← Back

Sun

sun

1,603 CVEs • 200 products

Products (200)

Click to collapse
Toggle
Sunos
sunos
Solaris
solaris
Jre
jre
Jdk
jdk
Sdk
sdk
Opensolaris
opensolaris
Openjdk
openjdk
Java
java
Java Se
java_se
Cobalt Raq 2
cobalt_raq_2
Cobalt Raq 3i
cobalt_raq_3i
Staroffice
staroffice
Cluster
cluster
J2se
j2se
Ehrd
ehrd
Cobalt Raq 4
cobalt_raq_4
Virtualbox
virtualbox
Chilisoft
chilisoft
Java Plug In
java_plug-in
Javamail
javamail
Grid Engine
grid_engine
Nfs
nfs
Cobalt Raq
cobalt_raq
Sun Fire
sun_fire
Jsse
jsse
J2ee
j2ee
I Runbook
i-runbook
Openwindows
openwindows
Fire X2100 M2
fire_x2100_m2
Fire X2200 M2
fire_x2200_m2
Workshop
workshop
Sun Ftp
sun_ftp
Sunvts
sunvts
Netdynamics
netdynamics
Linux
linux
Cobalt Raq Xtr
cobalt_raq_xtr
Patchpro
patchpro
Patch Manager
patch_manager
Seam
seam
Dtmail
dtmail
J2me
j2me
Netra 1280
netra_1280
Sunforum
sunforum

CVEs (1,603)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
4Conectiva
Linuxprinting.orgSun+1 more
4Foomatic Filters
Java Desktop SystemLinux+1 more
Apr 16, 2026
Sep 16, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
Unknown vulnerability in foomatic-rip in Foomatic before 3.0.2 allows local users or remote attackers with access to CUPS to execute arbitrary commands.
1Sun
2Solaris
Sunos
Apr 16, 2026
Sep 6, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unknown vulnerability in in.named on Solaris 8 allows remote attackers to cause a denial of service (process crash).
2Avaya
Sun
4Call Management System Server
DtmailSolaris+1 more
Apr 16, 2026
Aug 24, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Format string vulnerability in CDE Mailer (dtmail) on Solaris 8 and 9 allows local users to gain privileges via format strings in the argv[0] value.
4Mit
SgiSun+1 more
7Kerberos
Kerberos 5Propack+4 more
Apr 16, 2026
Aug 18, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Multiple buffer overflows in krb5_aname_to_localname for MIT Kerberos 5 (krb5) 1.3.3 and earlier allow remote attackers to execute arbitrary code as root.
1Sun
2Solaris
Sunos
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
2.1 LOW· v2
Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a d...Show more
Unknown vulnerability in the Basic Security Module (BSM), when configured to audit either the Administrative (ad) or the System-Wide Administration (as) audit class in Solaris 7, 8, and 9, allows local users to cause a denial of service (kernel panic).Show less
1Sun
1Solaris
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
2.1 LOW· v2
Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to ga...Show more
Solaris 9, when configured as a Kerberos client with patch 112908-12 or 115168-03 and using pam_krb5 as an "auth" module with the debug feature enabled, records passwords in plaintext, which could allow local users to gain other user's passwords by reading log files.Show less
1Sun
2Jre
Sdk
Apr 16, 2026
Aug 6, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang).
1Sun
1Java System Calendar Server
Apr 16, 2026
Jul 27, 2004
N/A· v4
N/A· v3
10.0 HIGH· v2
Sun Java System Portal Server 6.2 (formerly Sun ONE) allows remote authenticated users to obtain Calendar Server privileges and modify Calendar data by changing the display options to a non-default view.
1Sun
1Ray Server Software
Apr 16, 2026
Jul 27, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay l...Show more
Sun Ray Server Software (SRSS) 1.3 and 2.0 for Solaris 2.6, 7 and 8 does not properly detect a smartcard removal when the card is quickly removed, reinserted, and removed again, which could cause a user session to stay logged in and allow local users to gain unauthorized access.Show less
1Sun
3Enterprise Storage Manager
Storedge 3310 Scsi ArrayStoredge 3510 Fc Array
Apr 16, 2026
Jun 21, 2004
N/A· v4
N/A· v3
7.2 HIGH· v2
Unknown vulnerability in Sun StorEdge Enterprise Storage Manager (ESM) 2.1 for Solaris 8 and Solaris 9 allows local users with the "ESMUser" role to gain root access.
1Sun
1Solaris
Apr 16, 2026
Jun 19, 2004
N/A· v4
N/A· v3
2.1 LOW· v2
The Sun Solaris Volume Manager (SVM) on Solaris 9 allows local users to cause a denial of service (kernel panic) via a malformed probe request to the SVM.
1Sun
2Solaris
Sunos
Apr 16, 2026
May 14, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to...Show more
The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessible, which could allow remote attackers to obtain sensitive information in conjunction with a directory traversal (..) attack.Show less
1Sun
2Solaris
Sunos
Apr 16, 2026
Apr 26, 2004
N/A· v4
N/A· v3
2.1 LOW· v2
Unknown vulnerability in the TCP/IP stack for Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.
1Sun
2Solaris
Sunos
Apr 16, 2026
Apr 23, 2004
N/A· v4
N/A· v3
2.1 LOW· v2
Unknown vulnerability in the sendfilev function in Sun Solaris 8 and 9 allows local users to cause a denial of service (system panic) via unknown vectors.
1Sun
1Patch Manager
Apr 16, 2026
Apr 19, 2004
N/A· v4
N/A· v3
7.5 HIGH· v2
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extra...Show more
The Solaris 9 patches 113579-02 through 113579-05, and 114342-02 through 114342-05, prevent ypserv and ypxfrd from properly restricting access to secure NIS maps, which allows local users to use ypcat or ypmatch to extract the contents of a secure map such as passwd.adjunct.byname.Show less
1Sun
1Solaris
Apr 16, 2026
Apr 7, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their a...Show more
The Secure Shell (SSH) Daemon (SSHD) in Sun Solaris 9 does not properly log IP addresses when SSHD is configured with the ListenAddress as 0.0.0.0, which makes it easier for remote attackers to hide the source of their activities.Show less
2Macromedia
Sun
3Coldfusion
JrunOne Application Server
Apr 16, 2026
Mar 15, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun 4.0, when a SOAP web service expects an array of objects as an argument, allows remote attackers to cause a denial of service (memory consumption).
1Sun
1Solaris
Apr 16, 2026
Mar 12, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The patches (1) 114332-08 and (2) 114929-06 for Sun Solaris 9 disable the auditing functionality of the Basic Security Module (BSM), which allows attackers to avoid having their activity logged.
1Sun
2Solaris
Sunos
Apr 16, 2026
Mar 4, 2004
N/A· v4
N/A· v3
4.6 MEDIUM· v2
Multiple buffer overflows in uucp for Sun Solaris 2.6, 7, 8, and 9 allow local users to execute arbitrary code as the uucp user.
3Debian
MandrakesoftSun
5Debian Linux
Mandrake LinuxMandrake Linux Corporate Server+2 more
Apr 16, 2026
Feb 16, 2004
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unknown vulnerability in the rwho daemon (rwhod) before 0.17, on little endian architectures, allows remote attackers to cause a denial of service (application crash).