Approved changes feed: RSS · Atom
cpe:2.3:a:sun:java:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sun (f793a52f-9733-5503-ba70-29fa391cdd2b) |
|---|---|
| Product | Java (94fcf983-2877-5c0c-b4de-aaa6ac5b6dad) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-1107 |
vulnerable | 2026-06-08 04:51:13.136009 |
Details available
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier, and 5.0 Update 17 and earlier, allows remote attackers to trick a user into trusting a signed applet via unknown vectors that misrepresent the security warning dialog, related to a "Swing JLabel HTML parsing vulnerability," aka CR 6782871.
Published: 2009-03-25T23:00:00.000Z
Updated: 2024-08-07T05:04:48.666Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1105 |
vulnerable | 2026-06-08 04:51:13.132216 |
Details available
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12, 11, and 10 allows user-assisted remote attackers to cause a trusted applet to run in an older JRE version, which can be used to exploit vulnerabilities in that older version, aka CR 6706490.
Published: 2009-03-25T23:00:00.000Z
Updated: 2024-08-07T05:04:48.455Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1104 |
vulnerable | 2026-06-08 04:51:13.131615 |
Details available
The Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; and 1.4.2_19 and earlier does not prevent Javascript that is loaded from the localhost from connecting to other ports on the system, which allows user-assisted attackers to bypass intended access restrictions via LiveConnect, aka CR 6724331. NOTE: this vulnerability can be leveraged with separate cross-site scripting (XSS) vulnerabilities for remote attack vectors.
Published: 2009-03-25T23:00:00.000Z
Updated: 2024-08-07T04:57:17.936Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1103 |
vulnerable | 2026-06-08 04:51:13.130968 |
Details available
Unspecified vulnerability in the Java Plug-in in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 5.0 Update 17 and earlier; 6 Update 12 and earlier; 1.4.2_19 and earlier; and 1.3.1_24 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "deserializing applets," aka CR 6646860.
Published: 2009-03-25T23:00:00.000Z
Updated: 2024-08-07T04:57:17.805Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2009-1102 |
vulnerable | 2026-06-08 04:51:13.130225 |
Details available
Unspecified vulnerability in the Virtual Machine in Java SE Development Kit (JDK) and Java Runtime Environment (JRE) 6 Update 12 and earlier allows remote attackers to access files and execute arbitrary code via unknown vectors related to "code generation."
Published: 2009-03-25T23:00:00.000Z
Updated: 2024-08-07T04:57:17.922Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-2527 |
vulnerable | 2026-06-08 04:48:29.532219 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0440 |
vulnerable | 2026-06-08 04:44:58.034369 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-1999-0142 |
vulnerable | 2026-06-08 04:44:57.954320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.