SO
Product
Solaris
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 85Medium 110Low 35
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2014-6496 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to… Affected: 11.3 |
| CVE-2014-6495 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect availability via vectors related to SERVER:SSL:yaSSL Affected: 11.3 |
| CVE-2014-6494 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote attackers to affect availability via vectors related to… Affected: 11.3 |
| CVE-2014-6491 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote attackers to affect confidentiality, integrity, and availability via… Affected: 11.3 |
| CVE-2014-6478 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier, and 5.6.19 and earlier, allows remote attackers to affect integrity via vectors related to SERVER:SSL:yaSSL Affected: 11.3 |
| CVE-2014-6469 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier and 5.6.20 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 11.3 |
| CVE-2014-6463 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to… Affected: 11.3 |
| CVE-2014-4274 | – | Oct 15 | Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors… Affected: 11.3 |
| CVE-2014-0397 | – | Oct 6 | Multiple unspecified vulnerabilities in libXtsol in Oracle Solaris 10 and 11.1 have unspecified impact and attack vectors related to "Buffer errors." Affected: 10; 11.1 |
| CVE-2014-6051 | – | Sep 30 | Integer overflow in the MallocFrameBuffer function in vncviewer.c in LibVNCServer 0.9.9 and earlier allows remote VNC servers to cause a denial of service (crash) and possibly… Affected: 11.3 |
| CVE-2014-5459 | – | Sep 27 | The PEAR_REST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a (1) rest.cachefile or (2) rest.cacheid file… Affected: 11.2 |
| CVE-2014-6270 | – | Sep 12 | Off-by-one error in the snmpHandleUdp function in snmp_core.cc in Squid 2.x and 3.x, when an SNMP port is configured, allows remote attackers to cause a denial of service (crash)… Affected: 11.2 |
| CVE-2014-1563 | – | Sep 3 | Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff function in Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunderbird 31.x before 31.1… Affected: 11.3 |
| CVE-2014-1561 | – | Jul 23 | Mozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof customization events, which allows remote attackers to alter the placement of UI icons… Affected: 11.3 |
| CVE-2014-1557 | – | Jul 23 | The ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunderbird before 24.7, does not properly handle the… Affected: 11.3 |
| CVE-2014-3532 | – | Jul 19 | dbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later, allows local users to cause a denial of service (system-bus disconnect of other… Affected: 11.3 |
| CVE-2014-4260 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5.6.17 and earlier, allows remote authenticated users to affect integrity and… Affected: 11.3 |
| CVE-2014-4258 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5.6.17 and earlier allows remote authenticated users to affect confidentiality,… Affected: 11.3 |
| CVE-2014-4243 | – | Jul 17 | Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via… Affected: 11.3 |
| CVE-2014-1542 | – | Jun 11 | Buffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0 allows remote attackers to execute arbitrary code via vectors related to a crafted… Affected: 11.3 |
| CVE-2011-2198 | – | May 21 | The "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption… Affected: 11.2 |
| CVE-2014-1528 | – | Apr 30 | The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and SeaMonkey 2.25 on Windows, allows remote attackers to execute arbitrary code or… Affected: 11.3 |
| CVE-2014-1527 | – | Apr 30 | Mozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via crafted JavaScript code that uses DOM events to prevent the reemergence of the actual… Affected: 11.3 |
| CVE-2014-2440 | – | Apr 16 | Unspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect confidentiality, integrity, and… Affected: 11.3 |
| CVE-2014-2436 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability… Affected: 11.3 |
| CVE-2014-2432 | – | Apr 16 | Unspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors… Affected: 11.3 |
| CVE-2014-2431 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote attackers to affect availability via unknown vectors related to Options Affected: 11.3 |
| CVE-2014-2430 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 11.3 |
| CVE-2014-2419 | – | Apr 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 11.3 |
| CVE-2013-5704 | – | Apr 15 | The mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass "RequestHeader unset" directives by placing a header in the trailer portion of data sent… Affected: 11.2 |
| CVE-2014-2497 | – | Mar 21 | The gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows remote attackers to cause a denial of service (NULL pointer dereference and… Affected: 11.2 |
| CVE-2014-1507 | – | Mar 19 | Directory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2 allows attackers to bypass the media sandbox protection mechanism, and read or modify… Affected: 11.3 |
| CVE-2014-1506 | – | Mar 19 | Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary… Affected: 11.3 |
| CVE-2014-1504 | – | Mar 19 | The session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not consider the Content Security Policy of a data: URL, which makes it easier for remote… Affected: 11.3 |
| CVE-2014-1502 | – | Mar 19 | The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to bypass the… Affected: 11.3 |
| CVE-2014-1501 | – | Mar 19 | Mozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy and access arbitrary file: URLs via vectors involving the "Open Link in New Tab"… Affected: 11.3 |
| CVE-2014-1500 | – | Mar 19 | Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (resource consumption and application hang) via onbeforeunload events… Affected: 11.3 |
| CVE-2014-1499 | – | Mar 19 | Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain name in the WebRTC (1) camera or (2) microphone permission prompt by triggering… Affected: 11.3 |
| CVE-2014-1498 | – | Mar 19 | The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not properly validate a certain key type, which allows remote attackers to… Affected: 11.3 |
| CVE-2014-1494 | – | Mar 19 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of service (memory… Affected: 11.3 |
| CVE-2013-4590 | – | Feb 26 | Apache Tomcat before 6.0.39, 7.x before 7.0.50, and 8.x before 8.0.0-RC10 allows attackers to obtain "Tomcat internals" information by leveraging the presence of an untrusted web… Affected: 11.2 |
| CVE-2011-4093 | – | Feb 10 | Integer overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote attackers to hijack connections and gain privileges as other users by making a large… Affected: 11.2 |
| CVE-2011-4091 | – | Feb 10 | The libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform authentication before checking the user name, which allows remote attackers to obtain… Affected: 11.2 |
| CVE-2014-1489 | – | Feb 6 | Mozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on other pages, which allows user-assisted remote attackers to cause a denial of… Affected: 11.3 |
| CVE-2014-1488 | – | Feb 6 | The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a… Affected: 11.3 |
| CVE-2014-1485 | – | Feb 6 | The Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of… Affected: 11.3 |
| CVE-2014-1484 | – | Feb 6 | Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing profile paths, which allows attackers to obtain sensitive information via a crafted… Affected: 11.3 |
| CVE-2014-1483 | – | Feb 6 | Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in… Affected: 11.3 |
| CVE-2014-1480 | – | Feb 6 | The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers… Affected: 11.3 |
| CVE-2014-1478 | – | Feb 6 | Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service (memory… Affected: 11.3 |
The 500 most important CVEs for this product (exploited first, then by severity)