WaratekVRT Sign in

Sun CVEs

215 CVEs, 3 exploited, 18 protected by Waratek

Reset
More filters (1)
Columns
Vendor sun✕
Overview 215 matches · 18 protected · 3 exploited · 0 CISA KEV · 18 public PoC · 6 EPSS ≥ 0.5
215matches 18protected8.4% 3exploited1.4% 0CISA KEV0.0% 18public PoC8.4% 6EPSS ≥ 0.52.8%
Protected by Waratek 18 8.4% Rule in development 0 0.0% Mitigation candidate 16 7.4% No exploit published 181 84.2%
Critical 0 0.0% High 114 53.0% Medium 88 40.9% Low 13 6.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 18 8.4% partly blocked 0 0.0% not blocked 197 91.6% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 1.4% Working exploit published 16 7.4% Proof of concept only 0 0.0% Forecast only 1 0.5% No public exploit 195 90.7%
split by peak 52 / year
No exploit published: 181Mitigation candidate: 16Protected by Waratek: 18 Low: 13Medium: 88High: 114 not blocked: 197blocked by ARMR today: 18 No public exploit: 195Forecast only: 1Working exploit published: 16Exploited: 3
19961 No exploit published1 High1 not blocked1 No public exploit1 19970 19980 19991 No exploit published1 High1 not blocked1 No public exploit1 20000 20012 No exploit published2 High1 Medium1 not blocked2 No public exploit2 20021 Mitigation candidate1 Medium1 not blocked1 Working exploit published1 20036 Mitigation candidate3 No exploit published3 High3 Medium2 Low1 not blocked6 Working exploit published3 No public exploit3 20044 No exploit published4 Medium4 not blocked4 No public exploit4 200517 Protected by Waratek2 No exploit published15 High8 Medium8 Low1 blocked by ARMR today2 not blocked15 No public exploit17 200613 Mitigation candidate1 No exploit published12 High1 Medium11 Low1 not blocked13 Working exploit published1 No public exploit12 200717 Protected by Waratek1 Mitigation candidate1 No exploit published15 High8 Medium7 Low2 blocked by ARMR today1 not blocked16 Working exploit published1 No public exploit16 200834 Protected by Waratek3 Mitigation candidate3 No exploit published28 High22 Medium12 blocked by ARMR today3 not blocked31 Exploited1 Working exploit published3 No public exploit30 200952 Protected by Waratek4 Mitigation candidate2 No exploit published46 High30 Medium22 blocked by ARMR today4 not blocked48 Exploited1 Working exploit published1 No public exploit50 201019 Protected by Waratek1 Mitigation candidate1 No exploit published17 High17 Medium2 blocked by ARMR today1 not blocked18 Working exploit published1 No public exploit18 201119 Protected by Waratek1 Mitigation candidate2 No exploit published16 High11 Medium5 Low3 blocked by ARMR today1 not blocked18 Working exploit published3 No public exploit16 201213 Mitigation candidate2 No exploit published11 High4 Medium7 Low2 not blocked13 Working exploit published2 No public exploit11 201315 Protected by Waratek6 No exploit published9 High6 Medium6 Low3 blocked by ARMR today6 not blocked9 Exploited1 Forecast only1 No public exploit13 20141 No exploit published1 High1 not blocked1 No public exploit1
1996199820002002200420062008201020122014
215 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2004-2540 Medium 2004-12-31 No exploit published No public exploit readObject in (1) Java Runtime Environment (JRE) and (2) Software Development Kit (SDK) 1.4.0 through 1.4.2_05 allows remote attackers to cause a denial of service (JVM unresponsive) via crafted serialized data.
CVE-2004-2216 Medium 2004-12-31 No exploit published No public exploit Unknown vulnerability in Sun Java System Web Server 6.0 SP7 and earlier and 6.1 SP1 and earlier, and Application Server 7 Update 4 and earlier, allows remote attackers to cause a denial of service (crash) via a malformed client certificate.
CVE-2004-1503 Medium 2004-12-31 No exploit published No public exploit Integer overflow in the InitialDirContext in Java Runtime Environment (JRE) 1.4.2, 1.5.0 and possibly other versions allows remote attackers to cause a denial of service (Java exception and failed DNS requests) via a large number of DNS requests, which causes the xid variable to wrap around and become negative.
