Oracle

Solaris

552 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.6

CVE-2015-3455

  • EPSS 6.47%
  • Veröffentlicht 18.05.2015 15:59:11
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do not properly validate the domain or hostname fields of X.509 certificates, which allows man-in-the-middle atta...

7.5

CVE-2015-2716

  • EPSS 5.5%
  • Veröffentlicht 14.05.2015 10:59:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7, and Thunderbird before 31.7 allows remote attackers to execute arbitrary code by providing a large amount of compressed XML data, a related issue to CVE-2...

4

CVE-2015-3646

  • EPSS 0.15%
  • Veröffentlicht 12.05.2015 19:59:26
  • Zuletzt bearbeitet 12.04.2025 10:46:40

OpenStack Identity (Keystone) before 2014.1.5 and 2014.2.x before 2014.2.4 logs the backend_argument configuration option content, which allows remote authenticated users to obtain passwords and other sensitive backend information by reading the Keys...

6.4

CVE-2015-3294

Exploit
  • EPSS 0.18%
  • Veröffentlicht 08.05.2015 14:59:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of the setup_reply function, which allows remote attackers to read process memory and cause a denial of service (out-of-bounds read and crash) via a malforme...

7.5

CVE-2015-3145

  • EPSS 63.7%
  • Veröffentlicht 24.04.2015 14:59:10
  • Zuletzt bearbeitet 12.04.2025 10:46:40

The sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly calculate an index, which allows remote attackers to cause a denial of service (out-of-bounds write and crash) or possibly have other unspecified impact via...

7.1

CVE-2015-2578

  • EPSS 1.38%
  • Veröffentlicht 16.04.2015 17:00:09
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap.

7.2

CVE-2015-2577

  • EPSS 0.19%
  • Veröffentlicht 16.04.2015 17:00:08
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Accounting commands.

2.1

CVE-2015-2574

  • EPSS 0.16%
  • Veröffentlicht 16.04.2015 17:00:06
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality via unknown vectors related to Text Utilities.

4

CVE-2015-2573

  • EPSS 0.41%
  • Veröffentlicht 16.04.2015 17:00:05
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.

4

CVE-2015-2571

  • EPSS 0.31%
  • Veröffentlicht 16.04.2015 17:00:04
  • Zuletzt bearbeitet 12.04.2025 10:46:40

Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.