Skip to contentOracle Solaris vulnerabilities
- oracle mysql, mariadb, oracle solaris +2 moreUnspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows...CVE-2014-4274Fix available4.1 Medium
- mozilla firefox, oracle solaris +1 moreMozilla Firefox before 31.0 does not properly restrict use of drag-and-drop events to spoof...CVE-2014-1561Fix available5.8 Medium
- mozilla firefox, firefox esr, thunderbird +2 more +4 moreThe ConvolveHorizontally function in Skia, as used in Mozilla Firefox before 31.0, Firefox ESR 24...CVE-2014-1557Fix available9.3 High
- oracle mysql, mariadb, oracle solaris +3 more +5 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.35 and earlier and 5...CVE-2014-4243Fix available2.8 Low
- oracle mysql, debian linux, mariadb +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier, and 5...CVE-2014-4260Fix available5.5 Medium
- oracle mysql, debian linux, mariadb +9 more +11 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.37 and earlier and 5...CVE-2014-4258Fix available6.5 Medium
- debian linux, freedesktop dbus, mageia +2 more +4 moredbus 1.3.0 before 1.6.22 and 1.8.x before 1.8.6, when running on Linux 2.6.37-rc4 or later,...CVE-2014-3532Fix available2.1 Low
- thekelleys dnsmasq, oracle solaris +1 moreThe tcp_request function in Dnsmasq before 2.73rc4 does not properly handle the return value of...CVE-2015-3294Fix available6.4 Medium
- debian linux, oracle solaris, x.org x server +2 moreInteger overflow in the ProcDRI2GetBuffers function in the DRI2 extension in X.Org Server (aka...CVE-2014-8094Fix available6.5 Medium
- mozilla firefox, opensuse, oracle solaris +2 moreBuffer overflow in the Speex resampler in the Web Audio subsystem in Mozilla Firefox before 30.0...CVE-2014-1542Fix available6.8 Medium
- gnome gnome-terminal, opensuse, oracle solaris +2 moreThe "insert-blank-characters" capability in caps.c in gnome-terminal (vte) before 0.28.1 allows...CVE-2011-2198Fix available3.5 Low
- mozilla firefox, fedoraproject fedora, oracle solaris +2 moreMozilla Firefox before 29.0 on Android allows remote attackers to spoof the address bar via...CVE-2014-15275.0 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +3 more +5 moreThe sse2_composite_src_x888_8888 function in Pixman, as used in Cairo in Mozilla Firefox 28.0 and...CVE-2014-1528Fix available10.0 High
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in the MySQL Client component in Oracle MySQL 5.5.36 and earlier and 5...CVE-2014-2440Fix available5.1 Medium
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2436Fix available6.5 Medium
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability Oracle the MySQL Server component 5.5.35 and earlier and 5.6.15 and...CVE-2014-2432Fix available2.8 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2431Fix available2.6 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.36 and earlier and 5.6.16 and earlier allows...CVE-2014-2430Fix available3.5 Low
- oracle mysql, mariadb, oracle solaris +6 more +8 moreUnspecified vulnerability in Oracle MySQL Server 5.5.35 and earlier and 5.6.15 and earlier allows...CVE-2014-2419Fix available4.0 Medium
- apache http server, apple mac os x, mac os x server +11 more +13 moreThe mod_headers module in the Apache HTTP Server 2.2.22 allows remote attackers to bypass ...CVE-2013-5704Fix availableEPSS 58.0%5.0 Medium
- php, canonical ubuntu linux, debian linux +9 more +11 moreThe gdImageCreateFromXpm function in gdxpm.c in libgd, as used in PHP 5.4.26 and earlier, allows...CVE-2014-2497Fix availableEPSS 20.3%4.3 Medium
- mozilla firefoxos, oracle solaris +1 moreDirectory traversal vulnerability in the DeviceStorage API in Mozilla FirefoxOS before 1.2.2...CVE-2014-15079.3 High
- mozilla firefox, oracle solaris +1 moreDirectory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on...CVE-2014-15066.4 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreThe session-restore feature in Mozilla Firefox before 28.0 and SeaMonkey before 2.25 does not...CVE-2014-15042.6 Low
- mozilla firefox, seamonkey, opensuse +4 more +6 moreThe (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage2D functions in Mozilla...CVE-2014-15026.8 Medium
- mozilla firefox, oracle solaris, suse linux enterprise desktop +2 more +4 moreMozilla Firefox before 28.0 on Android allows remote attackers to bypass the Same Origin Policy...CVE-2014-15015.8 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to cause a denial of...CVE-2014-15005.0 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreMozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote attackers to spoof the domain...CVE-2014-14994.3 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreThe crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 and SeaMonkey before 2.25...CVE-2014-14985.0 Medium
- mozilla firefox, seamonkey, opensuse +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0 and...CVE-2014-14949.3 High
- apache tomcat, debian linux, oracle solaris +2 moreExposure of Sensitive Information to an Unauthorized Actor in Apache TomcatCVE-2013-4590Fix available4.3 Medium
- armin burgmeier net6, opensuse, oracle solaris +2 moreInteger overflow in inc/server.hpp in libnet6 (aka net6) before 1.3.14 might allow remote...CVE-2011-40935.8 Medium
- armin burgmeier net6, opensuse, oracle solaris +2 moreThe libobby server in inc/server.hpp in libnet6 (aka net6) before 1.3.14 does not perform...CVE-2011-40915.0 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +4 more +6 moreMozilla Firefox before 27.0 does not properly restrict access to about:home buttons by script on...CVE-2014-14894.3 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows...CVE-2014-148810.0 High
- mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe Content Security Policy (CSP) implementation in Mozilla Firefox before 27.0 and SeaMonkey...CVE-2014-14857.5 High
- mozilla firefox, opensuse, oracle solaris +3 more +5 moreMozilla Firefox before 27.0 on Android 4.2 and earlier creates system-log entries containing...CVE-2014-14845.0 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreMozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same...CVE-2014-14835.0 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +5 more +7 moreThe file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does...CVE-2014-14804.3 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and...CVE-2014-147810.0 High
- oracle mysql, canonical ubuntu linux, debian linux +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5...CVE-2014-04202.8 Low
- mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote...CVE-2013-66724.3 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox...CVE-2013-56197.5 High
- mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreMozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox...CVE-2013-56144.3 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +13 more +15 moreCross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23...CVE-2013-56124.3 Medium
- mozilla firefox, canonical ubuntu linux, fedoraproject fedora +5 more +7 moreMozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger,...CVE-2013-56115.8 Medium
- mozilla firefox, seamonkey, canonical ubuntu linux +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and...CVE-2013-561010.0 High
- google chrome, libjpeg-turbo, artifex gpl ghostscript +8 more +10 moreThe get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used...CVE-2013-6629Fix available5.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +6 more +8 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5...CVE-2013-38123.5 Low
- oracle mysql, canonical ubuntu linux, mariadb +5 more +7 moreUnspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5...CVE-2013-38094.0 Medium
- Show moreLoading…