Sun Sunos vulnerabilities

537 known vulnerabilities affecting sun/sunos.

Total CVEs

537

CISA KEV

Public exploits

105

Exploited in wild

Severity breakdown

CRITICAL51HIGH177MEDIUM218LOW91

Vulnerabilities

SortPage 10 of 27

CVE-1999-0859P4LOWCVSS 2.1PoCv5.5.1v5.71999-12-01

CVE-1999-0859 [LOW] CVE-1999-0859: Solaris arp allows local users to read files via the -f parameter, which lists lines in the file tha Solaris arp allows local users to read files via the -f parameter, which lists lines in the file that do not parse properly.

nvd

CVE-1999-0214P4CRITICALCVSS 10.0v4.1v4.1.1+1 more1992-07-21

CVE-1999-0214 [CRITICAL] CVE-1999-0214: Denial of service by sending forged ICMP unreachable packets. Denial of service by sending forged ICMP unreachable packets.

nvd

CVE-2003-1063P4HIGHCVSS 7.5v5.72003-08-20

CVE-2003-1063 [HIGH] CVE-2003-1063: The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2. The patches (1) 105693-13, (2) 108800-02, (3) 105694-13, and (4) 108801-02 for cachefs on Solaris 2.6 and 7 overwrite the inetd.conf file, which may silently reenable services and allow remote attackers to bypass the intended security policy.

nvd

CVE-2012-3127P4MEDIUMCVSS 5.4v5.102012-07-17

CVE-2012-3127 [MEDIUM] CVE-2012-3127: Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, r Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to SCTP.

nvd

CVE-2015-0375P4MEDIUMCVSS 5.0v5.10v5.112015-01-21

CVE-2015-0375 [MEDIUM] CVE-2015-0375: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect confiden Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows remote attackers to affect confidentiality via unknown vectors related to Network.

nvd

CVE-2013-0398P4MEDIUMCVSS 5.0v5.8v5.9+2 more2013-07-17

CVE-2013-0398 [MEDIUM] CVE-2013-0398: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect confi Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 allows remote attackers to affect confidentiality via unknown vectors related to Utility/Remote Execution Server (in.rexecd).

nvd

CVE-2011-0820P4MEDIUMCVSS 5.4v5.10v5.112011-04-20

CVE-2011-0820 [MEDIUM] CVE-2011-0820: Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows remote attackers to affect ava Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Kernel.

nvd

CVE-2014-6490P4MEDIUMCVSS 5.0v5.112014-10-15

CVE-2014-6490 [MEDIUM] CVE-2014-6490: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability vi Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect availability via vectors related to SMB server user component.

nvd

CVE-2014-4277P4MEDIUMCVSS 5.0v5.112014-10-15

CVE-2014-4277 [MEDIUM] CVE-2014-4277: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect confidentiality via unknown vectors related to Automated Install Engine, a different vulnerability than CVE-2014-4283.

nvd

CVE-2012-3124P4MEDIUMCVSS 5.0v5.102012-07-17

CVE-2012-3124 [MEDIUM] CVE-2012-3124: Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, r Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to Kernel/KSSL.

nvd

CVE-2004-1767P4HIGHCVSS 7.2v5.7v5.82004-12-31

CVE-2004-1767 [HIGH] CWE-264 CVE-2004-1767: The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary lo The kernel in Solaris 2.6, 7, 8, and 9 allows local users to gain privileges by loading arbitrary loadable kernel modules (LKM), possibly involving the modload function.

nvd

CVE-2014-4282P4HIGHCVSS 7.2v5.112014-10-15

CVE-2014-4282 [HIGH] CVE-2014-4282: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.

nvd

CVE-2014-6524P4HIGHCVSS 7.2v5.102015-01-21

CVE-2014-6524 [HIGH] CVE-2014-6524: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integri Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kernel.

nvd

CVE-2012-3204P4HIGHCVSS 7.2v5.112012-10-17

CVE-2012-3204 [HIGH] CVE-2012-3204: Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, int Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management.

nvd

CVE-2014-6521P4HIGHCVSS 7.2v5.102015-01-21

CVE-2014-6521 [HIGH] CVE-2014-6521: Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integri Unspecified vulnerability in Oracle Solaris 10 allows local users to affect confidentiality, integrity, and availability via vectors related to CDE - Power Management Utility.

nvd

CVE-2014-6510P4HIGHCVSS 7.2v5.112015-01-21

CVE-2014-6510 [HIGH] CVE-2014-6510: Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integri Unspecified vulnerability in Oracle Solaris 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Power Management Utility.

nvd

CVE-2012-3121P4MEDIUMCVSS 5.0v5.9v5.102012-07-17

CVE-2012-3121 [MEDIUM] CVE-2012-3121: Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows remote attackers to affect availabil Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows remote attackers to affect availability via unknown vectors related to in.tnamed and NameServer.

nvd

CVE-2012-3123P4MEDIUMCVSS 5.0v5.102012-07-17

CVE-2012-3123 [MEDIUM] CVE-2012-3123: Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, related to Apache HTTP Server.

nvd

CVE-2010-4433P4MEDIUMCVSS 5.0v5.102011-01-19

CVE-2010-4433 [MEDIUM] CVE-2010-4433: Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality via Unspecified vulnerability in Oracle Solaris 10 allows remote attackers to affect confidentiality via unknown vectors related to Ethernet and the Driver sub-component.

nvd

CVE-2011-2294P4MEDIUMCVSS 5.0v5.10v5.112011-07-21

CVE-2011-2294 [MEDIUM] CVE-2011-2294: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect avai Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect availability, related to SSH.

nvd

← Previous10 / 27Next →