9 and earlier, Java System...CVE-2006-25016.8 MediumMay 20, 2006
sun java studio enterpriseSun Java Studio Enterprise 8, when installed as root, creates certain files with world-writable...CVE-2006-18303.7 LowApril 19, 2006
sun java system directory serverLDAP service in Sun Java System Directory Server 5.2, running on Linux and possibly other...CVE-2006-0647Public exploit5.0 MediumFebruary 13, 2006
sun java system access managerUnspecified vulnerability in Sun Java System Access Manager 7.0 allows local users logged in as ...CVE-2006-05317.2 HighFebruary 4, 2006
sun java plug-inThe Java Plug-in 1.4.2_03 and 1.4.2_04 controls, and the 1.4.2_03 and 1.4.2_04 <applet>...CVE-2005-48455.0 MediumDecember 31, 2005
sun java system web proxy serverMultiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier...CVE-2005-48065.0 MediumDecember 31, 2005
sun java system application serverUnspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6...CVE-2005-48055.0 MediumDecember 31, 2005
sun java system application serverUnspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise...CVE-2005-48045.0 MediumDecember 31, 2005
sun javaJava 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from...CVE-2005-27385.0 MediumDecember 31, 2005
sun javaUnspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted...CVE-2005-253010.0 HighDecember 31, 2005
sun javaUnspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local...CVE-2005-252910.0 HighDecember 31, 2005
sun javaRace condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to...CVE-2005-25271.2 LowDecember 31, 2005
apache tomcat tomcat, sun javamail +1 more** DISPUTED ** JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote...CVE-2005-1754Public exploitDisputed5.0 MediumDecember 31, 2005
sun javamail** DISPUTED ** ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0...CVE-2005-1753Disputed5.0 MediumDecember 31, 2005
sun java system application server, one application server +1 moreUnspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server...CVE-2005-40464.0 MediumDecember 7, 2005
sun java communications services delegated administratorUnspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in...CVE-2005-40457.5 HighDecember 7, 2005
sun java system communications expressUnspecified vulnerability in Sun Java System Communications Express 2005Q1 and 2004Q2 allows...CVE-2005-34725.0 MediumNovember 3, 2005
sun java system directory server, one administration server, one directory server +1 more +3 moreStack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java...CVE-2005-32697.5 HighOctober 20, 2005
sun java system web serverUnknown vulnerability in Sun ONE Application Server 6.5 SP1 Maintenance Update 6 and earlier...CVE-2005-18895.0 MediumJune 7, 2005
sun java system web proxy serverBuffer overflow in Sun Java System Web Proxy Server (aka Sun ONE Proxy Server) 3.6 SP6 allows...CVE-2005-12327.5 HighApril 24, 2005
sun java system web serverUnknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier, when running on Windows...CVE-2005-11505.0 MediumApril 16, 2005
sun javamailDirectory traversal vulnerability in the MimeBodyPart.getFileName method in JavaMail 1.3.2 allows...CVE-2005-1105Public exploit5.0 MediumApril 13, 2005
sun java system application serverCross-site scripting (XSS) vulnerability in Sun Java System Application Server 7 allows remote...CVE-2005-07424.3 MediumMarch 13, 2005
sun java system web server, java system application server +1 moreUnknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier,...CVE-2004-22165.0 MediumDecember 31, 2004
gnu a2ps, sun java desktop system, suse linux +2 morea2ps 4.13 allows remote attackers to execute arbitrary commands via shell metacharacters in the...CVE-2004-1170Public exploitFix availableEPSS 16.0%10.0 HighDecember 10, 2004
sun java system web proxy serverMultiple buffer overflows in Sun Java System Web Proxy Server (formerly Sun ONE Proxy Server) 3.6...CVE-2004-13507.5 HighOctober 30, 2004
enlightenment imlib, imlib2, conectiva linux +11 more +13 moreBuffer overflow in the BMP loader in imlib2 before 1.1.2 allows remote attackers to execute...CVE-2004-0802Fix available5.1 MediumSeptember 22, 2004
enlightenment imlib, conectiva linux, enlightenment imlib2 +11 more +13 moreMultiple heap-based buffer overflows in the imlib BMP image handler allow remote attackers to...CVE-2004-0817Fix available7.5 HighSeptember 17, 2004
conectiva linux, linuxprinting.org foomatic-filters, sun java desktop system +1 more +3 moreUnknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote...CVE-2004-0801Fix available7.5 HighSeptember 16, 2004
imagemagick, conectiva linux, enlightenment imlib +9 more +11 moreMultiple buffer overflows in the ImageMagick graphics library 5.x before 5.4.4, and 6.x before 6...CVE-2004-0827Fix available7.5 HighSeptember 16, 2004
mozilla network security services, hp hp-ux, netscape certificate server +7 more +9 moreHeap-based buffer overflow in Netscape Network Security Services (NSS) library allows remote...CVE-2004-0826EPSS 22.5%7.5 HighSeptember 2, 2004
sun java system calendar serverSun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain...CVE-2004-074210.0 HighJuly 23, 2004
sun java plug-inSun Java Plug-In 1.4 through 1.4.2_02 allows remote attackers to repeatedly access the floppy...CVE-2003-1521Public exploit6.4 MediumDecember 31, 2003
sun java plug-inThe org.apache.xalan.processor.XSLProcessorVersion class in Java Plug-in 1.4.2_01 allows signed...CVE-2003-1516Public exploit6.8 MediumDecember 31, 2003
oracle jre, sun java web start, jsse +2 moreX509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01...CVE-2003-12297.5 HighDecember 31, 2003
sun javaSun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash),...CVE-2003-1134Public exploit2.1 LowDecember 31, 2003
sun java web startUnknown vulnerability in Java web start 1.0.1_01, 1.0.1, 1.0 and 1.0.1.01 (HP-UX 11.x only)...CVE-2002-20057.5 HighDecember 31, 2002
sun jre, java plug-in +1 moreJava Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which...CVE-2001-10087.5 HighAugust 31, 2001
sun javaserver web dev kitDirectory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers...CVE-2001-04045.0 MediumMay 24, 2001
sun hotjava browserHotJava Browser 3.0 allows remote attackers to access the DOM of a web page by opening a...CVE-2000-0958Public exploit5.0 MediumDecember 19, 2000
sun java system web serverThe administration module in Sun Java web server allows remote attackers to execute arbitrary...CVE-2000-081210.0 HighOctober 18, 2000
sun java system web serverThe default configuration of the Sun Java web server 2.0 and earlier allows remote attackers to...CVE-2000-06297.5 HighJuly 12, 2000
sun java, netscape communicator, navigator +2 moreThe byte code verifier component of the Java Virtual Machine (JVM) allows remote execution...CVE-1999-04407.5 HighMarch 1, 1999
netscape navigator, sun java +1 moreThe Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's...CVE-1999-01427.5 HighMarch 1, 1996