Vulnerabilities > SUN > Java
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2010-04-20 | CVE-2010-0887 | Unspecified vulnerability in SUN Java 6 Unspecified vulnerability in the New Java Plug-in component in Oracle Java SE and Java for Business JDK and JRE 6 Update 18 and 19 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. | 10.0 |
| 2009-03-25 | CVE-2009-1107 | Multiple Security vulnerability in Sun Java Runtime Environment and Java Development Kit The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871. network sun | 4.3 |
| 2009-03-25 | CVE-2009-1105 | Multiple Security vulnerability in Sun Java Runtime Environment and Java Development Kit The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490. | 7.5 |
| 2009-03-25 | CVE-2009-1104 | Configuration vulnerability in SUN Java The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. | 5.8 |
| 2009-03-25 | CVE-2009-1103 | Multiple Security vulnerability in Sun Java Runtime Environment and Java Development Kit Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "deserializing applets," aka CR 6646860. | 6.4 |
| 2009-03-25 | CVE-2009-1102 | Code Injection vulnerability in SUN Java Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation." | 6.4 |
| 2008-08-01 | CVE-2008-3440 | Code Injection vulnerability in SUN Java 1.6.0 Sun Java 1.6.0_03 and earlier versions, and possibly later versions, does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning. | 7.5 |
| 2005-12-31 | CVE-2005-2738 | Unspecified vulnerability in SUN Java 1.4.2 Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X does not prevent multiple programs from opening the same port as a Java ServerSocket, which allows local users to operate a Java program that intercepts network data intended for the ServerSocket of a different Java program. | 5.0 |
| 2005-12-31 | CVE-2005-2530 | Privilege Escalation vulnerability in SUN Java 1.3.1 Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions." | 10.0 |
| 2005-12-31 | CVE-2005-2529 | Remote Security vulnerability in SUN Java 1.4.2 Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives." | 10.0 |