WaratekVRT Sign in

High Sun CVEs

114 CVEs, 3 exploited, 11 protected by Waratek

Reset
More filters (1)
Columns
Vendor sun✕
Overview 114 matches · 11 protected · 3 exploited · 0 CISA KEV · 10 public PoC · 5 EPSS ≥ 0.5
114matches 11protected9.6% 3exploited2.6% 0CISA KEV0.0% 10public PoC8.8% 5EPSS ≥ 0.54.4%
Protected by Waratek 11 9.6% Rule in development 0 0.0% Mitigation candidate 8 7.0% No exploit published 95 83.3%
Critical 0 0.0% High 114 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 11 9.6% partly blocked 0 0.0% not blocked 103 90.4% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 2.6% Working exploit published 8 7.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 103 90.4%
split by peak 30 / year
No exploit published: 95Mitigation candidate: 8Protected by Waratek: 11 High: 114 not blocked: 103blocked by ARMR today: 11 No public exploit: 103Working exploit published: 8Exploited: 3
19961 No exploit published1 High1 not blocked1 No public exploit1 19970 19980 19991 No exploit published1 High1 not blocked1 No public exploit1 20000 20011 No exploit published1 High1 not blocked1 No public exploit1 20020 20033 Mitigation candidate2 No exploit published1 High3 not blocked3 Working exploit published2 No public exploit1 20040 20058 No exploit published8 High8 not blocked8 No public exploit8 20061 No exploit published1 High1 not blocked1 No public exploit1 20078 Protected by Waratek1 Mitigation candidate1 No exploit published6 High8 blocked by ARMR today1 not blocked7 Working exploit published1 No public exploit7 200822 Protected by Waratek3 Mitigation candidate1 No exploit published18 High22 blocked by ARMR today3 not blocked19 Exploited1 Working exploit published1 No public exploit20 200930 Protected by Waratek2 Mitigation candidate2 No exploit published26 High30 blocked by ARMR today2 not blocked28 Exploited1 Working exploit published1 No public exploit28 201017 Protected by Waratek1 Mitigation candidate1 No exploit published15 High17 blocked by ARMR today1 not blocked16 Working exploit published1 No public exploit16 201111 Protected by Waratek1 Mitigation candidate1 No exploit published9 High11 blocked by ARMR today1 not blocked10 Working exploit published2 No public exploit9 20124 No exploit published4 High4 not blocked4 No public exploit4 20136 Protected by Waratek3 No exploit published3 High6 blocked by ARMR today3 not blocked3 Exploited1 No public exploit5 20141 No exploit published1 High1 not blocked1 No public exploit1
1996199820002002200420062008201020122014
114 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2005-2530 High 2005-12-31 No exploit published No public exploit Unspecified vulnerability in Java 1.3.1 before 1.3.1_16 on Apple Mac OS X allows an untrusted applet to gain privileges, related to "Mac OS X specific extensions."
CVE-2005-2529 High 2005-12-31 No exploit published No public exploit Unspecified vulnerability in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to gain privileges via unspecified attack vectors relating to "the utility used to update Java shared archives."
CVE-2005-3907 High 2005-11-30 No exploit published No public exploit Unspecified vulnerability in Java Runtime Environment in Java JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors involving untrusted Java applets.
CVE-2005-3906 High 2005-11-30 No exploit published No public exploit Multiple unspecified vulnerabilities in reflection APIs in Java SDK and JRE 1.4.2_08 and earlier and JDK and JRE 5.0 Update 3 and earlier allow remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary applications via unknown attack vectors, a different set of vulnerabilities than CVE-2005-3905. NOTE: this is associated with the "second and third issues" identified in SUNALERT:102003.
CVE-2005-3905 High 2005-11-30 No exploit published No public exploit Unspecified vulnerability in reflection APIs in Java SDK and JRE 1.3.1_15 and earlier, 1.4.2_08 and earlier, and JDK and JRE 5.0 Update 3 and earlier allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors, a different vulnerability than CVE-2005-3906. NOTE: this is associated with the "first issue" identified in SUNALERT:102003.
CVE-2005-3904 High 2005-11-30 No exploit published No public exploit Unspecified vulnerability in Java Management Extensions (JMX) in Java JDK and JRE 5.0 Update 3, 1.4.2 and later, 1.3.1 and later allows remote attackers to escape the Java sandbox and access arbitrary files or execute arbitrary application via unknown attack vectors.
CVE-2005-3583 High 2005-11-16 No exploit published No public exploit (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.2_08, 1.4.2_09, and 1.5.0_05 and possibly other versions allow remote attackers to cause a denial of service (JVM unresponsive) via a crafted serialized object, such as a font object as demonstrated on JBoss.
CVE-2005-0836 High 2005-05-02 No exploit published No public exploit Argument injection vulnerability in Java Web Start for J2SE 1.4.2 up to 1.4.2_06 allows untrusted applications to gain privileges via the value parameter of a property tag in a JNLP file.
CVE-2003-1229 High 2003-12-31 No exploit published No public exploit X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.
CVE-2003-1123 High 2003-12-31 Mitigation candidate Working exploit published Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.
CVE-2003-0896 High 2003-11-17 Mitigation candidate Working exploit published The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.
CVE-2001-1480 High 2001-12-31 No exploit published No public exploit Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
CVE-1999-0440 High 1999-03-01 No exploit published No public exploit The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
CVE-1999-0142 High 1996-03-01 No exploit published No public exploit The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.
‹ prev page 2 of 2 next ›