CVE-2010-3579

Unspecified vulnerability in the 1 Sun Convergence 1 and 2 Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail...

CVE-2010-3579

CVE-2010-3579 affects Sun Convergence 1 and Sun Java Communications Suite 7 components in Oracle Sun Product Suite 1.0/7.0, exploitable via Webmail over HTTP. The Oracle CPU October 2010 advisory indicates these vulnerabilities can be remotely exploitable without authentication, impacting confide...

CVE-2010-3546

CVE-2010-3546 affects Sun Java System Identity Manager (Oracle Sun Products Suite 8.1). The vulnerability is described as unspecified, allowing remote attackers to affect confidentiality and integrity via unknown vectors. Oracle’s October 2010 CPU lists CVE-2010-3546 under the Sun Products Suite ...

CVE-2010-3544

CVE-2010-3544 is a CSRF vulnerability in Oracle iPlanet Web Server (Sun Java System Web Server) prior to 7.0U9 that allows an attacker to stop a server instance via the management console when a user views a malicious page while authenticated. The issue is documented across multiple sources (JVN/...

CVE-2010-3546

Unspecified vulnerability in the Sun Java System Identity Manager component in Oracle Sun Products Suite 8.1 allows remote attackers to affect confidentiality and integrity via unknown vectors...

CVE-2010-3545

CVE-2010-3545 affects Oracle iPlanet Web Server (Sun Java System Web Server), part of Oracle Sun Product Suite 7.0. The vulnerability is in the Administration component and allows remote attackers to affect confidentiality and integrity via unknown vectors. Public sources in connected docs corrob...

CVE-2010-3564

Unspecified vulnerability in the Oracle Communications Messaging Server Sun Java System Messaging Server component in Oracle Sun Products Suite 7.0 allows remote attackers to affect confidentiality and integrity via unknown vectors related to Webmail. NOTE: the previous information was obtained...

CVE-2010-3575

CVE-2010-3575 affects Oracle Communications Messaging Server (Sun Java System Messaging Server) within Oracle Sun Product Suite 6.0, 6.2, 6.3, and 7.0. In the Oracle Sun Products Suite risk matrix, the vulnerability is tied to the Web Mail component and is remotely exploitable without authenticat...

CVE-2010-3535

CVE-2010-3535 affects the Directory Server Enterprise Edition component of Oracle Sun Product Suite (versions 6.0–6.3). The vulnerability is described as unspecified and exploitable via Identity Synchronization for Windows, with potential impact to confidentiality, integrity, and availability. Th...

CVE-2010-3514

Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container...

CVE-2010-3506

Unspecified vulnerability in the Oracle Explorer Sun Explorer component in Oracle Sun Products Suite 6.4 allows local users to affect confidentiality and integrity via unknown vectors...

CVE-2010-2414

Unspecified vulnerability in the 1 Sun Convergence 1 and 2 Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality via unknown vectors...

Code injection

Unspecified vulnerability in the 1 Sun Convergence 1 and 2 Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 7.0u8 allows remote authenticated users to affect confidentiality, related to DAV WebDAV...

Design/Logic Flaw

Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container...

Oracle Java APPLET Tag Memory Corruption

Source: http://skypher.com/index.php/2010/10/13/issue-18-oracle-java-applet-childre/ o=document.createElement"applet"; setTimeoutfunction x=o.children; location.reload; , 1; Tested with: Windows XP sp3 5.1.2600 MSIE 7.0.5730.13 MSIE 8.0.6001.18702 Sun Java Version 6 Update 20 1.6.020-b02...

Oracle Java APPLET Tag Children Property Memory Corruption

Exploit for windows platform in category dos / poc ========================================================== Oracle Java APPLET Tag Children Property Memory Corruption ========================================================== Source:...

CVE-2010-2414

Unspecified vulnerability in the 1 Sun Convergence 1 and 2 Sun Java Communications Suite 7 components in Oracle Sun Products Suite 1.0 and 7.0 allows remote attackers to affect confidentiality via unknown vectors...

CVE-2010-3512

CVE-2010-3512 affects Oracle iPlanet Web Server (Sun Java System Web Server) 7.0u8. The vulnerability is an unspecified issue in the WebDAV-related functionality that could allow remote authenticated users to affect confidentiality. The NVD entry describes an unspecified vulnerability in the WebD...

CVE-2010-3514

Unspecified vulnerability in the Oracle iPlanet Web Server Sun Java System Web Server component in Oracle Sun Products Suite 6.1 and 7.0 allows remote attackers to affect integrity via unknown vectors related to Web Container...