Input Validation and Logic

Every one of the 23 is a mark on the map. Named now: 1 to 23, most at risk first.

1. The BasicService in Sun Java Web Start allows remote attackers to execute arbitrary programs on a client machine via a file:// URL argument to the showDocument method.CVE-2008-4910Sun · 10% likely

   CWE-20

2. Sun Calendar Express Web Server in Sun ONE Calendar Server 6.0 and Sun Java System Calendar Server 6 2004Q2 through 6.3-7.01 allows remote attackers to cause a denial of service (…CVE-2009-1219Sun · 8.7% likely

   CWE-20

3. The Netscape Portable Runtime (NSPR) API 4.6.1 and 4.6.2, as used in Sun Solaris 10, trusts user-specified environment variables for specifying log files even when running from se…CVE-2006-4842Sun · 7.7% likely

   CWE-20

4. CRLF injection vulnerability in da/DA/Login in Sun Java System Delegated Administrator 6.2 through 6.4 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP re…CVE-2009-1357Sun · 7.2% likely

   CWE-20

5. The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 does not properly parse crossdomain.xml files, which allows remote att…CVE-2009-1106Sun · 3.6% likely

   CWE-20

6. The Java XML Digital Signature implementation in Sun JDK and JRE 6 before Update 2 does not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows co…CVE-2007-3716Sun · 3.6% likely

   CWE-20

7. Sun Java System Identity Manager (IdM) 7.0 through 8.0 allows remote authenticated users to gain privileges by submitting crafted commands to the Admin Console, as demonstrated by…CVE-2009-1082Sun · 3.4% likely

   CWE-20

8. Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to execute arbitrary commands via shell metacharacters in HTTP requests to unspecified ASP applicati…CVE-2008-2405Sun · 3.2% likely

   CWE-20

9. Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malforme…CVE-2010-0360Sun · 3.1% likely

   CWE-20

10. Sun Java System Access Manager 6.3 through 7.1 and Sun Java System Identity Server 6.1 and 6.2 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which…CVE-2008-2945Sun · 2.8% likely

    CWE-20

11. Open redirect vulnerability in /idm/user/login.jsp in Sun Java System Identity Manager 6.0 SP1 through SP3, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web…CVE-2008-0241Sun · 2.7% likely

    CWE-20

12. Open redirect vulnerability in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to redirect users to arbitrary web sites and conduct phis…CVE-2008-5117Sun · 2.6% likely

    CWE-20

13. libike in Sun Solaris 9 and 10, and OpenSolaris before snv_100, does not properly check packets, which allows remote attackers to cause a denial of service (in.iked daemon crash)…CVE-2009-0267Sun · 2.5% likely

    CWE-20

14. Sun Java System Directory Proxy Server in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3, when a JDBC data source is used, does not properly handle (1) a long…CVE-2009-0609Sun · 2.5% likely

    CWE-20

15. The Admin Server in Sun Java Active Server Pages (ASP) Server before 4.0.3 allows remote attackers to append to arbitrary new or existing files via the first argument to a certain…CVE-2008-2401Sun · 2.5% likely

    CWE-20

16. Sun Java System Application Server and Web Server 7.0 through 9.0 before 20070710 do not properly process XSLT stylesheets in XSLT transforms in XML signatures, which allows conte…CVE-2007-3715Sun · 2.3% likely

    CWE-20

17. Unspecified vulnerability in the Sun Solaris RPC services library (librpcsvc) on Solaris 8 through 10 allows remote attackers to cause a denial of service (mountd crash) via unspe…CVE-2007-5462Sun · 2.2% likely

    CWE-20

18. Sun JRE 5.0 before update 14 allows remote attackers to cause a denial of service (Internet Explorer crash) via an object tag with an encoded applet and an undefined name attribut…CVE-2007-0012Sun · 1.9% likely

    CWE-20

19. Sun VirtualBox 2.2 through 3.0.2 r49928 allows guest OS users to cause a denial of service (Linux host OS reboot) via a sysenter instruction.CVE-2009-2715Sun · 1.1% likely

    CWE-20

20. The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial…CVE-2010-0453Sun · 0.8% likely

    CWE-20

21. Unspecified vulnerability in the strfreectty function in the Special File System (SPECFS) in Sun Solaris 8 through 10 allows local users to cause a denial of service (system panic…CVE-2007-4732Sun · 0.4% likely

    CWE-20

22. Unspecified vulnerability in the NFS Remote Procedure Calls (RPC) zones implementation in Sun Solaris 10 and OpenSolaris before snv_88 allows local administrators of non-global zo…CVE-2008-3838Sun · 0.4% likely

    CWE-20

23. Unspecified vulnerability in the USB Mouse STREAMS module (usbms) in Sun Solaris 9 and 10, when 64-bit mode is enabled, allows local users to cause a denial of service (panic) via…CVE-2008-0718Sun · 0.3% likely

    CWE-20

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.