Skip to content

Sun Microsystems · weakness class

Denial of Service

34 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 34 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2…CVE-2009-3877Sun · 4.9% likely

    CWE-399

  2. The BMP image parser in Sun Java Development Kit (JDK) before 1.5.0_11-b03 and 1.6.x before 1.6.0_01-b06, and Sun Java Runtime Environment in JDK and JRE 6, JDK and JRE 5.0 Update…CVE-2007-2789Sun · 3.5% likely

    CWE-399

  3. Unspecified vulnerability in Sun Java SE in JDK and JRE 5.0 before Update 22, JDK and JRE 6 before Update 17, SDK and JRE 1.3.x before 1.3.1_27, and SDK and JRE 1.4.x before 1.4.2…CVE-2009-3876Sun · 3.5% likely

    CWE-399

  4. Memory leak in Network Security Services (NSS) 3.11, as used in Sun Java Enterprise System 2003Q4 through 2005Q1 and Java System Directory Server 5.2, allows remote attackers to c…CVE-2006-3127Sun · 3.2% likely

    CWE-399

  5. Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through snv_110, allows remote attackers…CVE-2009-2487Sun · 2.9% likely

    CWE-399

  6. Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a denial of service (memory cons…CVE-2009-3899Sun · 2.9% likely

    CWE-399

  7. in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors that trigger a "fork()/exec()…CVE-2009-2972Sun · 2.9% likely

    CWE-399

  8. Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring F…CVE-2009-1190Sun · 2.8% likely

    CWE-399

  9. Cisco TelePresence Server 4.1(2.29) through 4.2(4.17) on 7010; Mobility Services Engine (MSE) 8710; Multiparty Media 310, 320, and 820; and Virtual Machine (VM) devices allows rem…CVE-2015-6313Sun · 2.7% likely

    CWE-399

  10. The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service (daemon crash) v…CVE-2008-2946Sun · 2.5% likely

    CWE-399

  11. Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv_37, when automountd is used, allows user-assisted remote attackers…CVE-2008-6024Sun · 2.4% likely

    CWE-399

  12. Unspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8 through 10 and OpenSolaris before snv_85 allows context-dependent attackers to cause…CVE-2008-5684Sun · 2.4% likely

    CWE-399

  13. The IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv_47 through snv_82, with certain patches installed, allows remote attackers to cause a denial of service (panic) v…CVE-2008-5661Sun · 2.2% likely

    CWE-399

  14. Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption and network traffic amplifica…CVE-2008-2090Sun · 2.0% likely

    CWE-399

  15. Memory leak in the Ultra-SPARC T2 crypto provider device driver (aka n2cp) in Sun Solaris 10, and OpenSolaris snv_54 through snv_112, allows context-dependent attackers to cause a…CVE-2009-2137Sun · 1.8% likely

    CWE-399

  16. Javamail does not properly handle a series of invalid login attempts in which the same e-mail address is entered as username and password, and the domain portion of this address y…CVE-2007-6059Sun · 1.8% likely

    CWE-399

  17. The sockfs module in the kernel in Sun Solaris 10 and OpenSolaris snv_41 through snv_122, when Network Cache Accelerator (NCA) logging is enabled, allows remote attackers to cause…CVE-2009-3000Sun · 1.6% likely

    CWE-399

  18. Sun Solaris 8, 9, and 10 allows "remote privileged" users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP packets.CVE-2008-1779Sun · 1.5% likely

    CWE-399

  19. tun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause a denial of service (panic) and possibly execute arbitrary code via a crafted SIOC…CVE-2008-5689Sun · 1.3% likely

    CWE-399

  20. Multiple memory leaks in the (1) IP and (2) IPv6 multicast implementation in the kernel in Sun Solaris 10, and OpenSolaris snv_67 through snv_93, allow local users to cause a deni…CVE-2009-2187Sun · 0.5% likely

    CWE-399

  21. xscreensaver (aka Gnome-XScreenSaver) in Sun Solaris 10, and OpenSolaris snv_109 through snv_122, does not properly handle Trusted Extensions, which allows local users to cause a…CVE-2009-3101Sun · 0.4% likely

    CWE-399

  22. The crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does not properly free memory, which allows local users to cause a denial of service (pa…CVE-2009-0838Sun · 0.4% likely

    CWE-399

  23. Unspecified vulnerability in the event port implementation in Sun Solaris 10 allows local users to cause a denial of service (panic) by submitting and retrieving user-defined even…CVE-2008-2706Sun · 0.4% likely

    CWE-399

  24. The NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow local users to cause a denial of service (infinite loop and system hang) by accessin…CVE-2009-0870Sun · 0.4% likely

    CWE-399

  25. Unspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4) client in the kernel in Sun Solaris 10 and OpenSolaris before snv_102 allows local user…CVE-2009-0069Sun · 0.4% likely

    CWE-399

  26. Unspecified vulnerability in the Service Tag Registry on Sun Solaris 10, and Sun Service Tag before 1.1.3, allows local users to cause a denial of service (disk consumption) via u…CVE-2008-2552Sun · 0.4% likely

    CWE-399

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.