cbcvebase.

Oracle Solaris vulnerabilities

552 known vulnerabilities affecting oracle/solaris.

Total CVEs
552
CISA KEV
6
actively exploited
Public exploits
29
Exploited in wild
10
Severity breakdown
CRITICAL46HIGH117MEDIUM286LOW103

Vulnerabilities

Page 24 of 28
CVE-2014-4243P4LOWCVSS 2.8v11.32014-07-17
CVE-2014-4243 [LOW] CVE-2014-4243: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.1 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via vectors related to ENFED.
nvd
CVE-2019-2545P4MEDIUMCVSS 4.0v10v112019-01-16
CVE-2019-2545 [MEDIUM] CVE-2019-2545: Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LD Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDoms IO). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks of this vulnerability c
nvd
CVE-2016-5561P4LOWCVSS 3.1v11.32016-10-25
CVE-2016-5561 [LOW] CVE-2016-5561: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect availability Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect availability via vectors related to IKE.
nvd
CVE-2015-4770P4MEDIUMCVSS 4.9v10v11.22015-07-16
CVE-2015-4770 [MEDIUM] CVE-2015-4770: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availabilit Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to UNIX filesystem.
nvd
CVE-2015-2589P4MEDIUMCVSS 4.9v10v11.22015-07-16
CVE-2015-2589 [MEDIUM] CVE-2015-2589: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availabilit Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to S10 Branded Zone.
nvd
CVE-2009-3519P4MEDIUMCVSS 4.9v8v9+1 more2009-10-01
CVE-2009-3519 [MEDIUM] CWE-772 CVE-2009-3519: Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris be Multiple memory leaks in the IP module in the kernel in Sun Solaris 8 through 10, and OpenSolaris before snv_109, allow local users to cause a denial of service (memory consumption) via vectors related to (1) M_DATA, (2) M_PROTO, (3) M_PCPROTO, and (4) M_SIG STREAMS messages.
nvd
CVE-2015-2609P4MEDIUMCVSS 4.9v11.22015-07-16
CVE-2015-2609 [MEDIUM] CVE-2015-2609: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via v Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to CPU performance counters drivers.
nvd
CVE-2016-0428P4MEDIUMCVSS 4.9v112016-01-21
CVE-2016-0428 [MEDIUM] CVE-2016-0428: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Verified Boot.
nvd
CVE-2015-2614P4MEDIUMCVSS 4.9v11.22015-07-16
CVE-2015-2614 [MEDIUM] CVE-2015-2614: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via v Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to NVM Express SSD driver.
nvd
CVE-2015-4831P4MEDIUMCVSS 4.9v11.22015-10-21
CVE-2015-4831 [MEDIUM] CVE-2015-4831: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via u Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2015-4822.
nvd
CVE-2014-6463P4LOWCVSS 3.3v11.32014-10-15
CVE-2014-6463 [LOW] CVE-2014-6463: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows re Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:REPLICATION ROW FORMAT BINARY LOG DML.
nvd
CVE-2011-2198P4LOWCVSS 3.5v11.22014-05-21
CVE-2011-2198 [LOW] CWE-20 CVE-2011-2198: The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remo The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file, as demonstrated by a file containing the string "\033[100000000000000000@".
nvd
CVE-2016-5559P4MEDIUMCVSS 4.1v10v11.32016-10-25
CVE-2016-5559 [MEDIUM] CVE-2016-5559: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect integrity v Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect integrity via vectors related to Kernel.
nvd
CVE-2014-4274P4MEDIUMCVSS 4.1v11.32014-10-15
CVE-2014-4274 [MEDIUM] CVE-2014-4274: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows lo Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.
nvd
CVE-2023-21900P4MEDIUMCVSS 4.0v10v112023-01-18
CVE-2023-21900 [MEDIUM] CVE-2023-21900: Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported vers Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the attacker
nvd
CVE-2024-20920P4LOWCVSS 3.8v112024-01-16
CVE-2024-20920 [LOW] CWE-200 CVE-2024-20920: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The support Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the vulnerability is in Oracle Solaris, attacks may signific
nvd
CVE-2010-3517P4MEDIUMCVSS 4.9v102010-10-14
CVE-2010-3517 [MEDIUM] CVE-2010-3517: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availabi Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to Kernel/X86.
nvd
CVE-2022-21439P4MEDIUMCVSS 4.2v10v112022-07-19
CVE-2022-21439 [MEDIUM] CVE-2022-21439: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Supported version Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other t
nvd
CVE-2018-3266P4LOWCVSS 3.9v11.32018-10-17
CVE-2018-3266 [LOW] CVE-2018-3266: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Verified Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Verified Boot). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthori
nvd
CVE-2010-2386P4MEDIUMCVSS 4.9v8v9+1 more2010-07-13
CVE-2010-2386 [MEDIUM] CVE-2010-2386: Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to aff Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect availability via unknown vectors related to GigaSwift Ethernet Driver.
nvd
Oracle Solaris vulnerabilities | cvebase