Approved changes feed: RSS · Atom

cpe:2.3:a:sun:jdk:*:update_21:*:*:*:*:*:*

part: a version: * update: update_21

VendorSun (f793a52f-9733-5503-ba70-29fa391cdd2b)
ProductJdk (86ca1592-c9ed-54c6-9315-e1ffda84ce5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-3574 vulnerable 2026-06-08 04:55:15.221248 Details available
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that HttpURLConnection does not properly check for the allowHttpTrace permission, which allows untrusted code to perform HTTP TRACE requests.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3573 vulnerable 2026-06-08 04:55:15.216263 Details available
Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable downstream vendor that this is related to missing validation of request headers in the HttpURLConnection class when they are set by applets, which allows remote attackers to bypass the intended security policy.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.433Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3572 vulnerable 2026-06-08 04:55:15.209449 Details available
Unspecified vulnerability in the Sound component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.555Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3571 vulnerable 2026-06-08 04:55:15.197203 Details available
Unspecified vulnerability in the 2D component in Oracle Java SE and Java for Business 6 Update 21, 5.0 Update 25, 1.4.2_27, and 1.3.1_28 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU. Oracle has not commented on claims from a reliable researcher that this is an integer overflow in the color profile parser that allows remote attackers to execute arbitrary code via a crafted Tag structure in a color profile.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.585Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3570 vulnerable 2026-06-08 04:55:15.193783 Details available
Unspecified vulnerability in the Deployment Toolkit component in Oracle Java SE and Java for Business 6 Update 21 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors.
Published: 2010-10-19T21:00:00.000Z
Updated: 2024-08-07T03:11:44.607Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3569 vulnerable 2026-06-08 04:55:15.189422 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3568 vulnerable 2026-06-08 04:55:15.183804 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3567 vulnerable 2026-06-08 04:55:15.179888 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3566 vulnerable 2026-06-08 04:55:15.176416 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3565 vulnerable 2026-06-08 04:55:15.172168 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3563 vulnerable 2026-06-08 04:55:15.169570 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3562 vulnerable 2026-06-08 04:55:15.163807 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3561 vulnerable 2026-06-08 04:55:15.159949 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3560 vulnerable 2026-06-08 04:55:15.157966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3559 vulnerable 2026-06-08 04:55:15.153075 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3558 vulnerable 2026-06-08 04:55:15.150707 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3557 vulnerable 2026-06-08 04:55:15.145502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3556 vulnerable 2026-06-08 04:55:15.138470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3555 vulnerable 2026-06-08 04:55:15.134957 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3554 vulnerable 2026-06-08 04:55:15.130009 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3553 vulnerable 2026-06-08 04:55:15.123424 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3552 vulnerable 2026-06-08 04:55:15.120955 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3551 vulnerable 2026-06-08 04:55:15.117126 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3550 vulnerable 2026-06-08 04:55:15.113897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3549 vulnerable 2026-06-08 04:55:15.108534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3548 vulnerable 2026-06-08 04:55:15.103445 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-3541 vulnerable 2026-06-08 04:55:14.949008 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.