← Back

Sun

sun

1,603 CVEs • 200 products

Products (200)

Click to collapse
Toggle
Sunos
sunos
Solaris
solaris
Jre
jre
Jdk
jdk
Sdk
sdk
Opensolaris
opensolaris
Openjdk
openjdk
Java
java
Java Se
java_se
Cobalt Raq 2
cobalt_raq_2
Cobalt Raq 3i
cobalt_raq_3i
Staroffice
staroffice
Cluster
cluster
J2se
j2se
Ehrd
ehrd
Cobalt Raq 4
cobalt_raq_4
Virtualbox
virtualbox
Chilisoft
chilisoft
Java Plug In
java_plug-in
Javamail
javamail
Grid Engine
grid_engine
Nfs
nfs
Cobalt Raq
cobalt_raq
Sun Fire
sun_fire
Jsse
jsse
J2ee
j2ee
I Runbook
i-runbook
Openwindows
openwindows
Fire X2100 M2
fire_x2100_m2
Fire X2200 M2
fire_x2200_m2
Workshop
workshop
Sun Ftp
sun_ftp
Sunvts
sunvts
Netdynamics
netdynamics
Linux
linux
Cobalt Raq Xtr
cobalt_raq_xtr
Patchpro
patchpro
Patch Manager
patch_manager
Seam
seam
Dtmail
dtmail
J2me
j2me
Netra 1280
netra_1280
Sunforum
sunforum

CVEs (1,603)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Sun
1Java System Web Proxy Server
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Multiple unspecified vulnerabilities in Sun Java System Web Proxy Server 3.6 SP7 and earlier allow remote attackers to cause a denial of service (unresponsive service) via unknown vectors.
1Sun
1Java System Application Server
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source c...Show more
Unspecified vulnerability in Sun Java System Application Server 7 Standard and Platform Edition 6 and earlier, and 2004Q2 Standard and Platform Edition Update 2 and earlier, allows remote attackers to obtain the source code for Java Server pages (JSP) via unknown vectors.Show less
1Sun
1Java System Application Server
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to dep...Show more
Unspecified vulnerability in Sun Java System Application Server Platform Edition and Enterprise Edition 8.1 2005 Q1, and Platform Edition UR1, allows remote attackers to read .jar files via unknown vectors related to deployed web applications.Show less
1Sun
2Solaris
Sunos
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary files via ".." sequences in an "Unlink data file" command.
1Sun
2Solaris
Sunos
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
3.6 LOW· v2
Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exit...Show more
Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exits.Show less
1Sun
1Sunos
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
7.2 HIGH· v2
Unspecified vulnerability in the multi-language environment library (libmle) in Solaris 7 and 8, as shipped with the Japanese locale, allows local users to gain privileges via unknown attack vectors.
1Sun
1Solaris
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors that trigger a null dereference in the secpolicy_fs_common fun...Show more
Unspecified vulnerability in the "privilege management" feature of Sun Solaris 10 allows local users to cause a denial of service (panic) via unknown vectors that trigger a null dereference in the secpolicy_fs_common function.Show less
1Sun
1Solaris
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in Process File System (procfs) in Sun Solaris 10 allows local users to obtain sensitive information such as process working directories via unknown attack vectors, possibly pwdx.
1Sun
1Java
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data in...Show more
Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program.Show less
1Sun
1Java
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."
1Sun
1Java
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
10.0 HIGH· v2
Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."
1Sun
1Java
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
1.2 LOW· v2
Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symli...Show more
Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a temporary directory, possibly due to a symlink attack.Show less
2Apache Tomcat
Sun
2Apache Tomcat
Javamail
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. S...Show more
JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to read arbitrary files via a full pathname in the argument to the Download parameter. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products.Show less
1Sun
1Javamail
Apr 16, 2026
Dec 31, 2005
N/A· v4
N/A· v3
5.0 MEDIUM· v2
ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and...Show more
ReadMessage.jsp in JavaMail API 1.1.3 through 1.3, as used by Apache Tomcat 5.0.16, allows remote attackers to view other users' e-mail attachments via a direct request to /mailboxesdir/username@domainname. NOTE: Sun and Apache dispute this issue. Sun states: "The report makes references to source code and files that do not exist in the mentioned products.Show less
1Sun
1Solaris Pc Netlink
Apr 16, 2026
Dec 28, 2005
N/A· v4
N/A· v3
7.2 HIGH· v2
The (1) slsmgr and (2) slsadmin programs in Sun Solaris PC NetLink 2.0 create temporary files insecurely, which allows local users to gain privileges.
1Sun
1Wbem Services
Apr 16, 2026
Dec 20, 2005
N/A· v4
N/A· v3
7.8 HIGH· v2
Unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attackers to cause an unspecified denial of service via unknown attack vecto...Show more
Unspecified vulnerability in WBEM Services A.01.x before A.01.05.12 and A.02.x before A.02.00.08 on HP-UX B.11.00 through B.11.23 allows remote attackers to cause an unspecified denial of service via unknown attack vectors.Show less
1Sun
1Solaris
Apr 16, 2026
Dec 9, 2005
N/A· v4
N/A· v3
2.1 LOW· v2
Sun Update Connection in Sun Solaris 10, when configured to use a web proxy, allows local users to obtain the proxy authentication password via (1) an unspecified vector and (2) proxy log files.
1Sun
2Java System Application Server
One Application Server
Apr 16, 2026
Dec 7, 2005
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition...Show more
Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct man-in-the-middle (MITM) attacks and "compromise data privacy."Show less
1Sun
1Java Communications Services Delegated Administrator
Apr 16, 2026
Dec 7, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator (TLA) default password...Show more
Unspecified vulnerability in System Communications Services 6 Delegated Administrator 2005Q1 in Sun Java System Messaging Server 2005Q1 allows remote attackers to obtain the Top-Level Administrator (TLA) default password via unknown vectors, possibly involving configure_toplevel_admin.ldif.Show less
1Sun
2Jdk
Jre
Apr 16, 2026
Nov 30, 2005
N/A· v4
N/A· v3
7.5 HIGH· v2
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unkno...Show more
Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.Show less