File and Path Handling

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Multiple directory traversal vulnerabilities in unspecified ASP applications in Sun Java Active Server Pages (ASP) Server before 4.0.3 allow remote attackers to read or delete arb…CVE-2008-2403Sun · 19% likely

   CWE-22

2. Directory traversal vulnerability in the PersistenceService in Sun Java Web Start in JDK and JRE 5.0 Update 11 and earlier, and Java Web Start in SDK and JRE 1.4.2_13 and earlier,…CVE-2007-3504Sun · 6.4% likely

   CWE-22

3. The Solaris Management Console (SMC) in Sun Solaris 8 and 9 generates different 404 error messages when a file does not exist versus when a file exists but is otherwise inaccessib…CVE-2004-1354Sun · 4.2% likely

   CWE-22

4. Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary fi…CVE-2008-5116Sun · 4.1% likely

   CWE-22

5. Directory traversal vulnerability in the ICC_Profile.getInstance method in Java Runtime Environment (JRE) in Sun Java SE 5.0 before Update 22 and 6 before Update 17, and OpenJDK,…CVE-2009-3728Sun · 3.8% likely

   CWE-22

6. Sun PC NetLink 1.0 through 1.2 does not properly set the access control list (ACL) for files and directories that use symbolic links and have been restored from backup, which coul…CVE-2002-2323Sun · 2.2% likely

   CWE-59

7. Directory traversal vulnerability in the vfs_getvfssw function in Solaris 2.6, 7, 8, and 9 allows local users to load arbitrary kernel modules via crafted (1) mount or (2) sysfs s…CVE-2004-2686Sun · 1.2% likely

   CWE-22

8. Unspecified vulnerability in pprosetup in Sun PatchPro 2.0 has unknown impact and attack vectors related to "unsafe use of temporary files."CVE-2002-2374Sun · 1.2% likely

   CWE-59

9. Sun xVM VirtualBox 2.0.0, 2.0.2, 2.0.4, 2.0.6r39760, 2.1.0, 2.1.2, and 2.1.4r42893 on Linux allows local users to gain privileges via a hardlink attack, which preserves setuid/set…CVE-2009-0876Sun · 0.8% likely

   CWE-59

10. Certain patch-installation scripts in Oracle Solaris allow local users to append data to arbitrary files via a symlink attack on the /tmp/CLEANUP temporary file, related to use of…CVE-2010-1183Sun · 0.5% likely

    CWE-59

11. Race condition in Java 1.4.2 before 1.4.2 Release 2 on Apple Mac OS X allows local users to corrupt files or create arbitrary files via unspecified attack vectors related to a tem…CVE-2005-2527Sun · 0.3% likely

    CWE-59

12. Sun SNMP Management Agent (SUNWmasf) 1.4u2 through 1.5.4 allows local users to overwrite arbitrary files and gain privileges via a symlink attack on temporary files.CVE-2008-5746Sun · 0.3% likely

    CWE-59

13. inetd on Sun Solaris 10, when debug logging is enabled, allows local users to write to arbitrary files via a symlink attack on the /var/tmp/inetd.log temporary file.CVE-2008-1684Sun · 0.2% likely

    CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.