SO
Product
Solaris
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 85Medium 110Low 35
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-4802 | – | Oct 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 11.3 |
| CVE-2015-4801 | – | Oct 21 | Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality via unknown vectors related to Solaris Kernel Zones Affected: 11.2 |
| CVE-2015-4792 | – | Oct 21 | Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 11.3 |
| CVE-2015-2642 | – | Oct 21 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Gzip Affected: 10; 11.2 |
| CVE-2015-4020 | – | Aug 25 | RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API requests, which allows remote attackers to… Affected: 11.3 |
| CVE-2015-6249 | – | Aug 24 | The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.7 does not prevent the conflicting use of a… Affected: 11.3 |
| CVE-2015-6248 | – | Aug 24 | The ptvcursor_add function in the ptvcursor implementation in epan/proto.c in Wireshark 1.12.x before 1.12.7 does not check whether the expected amount of data is available, which… Affected: 11.3 |
| CVE-2015-6247 | – | Aug 24 | The dissect_openflow_tablemod_v5 function in epan/dissectors/packet-openflow_v5.c in the OpenFlow dissector in Wireshark 1.12.x before 1.12.7 does not validate a certain offset… Affected: 11.3 |
| CVE-2015-6246 | – | Aug 24 | The dissect_wa_payload function in epan/dissectors/packet-waveagent.c in the WaveAgent dissector in Wireshark 1.12.x before 1.12.7 mishandles large tag values, which allows remote… Affected: 11.3 |
| CVE-2015-6245 | – | Aug 24 | epan/dissectors/packet-gsm_rlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a… Affected: 11.3 |
| CVE-2015-6244 | – | Aug 24 | The dissect_zbee_secure function in epan/dissectors/packet-zbee-security.c in the ZigBee dissector in Wireshark 1.12.x before 1.12.7 improperly relies on length fields contained… Affected: 11.3 |
| CVE-2015-6243 | – | Aug 24 | The dissector-table implementation in epan/packet.c in Wireshark 1.12.x before 1.12.7 mishandles table searches for empty strings, which allows remote attackers to cause a denial… Affected: 11.3 |
| CVE-2015-6242 | – | Aug 24 | The wmem_block_split_free_chunk function in epan/wmem/wmem_allocator_block.c in the wmem block allocator in the memory manager in Wireshark 1.12.x before 1.12.7 does not properly… Affected: 11.3 |
| CVE-2015-6241 | – | Aug 24 | The proto_tree_add_bytes_item function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a… Affected: 11.3 |
| CVE-2015-5964 | – | Aug 24 | The (1) contrib.sessions.backends.base.SessionBase.flush and (2) cache_db.SessionStore.flush functions in Django 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other… Affected: 11.3 |
| CVE-2015-5963 | – | Aug 24 | contrib.sessions.middleware.SessionMiddleware in Django 1.8.x before 1.8.4, 1.7.x before 1.7.10, 1.4.x before 1.4.22, and possibly other versions allows remote attackers to cause… Affected: 11.3 |
| CVE-2015-3219 | – | Aug 20 | Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015.1.x before 2015.1.1 allows remote… Affected: 11.2 |
| CVE-2015-4496 | – | Aug 16 | Multiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote attackers to execute arbitrary code via crafted sample metadata in an MPEG-4 video file, a… Affected: 11.3 |
| CVE-2015-4493 | – | Aug 16 | Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote… Affected: 11.3 |
| CVE-2015-4492 | – | Aug 16 | Use-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 might allow remote attackers to execute… Affected: 11.3 |
| CVE-2015-4491 | – | Aug 16 | Integer overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5, as used in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on… Affected: 10; 11.3 |
| CVE-2015-4490 | – | Aug 16 | The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0 does not implement the Content Security Policy Level 2 exceptions for the blob,… Affected: 11.3 |
| CVE-2015-4489 | – | Aug 16 | The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of service (memory… Affected: 11.3 |
| CVE-2015-4488 | – | Aug 16 | Use-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 allows remote attackers to… Affected: 11.3 |
| CVE-2015-4487 | – | Aug 16 | The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox OS before 2.2 might allow remote attackers to cause a denial of… Affected: 11.3 |
| CVE-2015-4486 | – | Aug 16 | The decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code or cause a denial of… Affected: 11.3 |
| CVE-2015-4485 | – | Aug 16 | Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute… Affected: 11.3 |
| CVE-2015-4484 | – | Aug 16 | The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to… Affected: 11.3 |
| CVE-2015-4483 | – | Aug 16 | Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content protection mechanism via a feed: URL in a POST request Affected: 11.3 |
| CVE-2015-4482 | – | Aug 16 | mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows local users to gain privileges or cause a denial of service (out-of-bounds write)… Affected: 11.3 |
| CVE-2015-4481 | – | Aug 16 | Race condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 on Windows allows local users to write to arbitrary files and… Affected: 11.3 |
| CVE-2015-1819 | – | Aug 14 | The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML Entity Expansion (XEE) attack Affected: 11.3 |
| CVE-2015-1283 | – | Jul 23 | Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a… Affected: 10; 11.3 |
| CVE-2015-1270 | – | Jul 23 | The ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 44.0.2403.89, mishandles converter names… Affected: 11.3 |
| CVE-2015-4651 | – | Jul 22 | The dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP dissector in Wireshark 1.12.x before 1.12.6 does not properly determine whether enough… Affected: 11.3 |
| CVE-2015-0253 | – | Jul 20 | The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, which allows remote attackers to cause a… Affected: 11.3 |
| CVE-2015-4770 | – | Jul 16 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to UNIX filesystem Affected: 10; 11.2 |
| CVE-2015-4752 | – | Jul 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to Server :… Affected: 11.3 |
| CVE-2015-4737 | – | Jul 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors… Affected: 11.3 |
| CVE-2015-2662 | – | Jul 16 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to DHCP Server Affected: 10; 11.2 |
| CVE-2015-2651 | – | Jul 16 | Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to Kernel Zones virtualized NIC driver Affected: 11.2 |
| CVE-2015-2648 | – | Jul 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to DML Affected: 11.3 |
| CVE-2015-2643 | – | Jul 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to… Affected: 11.3 |
| CVE-2015-2631 | – | Jul 16 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rmformat Affected: 10; 11.2 |
| CVE-2015-2620 | – | Jul 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows remote authenticated users to affect confidentiality via unknown vectors related… Affected: 11.3 |
| CVE-2015-2614 | – | Jul 16 | Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to NVM Express SSD driver Affected: 11.2 |
| CVE-2015-2609 | – | Jul 16 | Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability via vectors related to CPU performance counters drivers Affected: 11.2 |
| CVE-2015-2589 | – | Jul 16 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to S10 Branded Zone Affected: 10; 11.2 |
| CVE-2015-2582 | – | Jul 16 | Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows remote authenticated users to affect availability via vectors related to GIS Affected: 11.3 |
| CVE-2015-2580 | – | Jul 16 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect availability via vectors related to NFSv4 Affected: 10; 11.2 |
The 500 most important CVEs for this product (exploited first, then by severity)