Sun

Records1603All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical290CVSS 9.0–10.0

CVSS high436CVSS 7.0–8.9

Exploited now

Sun records in CISA KEV

TI-2013-02212 Oracle Java SE Unspecified Vulnerability CRITICAL 100KEV 2022-03-28 TI-2012-00455 Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability CRITICAL 100KEV 2022-03-03

Components

Products in the NVD configurations · select one to filter the records

Sunos 561 records CRITICAL Solaris 450 records CRITICAL Jre 423 records CRITICAL Jdk 392 records CRITICAL Sdk 126 records CRITICAL Opensolaris 113 records HIGH Java System Web Server 32 records HIGH Java System Application Server 22 records HIGH

Records

126 records in Sdk · all components

TI-2008-05098 CVE-2008-5353 · GHSA-3fx3-qcjv-qr6h

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and…

CRITICAL 85

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not properly enforce context of ZoneInfo objects during des…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.86081 Published 2008-12-05 Fixed

TI-2009-03675 CVE-2009-3867 · GHSA-h62j-9mvm-r9mf

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK…

HIGH 78

Stack-based buffer overflow in the HsbParser.getSoundBank function in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.73193 Published 2009-11-05 Fixed CWE-119

TI-2009-03677 CVE-2009-3869 · GHSA-xf34-q2g4-cjm6

Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit…

HIGH 76

Stack-based buffer overflow in the setDiffICM function in the Abstract Window Toolkit (AWT) in Java Runtime Environment (JRE) in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JR…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.65353 Published 2009-11-05 Fixed CWE-119

TI-2010-00803 CVE-2010-0842 · GHSA-5mqp-g99f-6r5f

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

HIGH 72

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 18, 5.0 Update 23, 1.4.2_25, and 1.3.1_27 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.77721 Published 2010-04-01 Fixed

TI-2008-02976 CVE-2008-3112 · GHSA-f5xr-w782-5rg9

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7…

MEDIUM 64

Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create arbitrary files via the…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.25727 Published 2008-07-09 Fixed CWE-264

TI-2008-01142 CVE-2008-1190 · GHSA-m6g6-6pj7-xcc2

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier…

MEDIUM 57

Unspecified vulnerability in Java Web Start in Sun JDK and JRE 6 Update 4 and earlier, 5.0 Update 14 and earlier, and SDK/JRE 1.4.2_16 and earlier allows remote attackers to gain privileges via an untrusted application,…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.16899 Published 2008-03-06 Fixed CWE-264

TI-2007-04838 CVE-2007-5019 · GHSA-c5xr-m2wm-p2c8

Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment…

MEDIUM 56

Buffer overflow in the Sun Java Web Start ActiveX control in Java Runtime Environment (JRE) 1.6.0_X allows remote attackers to have an unknown impact via a long argument to the dnsResolve (isInstalled.dnsResolve) method.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.10465 Published 2007-09-20 No fix listed CWE-119

TI-2010-03400 CVE-2010-3571 · GHSA-wrrm-3qvm-g7qm

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 55

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09146 Published 2010-10-19 Fixed

TI-2010-03388 CVE-2010-3559 · GHSA-vj8f-hqf8-qh5x

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

MEDIUM 55

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability v…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.09711 Published 2010-10-19 Fixed

TI-2002-00072 CVE-2002-0076 · GHSA-x79p-2mvq-597f

Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the…

MEDIUM 55

Java Runtime Environment (JRE) Bytecode Verifier allows remote attackers to escape the Java sandbox and execute commands via an applet containing an illegal cast operation, as seen in (1) Microsoft VM build 3802 and earl…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.26861 Published 2003-04-02 No fix listed

TI-2008-05100 CVE-2008-5355 · GHSA-vxv3-8pcw-fwgr

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update…

MEDIUM 54

The "Java Update" feature for Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier does not verify the signature of the J…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.08189 Published 2008-12-05 No fix listed CWE-287

TI-2010-03398 CVE-2010-3569 · GHSA-gxmw-9pmp-92hq

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 53

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and avail…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2010-03391 CVE-2010-3562 · GHSA-7242-cf77-68qm

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 53

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.07099 Published 2010-10-19 Fixed

TI-2008-05104 CVE-2008-5359 · GHSA-cq8v-6hvc-rjqq

Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and…

MEDIUM 53

Buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow rem…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.10784 Published 2008-12-05 Fixed CWE-119

TI-2009-03681 CVE-2009-3874 · GHSA-pf3m-9ffm-83vh

Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun…

MEDIUM 52

Integer overflow in the JPEGImageReader implementation in the ImageI/O component in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, and SDK and JRE 1.4.x before 1.4.2_24 allows remote att…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.09498 Published 2009-11-05 Fixed CWE-189

TI-2008-05102 CVE-2008-5357 · GHSA-vwpw-5ffm-g9xg

Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and…

MEDIUM 52

Integer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 and earlier might allow re…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.10015 Published 2008-12-05 Partial fix CWE-189

TI-2008-05101 CVE-2008-5356 · GHSA-xq7j-r54v-pxq6

Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update…

MEDIUM 52

Heap-based buffer overflow in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlier might allow remote attackers to execut…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.08914 Published 2008-12-05 Partial fix CWE-119

TI-2008-02977 CVE-2008-3113 · GHSA-32mg-gg62-gfq3

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and…

MEDIUM 52

Unspecified vulnerability in Sun Java Web Start in JDK and JRE 5.0 before Update 16 and SDK and JRE 1.4.x before 1.4.2_18 allows remote attackers to create or delete arbitrary files via an untrusted application, aka CR 6…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.06443 Published 2008-07-09 Fixed CWE-264

TI-2010-04206 CVE-2010-4473 · GHSA-pq9h-x7ww-cqrg

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 51

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and Java for Business 6 Update 23 and earlier, 5.0 Update 27 and earlier, and 1.4.2_29 and earlier allows remote attackers to affect confi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05489 Published 2011-02-17 Fixed

TI-2010-04195 CVE-2010-4462 · GHSA-63ph-j5mq-mmjf

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05489 Published 2011-02-17 Fixed

TI-2010-04187 CVE-2010-4454 · GHSA-vp2p-mr7x-53m2

Unspecified vulnerability in the Java Runtime Environment (JRE) in Oracle Java SE and…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05489 Published 2011-02-17 Fixed

TI-2010-03403 CVE-2010-3574 · GHSA-6gvj-cjgc-qxmv

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for…

MEDIUM 51

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availabil…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03401 CVE-2010-3572 · GHSA-58vp-fj3h-8rjv

Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05193 Published 2010-10-19 Fixed

TI-2010-03397 CVE-2010-3568 · GHSA-jmxm-vpv4-jjr2

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE and…

MEDIUM 51

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.049 Published 2010-10-19 Fixed

TI-2010-03394 CVE-2010-3565 · GHSA-h9j4-m2pf-hmrh

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6…

MEDIUM 51

Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, and 1.4.2_27 allows remote attackers to affect confidentiality, integrity, and availability via unknown ve…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05616 Published 2010-10-19 Fixed

Open these records in search →

Critical	290
High	436
Medium	704
Low	170
No CVSS	3