SO
Product
Solaris
On CISA KEVExploited in the wildRansomware-linked
558
CVEs
7
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 17High 85Medium 110Low 35
Watch
Add Solaris to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-14871 In wildKEV | 10.0 | Oct 21 | Oracle Solaris and Zettabyte File System (ZFS) Unspecified Vulnerability Affected: 10 before 11.1; 9 |
| CVE-2026-46978 | 10.0 | Jun 16 | Vulnerability in the Oracle Solaris product of Oracle Systems (component: Remote Administration Daemon) Affected: 11.4 |
| CVE-2017-3623 | 10.0 | Apr 24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel RPC) Affected: All versions, or not specified |
| CVE-2015-8104 | 10.0 | Nov 16 | The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a denial of service (host OS panic or hang) by triggering many #DB… Affected: 11.3 |
| CVE-2020-10108 | 9.8 | Mar 12 | In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability Affected: 10; 11 |
| CVE-2017-3632 | 9.8 | Aug 8 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: CDE Calendar) Affected: 10; 11 |
| CVE-2016-5841 | 9.8 | Dec 13 | Integer overflow in MagickCore/profile.c in ImageMagick before 7.0.2-1 allows remote attackers to cause a denial of service (segmentation fault) or possibly execute arbitrary code… Affected: 10.0; 11.3 |
| CVE-2016-5691 | 9.8 | Dec 13 | The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of validation of (1) pixel.red, (2)… Affected: 11.3 |
| CVE-2016-5690 | 9.8 | Dec 13 | The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for… Affected: 11.3 |
| CVE-2016-5689 | 9.8 | Dec 13 | The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks Affected: 11.3 |
| CVE-2016-5687 | 9.8 | Dec 13 | The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which… Affected: 11.3 |
| CVE-2016-2177 | 9.8 | Jun 20 | OpenSSL through 1.0.2h incorrectly uses pointer arithmetic for heap-buffer boundary checks, which might allow remote attackers to cause a denial of service (integer overflow and… Affected: 10; 11.3 |
| CVE-2016-5118 | 9.8 | Jun 10 | The OpenBlob function in blob.c in GraphicsMagick before 1.3.24 and ImageMagick allows remote attackers to execute arbitrary code via a | (pipe) character at the start of a… Affected: 10; 11.3 |
| CVE-2016-0693 | 9.8 | Apr 21 | Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP… Affected: 10; 11.3 |
| CVE-2016-1283 | 9.8 | Jan 3 | The pcre_compile2 function in pcre_compile.c in PCRE 8.38 mishandles the… Affected: 11.3 |
| CVE-2001-0249 | 9.8 | Jun 18 | Heap overflow in FTP daemon in Solaris 8 allows remote attackers to execute arbitrary commands by creating a long pathname and calling the LIST command, which uses glob to… Affected: 8 |
| CVE-2017-3510 | 9.6 | Apr 24 | Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel Zones virtualized NIC driver) Affected: 11.3 |
Showing 17
The 500 most important CVEs for this product (exploited first, then by severity)