The calculated severity for CVEs has been updated to use CVSS v3 by default. CVEs that do not have a CVSS v3 score will fall back CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.
The plugin functionality in Sun Java SE 6 before Update 15 does not properly implement version selection, which allows context-dependent attackers to leverage vulnerabilities in "old zip and certificate handling" and have unspecified other impact via unknown vectors.
cpe:2.3:a:sun:java_se:*:14:*:*:*:*:*:* versions up to 6 (inclusive)
|89736||VMware ESX Java Runtime Environment (JRE) Multiple Vulnerabilities (VMSA-2010-0002) (remote check)||Nessus||VMware ESX Local Security Checks|
|89117||VMware ESX / ESXi Multiple Vulnerabilities (VMSA-2009-0016) (remote check)||Nessus||Misc.|
|45386||VMSA-2010-0002 : VMware vCenter update release addresses multiple security issues in Java JRE||Nessus||VMware ESX Local Security Checks|
|42870||VMSA-2009-0016 : VMware vCenter and ESX update release and vMA patch release address multiple security issues in third party components.||Nessus||VMware ESX Local Security Checks|
|42834||GLSA-200911-02 : Sun JDK/JRE: Multiple vulnerabilities||Nessus||Gentoo Local Security Checks|
|40749||RHEL 4 / 5 : java-1.6.0-sun (RHSA-2009:1200)||Nessus||Red Hat Local Security Checks|