Information Disclosure

Every one of the 26 is a mark on the map. Named now: 1 to 26, most at risk first.

1. An SNMP community name is the default (e.g. public), null, or missing.CVE-1999-0517Sun · CVSS 5.9 · 29% likely

   CWE-200

2. The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to o…CVE-2005-3398Sun · 13% likely

   CWE-200

3. The login module in Sun Java System Access Manager 6 2005Q1 (aka 6.3), 7 2005Q4 (aka 7.0), and 7.1 responds differently to a failed login attempt depending on whether the user acc…CVE-2009-0348Sun · 8.2% likely

   CWE-200

4. Unspecified vulnerability in Sun Java Web Start in JDK and JRE 6 before Update 7, JDK and JRE 5.0 before Update 16, and SDK and JRE 1.4.x before 1.4.2_18 allows context-dependent…CVE-2008-3114Sun · 3.1% likely

   CWE-200

5. Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.2_18 and earlie…CVE-2008-5350Sun · 3.0% likely

   CWE-200

6. Unspecified vulnerability in the BasicService for Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SD…CVE-2008-5342Sun · 3.0% likely

   CWE-200

7. Unspecified vulnerability in Java Web Start (JWS) and Java Plug-in with Sun JDK and JRE 6 Update 10 and earlier, and JDK and JRE 5.0 Update 16 and earlier, allows untrusted JWS ap…CVE-2008-5341Sun · 3.0% likely

   CWE-200

8. Unspecified vulnerability in Java Runtime Environment (JRE) for Sun JDK and JRE 5.0 Update 16 and earlier; SDK and JRE 1.4.2_18 and earlier; and SDK and JRE 1.3.1_23 or earlier al…CVE-2008-5346Sun · 2.8% likely

   CWE-200

9. Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, does not prevent the existence of children of a resurrected ClassLoader, which allows remote attackers to gai…CVE-2009-3881Sun · 2.7% likely

   CWE-200

10. Oracle iPlanet Web Server (formerly Sun Java System Web Server or Sun ONE Web Server) 6.1 before SP12, and 7.0 through Update 6, when running on Windows, allows remote attackers t…CVE-2009-2445Sun · 2.5% likely

    CWE-200

11. Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variable…CVE-2009-2475Sun · 2.3% likely

    CWE-200

12. Sun Java System Identity Manager (IdM) 7.0 through 8.0 responds differently to failed use of the end-user question-based login feature depending on whether the user account exists…CVE-2009-1076Sun · 2.3% likely

    CWE-200

13. Sun Java System Application Server (AS) 8.1 and 8.2 allows remote attackers to read the Web Application configuration files in the (1) WEB-INF or (2) META-INF directory via a malf…CVE-2009-0278Sun · 2.2% likely

    CWE-200

14. Unspecified vulnerability in Sun Java System Application Server 7 2004Q2 before Update 6, Web Server 6.1 before SP8, and Web Server 7.0 before Update 1 allows remote attackers to…CVE-2008-2120Sun · 2.2% likely

    CWE-200

15. Multiple unspecified vulnerabilities in the Windows Pluggable Look and Feel (PL&F) feature in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17,…CVE-2009-3883Sun · 2.0% likely

    CWE-200

16. Multiple unspecified vulnerabilities in the Swing implementation in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK, have unknown impact and remote attack vec…CVE-2009-3882Sun · 2.0% likely

    CWE-200

17. Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail mes…CVE-2004-2766Sun · 1.4% likely

    CWE-200

18. Sun Virtual Desktop Infrastructure (VDI) 3.0, when anonymous binding is enabled, does not properly handle a client's attempt to establish an authenticated and encrypted connection…CVE-2009-2856Sun · 1.3% likely

    CWE-200

19. Cisco Unified Communications Manager (aka CallManager) 9.1(2.10000.28), 10.5(2.10000.5), 10.5(2.12901.1), and 11.0(1.10000.10); Unified Communications Manager IM & Presence Servic…CVE-2016-1319Sun · 0.8% likely

    CWE-200

20. XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obta…CVE-2009-2711Sun · 0.4% likely

    CWE-200

21. Unspecified vulnerability in the search feature in Sun Java System LDAP JDK before 4.20 allows context-dependent attackers to obtain sensitive information via unknown attack vecto…CVE-2008-4747Sun · 0.4% likely

    CWE-200

22. XScreenSaver in Sun Solaris 10 and OpenSolaris before snv_109, and Solaris 8 and 9 with GNOME 2.0 or 2.0.2, allows physically proximate attackers to obtain sensitive information b…CVE-2009-1276Sun · 0.4% likely

    CWE-200

23. Sun Logical Domain Manager (aka LDoms Manager or ldm) 1.0 through 1.0.3 displays the value of the OpenBoot PROM (OBP) security-password variable in cleartext, which allows local u…CVE-2008-5099Sun · 0.4% likely

    CWE-200

24. Unspecified vulnerability in the dynamic tracing framework (DTrace) in Sun Solaris 10 allows local users with PRIV_DTRACE_USER or PRIV_DTRACE_PROC privileges to obtain sensitive k…CVE-2008-0938Sun · 0.3% likely

    CWE-200

25. Sun Sun Ray Server Software 3.x and 4.0 and Sun Ray Windows Connector 1.1 and 2.0 expose the LDAP password during a configuration step, which allows local users to discover the Su…CVE-2008-5423Sun · 0.3% likely

    CWE-200

26. smbfs in Sun OpenSolaris snv_84 through snv_110, when default mount permissions are used, allows local users to read arbitrary files, and list arbitrary directories, on CIFS volum…CVE-2009-2031Sun · 0.3% likely

    CWE-200

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.