Filtered by vendor Sun
Subscribe
Total
1705 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2011-4160 | 4 Hp, Ibm, Linux and 1 more | 6 Hp-ux, Operations Agent, Performance Agent and 3 more | 2012-02-16 | 3.2 LOW | N/A |
Unspecified vulnerability in HP Operations Agent 11.00 and Performance Agent 4.73 and 5.0 on AIX, HP-UX, Linux, and Solaris allows local users to bypass intended directory-access restrictions via unknown vectors. | |||||
CVE-2011-3337 | 4 Eeye, Hp, Sgi and 1 more | 5 Digital Security Audits, Retina Network Security Scanner, Hp-ux and 2 more | 2012-01-04 | 6.9 MEDIUM | N/A |
eEye Audit ID 2499 in eEye Digital Security Audits 2406 through 2423 for eEye Retina Network Security Scanner on HP-UX, IRIX, and Solaris allows local users to gain privileges via a Trojan horse gauntlet program in an arbitrary directory under /usr/local/. | |||||
CVE-2009-3100 | 2 Sun, X.org | 3 Opensolaris, Solaris, X11 | 2011-12-20 | 4.0 MEDIUM | N/A |
xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 9 and 10, OpenSolaris snv_109 through snv_122, and X11 6.4.1 on Solaris 8 does not properly handle Accessibility support, which allows local users to cause a denial of service (system hang) by locking the screen and then attempting to launch an Accessibility pop-up window, related to a regression in certain Solaris and OpenSolaris patches. | |||||
CVE-2006-4302 | 1 Sun | 2 J2se, Java Web Start | 2011-10-10 | 5.0 MEDIUM | N/A |
The Java Plug-in J2SE 1.3.0_02 through 5.0 Update 5, and Java Web Start 1.0 through 1.2 and J2SE 1.4.2 through 5.0 Update 5, allows remote attackers to exploit vulnerabilities by specifying a JRE version that contain vulnerabilities. | |||||
CVE-2011-2249 | 1 Sun | 1 Sunos | 2011-10-04 | 5.2 MEDIUM | N/A |
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows remote authenticated users to affect availability, related to TCP/IP. | |||||
CVE-2011-2298 | 1 Sun | 1 Sunos | 2011-10-04 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect availability, related to KSSL. | |||||
CVE-2011-2296 | 1 Sun | 1 Sunos | 2011-10-04 | 4.9 MEDIUM | N/A |
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to Kernel/SCTP. | |||||
CVE-2011-2295 | 1 Sun | 1 Sunos | 2011-10-04 | 4.7 MEDIUM | N/A |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to Driver/USB. | |||||
CVE-2011-2294 | 1 Sun | 1 Sunos | 2011-10-04 | 5.0 MEDIUM | N/A |
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect availability, related to SSH. | |||||
CVE-2011-2293 | 1 Sun | 1 Sunos | 2011-10-04 | 4.9 MEDIUM | N/A |
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to Zones. | |||||
CVE-2011-2291 | 1 Sun | 1 Sunos | 2011-10-04 | 1.7 LOW | N/A |
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality via unknown vectors related to Trusted Extensions. | |||||
CVE-2011-2290 | 1 Sun | 1 Sunos | 2011-10-04 | 4.9 MEDIUM | N/A |
Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel/sockfs. | |||||
CVE-2011-2287 | 1 Sun | 1 Sunos | 2011-10-04 | 7.8 HIGH | N/A |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to fingerd. | |||||
CVE-2011-2285 | 1 Sun | 1 Sunos | 2011-10-04 | 7.2 HIGH | N/A |
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Installer. | |||||
CVE-2011-2258 | 1 Sun | 1 Sunos | 2011-10-04 | 4.6 MEDIUM | N/A |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rksh. | |||||
CVE-2011-2259 | 1 Sun | 1 Sunos | 2011-10-04 | 4.9 MEDIUM | N/A |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to UFS. | |||||
CVE-2011-2289 | 1 Sun | 1 Sunos | 2011-10-04 | 3.6 LOW | N/A |
Unspecified vulnerability in Oracle Solaris 10 allows local users to affect integrity and availability via unknown vectors related to LiveUpgrade. | |||||
CVE-2011-0807 | 2 Oracle, Sun | 2 Glassfish Server, Java System Application Server | 2011-09-21 | 10.0 HIGH | N/A |
Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration. | |||||
CVE-2009-2445 | 1 Sun | 1 Java System Web Server | 2011-08-28 | 5.0 MEDIUM | N/A |
Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers to read arbitrary JSP files via an alternate data stream syntax, as demonstrated by a .jsp::$DATA URI. | |||||
CVE-2009-0171 | 1 Sun | 1 Sparc Enterprise Server | 2011-06-12 | 10.0 HIGH | N/A |
The Sun SPARC Enterprise M4000 and M5000 Server, within a certain range of serial numbers, allows remote attackers to use the manufacturing root password, perform a root login to the eXtended System Control Facility Unit (aka XSCFU or Service Processor), and have unspecified other impact. |