Sun Sunos vulnerabilities
537 known vulnerabilities affecting sun/sunos.
Total CVEs
537
CISA KEV
0
Public exploits
105
Exploited in wild
6
Severity breakdown
CRITICAL51HIGH177MEDIUM218LOW91
Vulnerabilities
Page 22 of 27
CVE-2011-2259P4MEDIUMCVSS 4.9v5.8v5.9+2 more2011-07-20
CVE-2011-2259 [MEDIUM] CVE-2011-2259: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect av
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to UFS.
nvd
CVE-2013-3797P4MEDIUMCVSS 4.7v5.112013-07-17
CVE-2013-3797 [MEDIUM] CVE-2013-3797: Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown
Unspecified vulnerability in Oracle Solaris 11 allows local users to affect availability via unknown vectors related to Filesystem/DevFS.
nvd
CVE-2012-1765P4MEDIUMCVSS 4.7v5.102012-07-17
CVE-2012-1765 [MEDIUM] CVE-2012-1765: Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknow
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone.
nvd
CVE-2011-2295P4MEDIUMCVSS 4.7v5.8v5.9+2 more2011-07-21
CVE-2011-2295 [MEDIUM] CVE-2011-2295: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect av
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to Driver/USB.
nvd
CVE-2013-1494P4MEDIUMCVSS 4.7v5.102013-04-17
CVE-2013-1494 [MEDIUM] CVE-2013-1494: Unspecified vulnerability in Oracle Sun Solaris 10, when running on SPARC T4 servers, allows local u
Unspecified vulnerability in Oracle Sun Solaris 10, when running on SPARC T4 servers, allows local users to affect availability via unknown vectors related to Kernel.
nvd
CVE-2006-6275P4MEDIUMCVSS 4.7v5.82006-12-04
CVE-2006-6275 [MEDIUM] CWE-362 CVE-2006-6275: Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of ser
Race condition in the kernel in Sun Solaris 8 through 10 allows local users to cause a denial of service (panic) via unspecified vectors, possibly related to the exitlwps function and SIGKILL and /proc PCAGENT signals.
nvd
CVE-2013-0407P4MEDIUMCVSS 4.6v5.10v5.112013-01-17
CVE-2013-0407 [MEDIUM] CVE-2013-0407: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/DTrace Framework.
nvd
CVE-2012-3211P4MEDIUMCVSS 4.6v5.10v5.112012-10-17
CVE-2012-3211 [MEDIUM] CVE-2012-3211: Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability
Unspecified vulnerability in Oracle Sun Solaris 10 and 11 allows local users to affect availability via unknown vectors related to Kernel/System Call.
nvd
CVE-2004-1394P4MEDIUMCVSS 4.6v5.82004-12-31
CVE-2004-1394 [MEDIUM] CVE-2004-1394: The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains
The pfexec function for Sun Solaris 8 and 9 does not properly handle when a custom profile contains an invalid entry in the exec_attr database, which may allow local users with custom rights profiles to execute profile commands with additional privileges.
nvd
CVE-2010-4446P4MEDIUMCVSS 4.6v5.112011-01-19
CVE-2010-4446 [MEDIUM] CVE-2010-4446: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand.
nvd
CVE-2010-4459P4MEDIUMCVSS 4.6v5.112011-01-19
CVE-2010-4459 [MEDIUM] CVE-2010-4459: Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to SCTP and Kernel/sockfs.
nvd
CVE-2010-4443P4MEDIUMCVSS 4.4v5.10v5.112011-01-19
CVE-2010-4443 [MEDIUM] CVE-2010-4443: Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availabil
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS.
nvd
CVE-2006-5012P4MEDIUMCVSS 6.6v5.8v5.9+1 more2006-09-27
CVE-2006-5012 [MEDIUM] CVE-2006-5012: Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a
Unspecified vulnerability in Sun Solaris 8, 9, and 10 before 20060925 allows local users to cause a denial of service (disable syslog) and prevent security messages from being logged via unspecified vectors.
nvd
CVE-2008-1778P4MEDIUMCVSS 6.6v5.9v5.102008-04-14
CVE-2008-1778 [MEDIUM] CWE-16 CVE-2008-1778: Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 1
Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cause a denial of service (application exit), corrupt data, or trigger incorrect calculations via unknown vectors.
nvd
CVE-2010-4415P4MEDIUMCVSS 4.1v5.8v5.9+1 more2011-01-19
CVE-2010-4415 [MEDIUM] CVE-2010-4415: Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentialit
Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libc.
nvd
CVE-1999-1388P4MEDIUMCVSS 6.2v4.11994-05-13
CVE-1999-1388 [MEDIUM] CVE-1999-1388: passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -
passwd in SunOS 4.1.x allows local users to overwrite arbitrary files via a symlink attack and the -F command line argument.
nvd
CVE-2012-4290P4LOWCVSS 3.3v5.112012-08-16
CVE-2012-4290 [LOW] CWE-399 CVE-2012-4290: The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 all
The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet.
nvd
CVE-2012-1698P4LOWCVSS 2.1v5.112012-05-03
CVE-2012-1698 [LOW] CVE-2012-1698: Unspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect confi
Unspecified vulnerability in Oracle Sun Solaris 11 allows remote authenticated users to affect confidentiality, related to Kernel/GLD.
nvd
CVE-2011-0813P4MEDIUMCVSS 4.9v5.8v5.9+2 more2011-04-20
CVE-2011-0813 [MEDIUM] CVE-2011-0813: Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect av
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2012-0098.
nvd
CVE-2012-3212P4MEDIUMCVSS 4.7v5.10v5.112012-10-17
CVE-2012-3212 [MEDIUM] CVE-2012-3212: Unspecified vulnerability in Oracle Sun Solaris 10 and 11, when running on SPARC T4 servers, allows
Unspecified vulnerability in Oracle Sun Solaris 10 and 11, when running on SPARC T4 servers, allows local users to affect availability via unknown vectors related to Kernel.
nvd