Total
553 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2007-5319 | 1 Sun | 1 Solaris | 2017-09-28 | 3.5 LOW | N/A |
Unspecified vulnerability in the vuidmice STREAMS modules in Sun Solaris 8, 9, and 10 allows local users with console (/dev/console) access to cause a denial of service ("unusable" system console) via unspecified vectors. | |||||
CVE-2007-5367 | 1 Sun | 1 Solaris | 2017-09-28 | 4.9 MEDIUM | N/A |
Unspecified vulnerability in the Virtual File System (VFS) in Sun Solaris 10 allows local users to cause a denial of service (kernel memory consumption) via unspecified vectors. | |||||
CVE-2007-5368 | 1 Sun | 1 Solaris | 2017-09-28 | 4.9 MEDIUM | N/A |
Multiple unspecified vulnerabilities in labeld in Trusted Extensions in Sun Solaris 10 allow local users to cause a denial of service (multiple application hang) via unspecified vectors. | |||||
CVE-2007-5632 | 1 Sun | 1 Solaris | 2017-09-28 | 4.9 MEDIUM | N/A |
Multiple unspecified vulnerabilities in the kernel in Sun Solaris 8 through 10 allow local users to cause a denial of service (panic), related to the support for retrieval of kernel statistics, and possibly related to the sfmmu_mlspl_enter or sfmmu_mlist_enter functions. | |||||
CVE-2007-5716 | 1 Sun | 1 Solaris | 2017-09-28 | 7.8 HIGH | N/A |
Unspecified vulnerability in the Internet Protocol (IP) functionality in Sun Solaris 10 allows local users to cause a denial of service (panic) via unspecified vectors, probably related to a UDP packet. | |||||
CVE-2007-6232 | 8 Ftp, Hp, Ibm and 5 more | 9 Admin, Hp-ux, Tru64 and 6 more | 2017-09-28 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in index.php in FTP Admin 0.1.0 allows remote attackers to inject arbitrary web script or HTML via the error parameter in an error page action. | |||||
CVE-2007-6505 | 1 Sun | 1 Solaris | 2017-09-28 | 3.5 LOW | N/A |
Solaris 9, with Solaris Auditing enabled and certain patches for sshd installed, can generate audit records with an audit-ID of 0 even when the user logging into ssh is not root, which makes it easier for attackers to avoid detection and can make it more difficult to conduct forensics activities. | |||||
CVE-2010-0310 | 1 Sun | 1 Solaris | 2017-09-18 | 6.8 MEDIUM | N/A |
Trusted Extensions in Sun Solaris 10 allows local users to gain privileges via vectors related to omission of unspecified libraries from software updates. | |||||
CVE-2009-2644 | 1 Sun | 2 Opensolaris, Solaris | 2017-09-18 | 4.9 MEDIUM | N/A |
Race condition in the Solaris Auditing subsystem in Sun Solaris 9 and 10 and OpenSolaris before snv_121, when extended file attributes are used, allows local users to cause a denial of service (panic) via vectors related to "pathnames for invalid fds." | |||||
CVE-2009-2488 | 1 Sun | 2 Opensolaris, Solaris | 2017-09-18 | 4.9 MEDIUM | N/A |
Unspecified vulnerability in the NFSv4 module in the kernel in Sun Solaris 10, and OpenSolaris snv_102 through snv_119, allows local users to cause a denial of service (client panic) via vectors involving "file operations." | |||||
CVE-2009-3899 | 1 Sun | 2 Opensolaris, Solaris | 2017-09-18 | 7.8 HIGH | N/A |
Memory leak in the Sockets Direct Protocol (SDP) driver in Sun Solaris 10, and OpenSolaris snv_57 through snv_94, allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors. | |||||
CVE-2009-2487 | 1 Sun | 2 Opensolaris, Solaris | 2017-09-18 | 7.8 HIGH | N/A |
Use-after-free vulnerability in the frpr_icmp function in the ipfilter (aka IP Filter) subsystem in Sun Solaris 10, and OpenSolaris snv_45 through snv_110, allows remote attackers to cause a denial of service (panic) via unspecified vectors. | |||||
CVE-2009-2486 | 1 Sun | 2 Opensolaris, Solaris | 2017-09-18 | 7.8 HIGH | N/A |
Unspecified vulnerability in the SCTP implementation in Sun Solaris 10, and OpenSolaris before snv_120, allows remote attackers to cause a denial of service (panic) via unspecified packets. | |||||
CVE-2009-3839 | 1 Sun | 2 Opensolaris, Solaris | 2017-09-18 | 6.8 MEDIUM | N/A |
Unspecified vulnerability in the Solaris Trusted Extensions Policy configuration in Sun Solaris 10, and OpenSolaris snv_37 through snv_125, might allow remote attackers to execute arbitrary code by leveraging access to the X server. | |||||
CVE-2009-3851 | 1 Sun | 1 Solaris | 2017-09-18 | 7.2 HIGH | N/A |
Trusted Extensions in Sun Solaris 10 interferes with the operation of the xscreensaver-demo command for the XScreenSaver application, which makes it easier for physically proximate attackers to access an unattended workstation for which the intended screen locking did not occur, related to the "restart daemon." | |||||
CVE-2009-3048 | 4 Conectiva, Freebsd, Opera and 1 more | 4 Linux, Freebsd, Opera Browser and 1 more | 2017-09-18 | 4.3 MEDIUM | N/A |
Opera before 10.00 on Linux, Solaris, and FreeBSD does not properly implement the "INPUT TYPE=file" functionality, which allows remote attackers to trick a user into uploading an unintended file via vectors involving a "dropped file." | |||||
CVE-2009-2711 | 2 Sun, X.org | 3 Opensolaris, Solaris, X11 | 2017-09-18 | 4.9 MEDIUM | N/A |
XScreenSaver in Sun Solaris 9 and 10, OpenSolaris before snv_120, and X11 6.4.1 for Solaris 8, when the Xorg or Xnewt server is used, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276. | |||||
CVE-2009-2972 | 1 Sun | 1 Solaris | 2017-09-18 | 7.8 HIGH | N/A |
in.lpd in the print service in Sun Solaris 8 and 9 allows remote attackers to cause a denial of service (memory consumption) via unspecified vectors that trigger a "fork()/exec() bomb." | |||||
CVE-2009-2952 | 1 Sun | 2 Opensolaris, Solaris | 2017-09-18 | 4.9 MEDIUM | N/A |
Unspecified vulnerability in the pollwakeup function in Sun Solaris 10, and OpenSolaris before snv_51, allows local users to cause a denial of service (panic) via unknown vectors. | |||||
CVE-2009-3746 | 1 Sun | 1 Solaris | 2017-09-18 | 1.9 LOW | N/A |
XScreenSaver in Sun Solaris 10, when the accessibility feature is enabled, allows physically proximate attackers to obtain sensitive information by reading popup windows, which are displayed even when the screen is locked, a different vulnerability than CVE-2009-1276 and CVE-2009-2711. |