Sun

Records1603All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical290CVSS 9.0–10.0

CVSS high436CVSS 7.0–8.9

Exploited now

Sun records in CISA KEV

TI-2013-02212 Oracle Java SE Unspecified Vulnerability CRITICAL 100KEV 2022-03-28 TI-2012-00455 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records

Sunos 561 records CRITICAL Solaris 450 records CRITICAL Jre 423 records CRITICAL Jdk 392 records CRITICAL Sdk 126 records CRITICAL Opensolaris 113 records HIGH Java System Web Server 32 records HIGH Java System Application Server 22 records HIGH

Records

14 records in Java · all components

TI-2010-00848 CVE-2010-0887 · GHSA-8chj-jgfj-x7f4

Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java…

MEDIUM 55

Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and availability via unknow…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09428 Published 2010-04-20 Fixed

TI-2005-02395 CVE-2005-2530 · GHSA-4x6g-wvjv-qm6c

Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an…

MEDIUM 48

Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02508 Published 2006-08-05 No fix listed

TI-2005-02394 CVE-2005-2529 · GHSA-wj72-pphv-rg4c

Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows…

MEDIUM 47

Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.02309 Published 2006-08-05 No fix listed

TI-2009-01059 CVE-2009-1105 · GHSA-q538-87mq-rwpp

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6…

LOW 39

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be us…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03558 Published 2009-03-25 Fixed

TI-1999-00435 CVE-1999-0440 · GHSA-wwvm-jq77-pvrq

The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.

LOW 39

The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03636 Published 2000-10-13 No fix listed

TI-2008-03300 CVE-2008-3440 · GHSA-56rx-ch74-jh4v

Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly…

LOW 37

Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02409 Published 2008-08-01 No fix listed CWE-94

TI-2009-01057 CVE-2009-1103 · GHSA-4hqw-69p6-5rh9

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java…

LOW 36

Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.04519 Published 2009-03-25 Fixed

TI-2009-01056 CVE-2009-1102 · GHSA-mxp4-j667-h9h6

Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and…

LOW 36

Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown…

CVSS 2.0MEDIUM 6.4 Network No auth Interaction — EPSS 0.04574 Published 2009-03-25 Fixed CWE-94

TI-1999-00140 CVE-1999-0142 · GHSA-3h3c-vjf9-4r2r

The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java…

LOW 36

The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01577 Published 2000-06-02 No fix listed

TI-2009-01058 CVE-2009-1104 · GHSA-pqph-446w-r3p4

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0…

LOW 30

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localh…

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02165 Published 2009-03-25 Fixed CWE-16

TI-2005-02601 CVE-2005-2738 · GHSA-fwwv-5jh4-hx7p

Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs…

LOW 26

Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data in…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01765 Published 2006-08-05 No fix listed

TI-2009-01061 CVE-2009-1107 · GHSA-xx8v-jwch-cjrx

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6…

LOW 25

The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unkno…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.02799 Published 2009-03-25 Fixed

TI-2003-01037 CVE-2003-1134 · GHSA-5qr3-r482-pgmx

Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM…

LOW 13

Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer e…

CVSS 2.0LOW 2.1 Local No auth Interaction — EPSS 0.00802 Published 2005-05-10 No fix listed

TI-2005-02393 CVE-2005-2527 · GHSA-7fqm-4mw8-jrhj

Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users…

LOW 8

Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symli…

CVSS 2.0LOW 1.2 Local No auth Interaction — EPSS 0.00323 Published 2006-08-05 No fix listed CWE-59

Open these records in search →

Critical	290
High	436
Medium	704
Low	170
No CVSS	3