2031 matches found
CVE-2008-3115: Undefined Security Weakness
Secure Static Versioning in Sun Java JDK and JRE 6 Update 6 and earlier, and 5.0 Update 6 through 15, does not properly prevent execution of applets on older JRE releases, which might allow remote attackers to exploit vulnerabilities in these older releases...
CVE-2008-3106: Undefined Security Weakness
Unspecified vulnerability in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier and JDK and JRE 5.0 Update 15 and earlier allows remote attackers to access URLs via unknown vectors involving processing of XML data by an untrusted 1 application or 2 applet, a different...
CVE-2008-3105: Undefined Security Weakness
Unspecified vulnerability in the JAX-WS client and service in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier allows remote attackers to access URLs or cause a denial of service via unknown vectors involving "processing of XML data" by a trusted application...
CVE-2008-3104: Undefined Security Weakness
Multiple unspecified vulnerabilities in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, SDK and JRE 1.4.x before 1.4.218, and SDK and JRE 1.3.x before 1.3.123 allow remote attackers to violate the security model for an applet's outbound...
CVE-2008-3109: Undefined Security Weakness
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier allows context-dependent attackers to gain privileges via an untrusted 1 application or 2 applet, as demonstrated by an application or applet that grants itself...
CVE-2008-3111: Improper Input Validation
Multiple buffer overflows in Sun Java Web Start in JDK and JRE 6 before Update 4, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allow context-dependent attackers to gain privileges via an untrusted application, as demonstrated by a an application that grants itself...
CVE-2008-3110: Undefined Security Weakness
Unspecified vulnerability in scripting language support in Sun Java Runtime Environment JRE in JDK and JRE 6 Update 6 and earlier allows remote attackers to obtain sensitive information by using an applet to read information from another applet...
CVE-2008-3112: Undefined Security Weakness
Directory traversal vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows remote attackers to create arbitrary files via the writeManifest method in the CacheEntry class, aka CR 6703909...
CVE-2008-3108: Improper Restriction of Operations within the Bounds of a Memory Buffer
Buffer overflow in Sun Java Runtime Environment JRE in JDK and JRE 5.0 before Update 10, SDK and JRE 1.4.x before 1.4.218, and SDK and JRE 1.3.x before 1.3.123 allows context-dependent attackers to gain privileges via unspecified vectors related to font processing...
CVE-2008-3114: Exposure of Sensitive Information to an Unauthorized Actor
Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.218 allows context-dependent attackers to obtain sensitive information the cache location via an untrusted application, aka CR 6704074...
Sun Java System ASP Server < 4.0.3 Multiple Vulnerabilities
The remote host is running Sun Java System Active Server Pages ASP, or an older variant such as Sun ONE ASP or Chili!Soft ASP. The web server component of the installed version of Active Server Pages on the remote host is affected by several vulnerabilities : - Several of the administration...
Sun Java System ASP Server Detection
The remote service is an ASP Server, part of Sun Java System Active Server Pages or an older variant such as Chili!Soft ASP, which provides a web server with ASP Active Server Pages functionality. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc';...
Sun Java ASP Server Default Admin Password
The remote host is running Sun Java ASP server. It is possible to access the remote server with default admin credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid33437; scriptversion"1.13";...
Sun Java System Access Manager XSLT样式表单XML签名远程代码执行漏洞
BUGTRAQ ID: 29988 CNCAN ID：CNCAN-2008063001 Sun Java System Access Manager是一款安全单点登录、认证、授权解决方案。 Sun Java系统访问管理器没有正确安全处理XML签名中的XSLT样式表单，远程攻击者可以利用漏洞以应用程序权限执行任意代码。 能建立使用访问管理器本地可查看的XML签名的远程用户可以访问管理器应用程序权限执行任意代码。访问管理器由WEB'容器'应用程序运行，如Sun Java System Application...
CVE-2008-2945
Technical details for CVE-2008-2945 are not provided in the connected documents; public disclosures and remediation are not covered here. Monitor for updates.
BMP image parser vulnerability
The BMP image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.119 and earlier, when running on Unix/Linux systems,...
java-jre: GIF buffer overflow
Buffer overflow in Sun JDK and Java Runtime Environment JRE 5.0 Update 9 and earlier, SDK and JRE 1.4.212 and earlier, and SDK and JRE 1.3.118 and earlier allows applets to gain privileges via a GIF image with a block with a 0 width field, which triggers memory corruption...
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit
Integer overflow in the embedded ICC profile image parser in Sun Java Development Kit JDK before 1.5.011-b03 and 1.6.x before 1.6.001-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update 10 and earlier, SDK and JRE 1.4.214 and earlier, and SDK and JRE 1.3.120 and earlier...
CVE-2008-2945: Improper Input Validation
Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows context-dependent attackers to execute arbitrary code via a crafted stylesheet, a related issue to...