cbcvebase.

Oracle Solaris vulnerabilities

559 known vulnerabilities affecting oracle/solaris.

Total CVEs
559
CISA KEV
7
actively exploited
Public exploits
30
Exploited in wild
12
Severity breakdown
CRITICAL46HIGH123MEDIUM287LOW103

Vulnerabilities

Page 27 of 28
CVE-2020-2771P4LOWCVSS 2.5v10v112020-04-15
CVE-2020-2771 [LOW] CVE-2020-2771: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Whodo). Supported versions Vulnerability in the Oracle Solaris product of Oracle Systems (component: Whodo). Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than t
nvd
CVE-2014-9496P4LOWCVSS 2.1v11.22015-01-16
CVE-2014-9496 [LOW] CVE-2014-9496: The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact The sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified impact via vectors related to a (1) map offset or (2) rsrc marker, which triggers an out-of-bounds read.
nvd
CVE-2016-0406P4LOWCVSS 3.3v112016-01-21
CVE-2016-0406 [LOW] CVE-2016-0406: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availa Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity and availability via vectors related to Libc.
nvd
CVE-2016-5615P4LOWCVSS 3.3v11.32016-10-25
CVE-2016-5615 [LOW] CWE-284 CVE-2016-5615: Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via v Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Lynx.
nvd
CVE-2016-3419P4LOWCVSS 3.3v10v11.32016-04-21
CVE-2016-3419 [LOW] CVE-2016-3419: Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availabilit Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to Filesystem.
nvd
CVE-2022-21610P4LOWCVSS 3.3v112022-10-18
CVE-2022-21610 [LOW] CVE-2022-21610: Vulnerability in the Oracle Solaris product of Oracle Systems (component: LDoms). The supported vers Vulnerability in the Oracle Solaris product of Oracle Systems (component: LDoms). The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the a
nvd
CVE-2010-2376P4LOWCVSS 3.2v8v9+1 more2010-07-13
CVE-2010-2376 [LOW] CVE-2010-2376: Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentialit Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console.
nvd
CVE-2016-5480P4LOWCVSS 2.8v102016-10-25
CVE-2016-5480 [LOW] CVE-2016-5480: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via vector Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via vectors related to Bash.
nvd
CVE-2020-2749P4LOWCVSS 2.5v112020-04-15
CVE-2020-2749 [LOW] CVE-2020-2749: Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF command svcbundle). Th Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF command svcbundle). The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person ot
nvd
CVE-2018-2922P4LOWCVSS 2.5v11.32018-10-17
CVE-2018-2922 [LOW] CVE-2018-2922: Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). The supported version that is affected is 11.3. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris. Successful attacks of this vulnerability can result in unauthorized read
nvd
CVE-2020-14759P4LOWCVSS 2.5v112020-10-21
CVE-2020-14759 [LOW] CVE-2020-14759: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported ver Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than the
nvd
CVE-2004-1349P4LOWCVSS 2.1v82004-10-04
CVE-2004-1349 [LOW] CWE-269 CVE-2004-1349: gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions o gzip before 1.3 in Solaris 8, when called with the -f or -force flags, will change the permissions of files that are hard linked to the target files, which allows local users to view or modify these files.
nvd
CVE-2010-2393P4LOWCVSS 3.8v102010-07-13
CVE-2010-2393 [LOW] CVE-2010-2393: Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availabi Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability, related to RPC.
nvd
CVE-2016-0431P4LOWCVSS 1.2v112016-01-21
CVE-2016-0431 [LOW] CVE-2016-0431: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unk Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via unknown vectors related to Solaris Kernel Zones, a different vulnerability than CVE-2016-0419.
nvd
CVE-2010-3508P4LOWCVSS 3.2v102010-10-14
CVE-2010-3508 [LOW] CVE-2010-3508: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and inte Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Zones.
nvd
CVE-2015-2574P4LOWCVSS 2.1v102015-04-16
CVE-2015-2574 [LOW] CVE-2015-2574: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality via Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality via unknown vectors related to Text Utilities.
nvd
CVE-2014-8991P4LOWCVSS 2.1v11.22014-11-24
CVE-2014-8991 [LOW] CVE-2014-8991: pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package install pip 1.3 through 1.5.6 allows local users to cause a denial of service (prevention of package installation) by creating a /tmp/pip-build-* file for another user.
nvd
CVE-2015-4801P4LOWCVSS 2.1v11.22015-10-21
CVE-2015-4801 [LOW] CVE-2015-4801: Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality vi Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality via unknown vectors related to Solaris Kernel Zones.
nvd
CVE-2015-4920P4LOWCVSS 2.1v112016-01-21
CVE-2015-4920 [LOW] CVE-2015-4920: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity via vector Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity via vectors related to NDMP Backup Service.
nvd
CVE-2024-21105P4LOWCVSS 2.0v112024-04-16
CVE-2024-21105 [LOW] CWE-190 CVE-2024-21105: Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful attacks require human interaction from a person other than
nvd
Oracle Solaris vulnerabilities | cvebase