Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jre:*:update_21:*:*:*:*:*:*

part: a version: * update: update_21

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJre (ef72ddc3-ba6c-5980-b49c-cfbb9c0f085e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3574 vulnerable 2026-06-08 04:55:15.220546 Details available
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3573 vulnerable 2026-06-08 04:55:15.215934 Details available
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.433Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3572 vulnerable 2026-06-08 04:55:15.209093 Details available
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3571 vulnerable 2026-06-08 04:55:15.196600 Details available
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the color profile parser that allows remote attackers to execute arbitrary code via a crafted Tag structure in a color profile.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3570 vulnerable 2026-06-08 04:55:15.193332 Details available
Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3569 vulnerable 2026-06-08 04:55:15.188802 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3568 vulnerable 2026-06-08 04:55:15.183101 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3567 vulnerable 2026-06-08 04:55:15.179529 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3566 vulnerable 2026-06-08 04:55:15.175759 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3565 vulnerable 2026-06-08 04:55:15.171839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3563 vulnerable 2026-06-08 04:55:15.169237 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3562 vulnerable 2026-06-08 04:55:15.163470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3561 vulnerable 2026-06-08 04:55:15.159616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3560 vulnerable 2026-06-08 04:55:15.157629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3559 vulnerable 2026-06-08 04:55:15.152750 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3558 vulnerable 2026-06-08 04:55:15.150377 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3557 vulnerable 2026-06-08 04:55:15.145175 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3556 vulnerable 2026-06-08 04:55:15.138134 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3555 vulnerable 2026-06-08 04:55:15.134626 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3554 vulnerable 2026-06-08 04:55:15.129674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3553 vulnerable 2026-06-08 04:55:15.123077 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3552 vulnerable 2026-06-08 04:55:15.120616 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3551 vulnerable 2026-06-08 04:55:15.116785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3550 vulnerable 2026-06-08 04:55:15.113553 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3549 vulnerable 2026-06-08 04:55:15.108190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3548 vulnerable 2026-06-08 04:55:15.103091 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3541 vulnerable 2026-06-08 04:55:14.936453 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3885 vulnerable 2026-06-08 04:51:44.910528 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3884 vulnerable 2026-06-08 04:51:44.909468 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3881 vulnerable 2026-06-08 04:51:44.885203 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3880 vulnerable 2026-06-08 04:51:44.884036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3879 vulnerable 2026-06-08 04:51:44.882859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3729 vulnerable 2026-06-08 04:51:44.037773 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.