Oracle

Solaris

546 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2014-9663

Exploit
  • EPSS 2.61%
  • Published 08.02.2015 11:59:25
  • Last modified 12.04.2025 10:46:40

The tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain length field before that field's value is completely calculated, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly ...

7.5

CVE-2014-9660

Exploit
  • EPSS 4.85%
  • Published 08.02.2015 11:59:22
  • Last modified 12.04.2025 10:46:40

The _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle a missing ENDCHAR record, which allows remote attackers to cause a denial of service (NULL pointer dereference) or possibly have unspecified other impact...

7.5

CVE-2014-9659

Exploit
  • EPSS 2.87%
  • Published 08.02.2015 11:59:21
  • Last modified 12.04.2025 10:46:40

cff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with additional hints after the hint mask has been computed, which allows remote attackers to execute arbitrary code or cause a denial of service (stack-based buffer o...

7.5

CVE-2014-9658

Exploit
  • EPSS 1.52%
  • Published 08.02.2015 11:59:20
  • Last modified 12.04.2025 10:46:40

The tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect minimum table length, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a craft...

7.5

CVE-2014-9657

Exploit
  • EPSS 1.52%
  • Published 08.02.2015 11:59:19
  • Last modified 12.04.2025 10:46:40

The tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish a minimum record size, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via a cr...

5

CVE-2015-1380

  • EPSS 1.01%
  • Published 03.02.2015 16:59:11
  • Last modified 12.04.2025 10:46:40

jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body.

4

CVE-2015-0432

  • EPSS 0.4%
  • Published 21.01.2015 19:59:17
  • Last modified 12.04.2025 10:46:40

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier allows remote authenticated users to affect availability via vectors related to Server : InnoDB : DDL : Foreign Key.

7.5

CVE-2015-0411

  • EPSS 14.83%
  • Published 21.01.2015 19:59:00
  • Last modified 12.04.2025 10:46:40

Unspecified vulnerability in Oracle MySQL Server 5.5.40 and earlier, and 5.6.21 and earlier, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Server : Security : Encryption.

4.3

CVE-2015-1196

Exploit
  • EPSS 0.85%
  • Published 21.01.2015 18:59:57
  • Last modified 12.04.2025 10:46:40

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file.

5.8

CVE-2015-1038

Exploit
  • EPSS 3.18%
  • Published 21.01.2015 18:59:51
  • Last modified 12.04.2025 10:46:40

p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.