CVE-2004-0651 Medium 2004-08-06 No exploit published No public exploit Unknown vulnerability in Sun Java Runtime Environment (JRE) 1.4.2 through 1.4.2_03 allows remote attackers to cause a denial of service (virtual machine hang).
CVE-2003-1301 Medium 2003-12-31 No exploit published No public exploit Sun Java Runtime Environment (JRE) 1.x before 1.4.2_11 and 1.5.x before 1.5.0_06, and as used in multiple web browsers, allows remote attackers to cause a denial of service (application crash) via deeply nested object arrays, which are not properly handled by the garbage collector and trigger invalid memory accesses.
CVE-2003-1229 High 2003-12-31 No exploit published No public exploit X509TrustManager in (1) Java Secure Socket Extension (JSSE) in SDK and JRE 1.4.0 through 1.4.0_01, (2) JSSE before 1.0.3, (3) Java Plug-in SDK and JRE 1.3.0 through 1.4.1, and (4) Java Web Start 1.0 through 1.2 incorrectly calls the isClientTrusted method when determining server trust, which results in improper validation of digital certificate and allows remote attackers to (1) falsely authenticate peers for SSL or (2) incorrectly validate signed JAR files.
CVE-2003-1156 Medium 2003-12-31 No exploit published No public exploit Java Runtime Environment (JRE) and Software Development Kit (SDK) 1.4.2 through 1.4.2_02 allows local users to overwrite arbitrary files via a symlink attack on (1) unpack.log, as created by the unpack program, or (2) .mailcap1 and .mime.types1, as created by the RPM program.
CVE-2003-1134 Low 2003-12-31 Mitigation candidate Working exploit published Sun Java 1.3.1, 1.4.1, and 1.4.2 allows local users to cause a denial of service (JVM crash), possibly by calling the ClassDepth function with a null parameter, which causes a crash instead of generating a null pointer exception.
CVE-2003-1123 High 2003-12-31 Mitigation candidate Working exploit published Sun Java Runtime Environment (JRE) and SDK 1.4.0_01 and earlier allows untrusted applets to access certain information within trusted applets, which allows attackers to bypass the restrictions of the Java security model.
CVE-2003-0896 High 2003-11-17 Mitigation candidate Working exploit published The loadClass method of the sun.applet.AppletClassLoader class in the Java Virtual Machine (JVM) in Sun SDK and JRE 1.4.1_03 and earlier allows remote attackers to bypass sandbox restrictions and execute arbitrary code via a loaded class name that contains "/" (slash) instead of "." (dot) characters, which bypasses a call to the Security Manager's checkPackageAccess method.
CVE-2002-2072 Medium 2002-12-31 Mitigation candidate Working exploit published java.security.AccessController in Sun Java Virtual Machine (JVM) in JRE 1.2.2 and 1.3.1 allows remote attackers to cause a denial of service (JVM crash) via a Java program that calls the doPrivileged method with a null argument.
CVE-2001-1480 High 2001-12-31 No exploit published No public exploit Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.
CVE-2000-1099 Medium 2001-01-09 No exploit published No public exploit Java Runtime Environment in Java Development Kit (JDK) 1.2.2_05 and earlier can allow an untrusted Java class to call into a disallowed class, which could allow an attacker to escape the Java sandbox and conduct unauthorized activities.
CVE-1999-0440 High 1999-03-01 No exploit published No public exploit The byte code verifier component of the Java Virtual Machine (JVM) allows remote execution through malicious web pages.
CVE-1999-0142 High 1996-03-01 No exploit published No public exploit The Java Applet Security Manager implementation in Netscape Navigator 2.0 and Java Developer's Kit 1.0 allows an applet to connect to arbitrary hosts.
‹ prev page 3 of 3 next ›