Skip to contentOracle Solaris vulnerabilities
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe nsZipArchive::BuildFileList function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2736Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 morensZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x before 31.8 and 38.x before 38...CVE-2015-2735Fix available9.3 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D 9 implementation in Mozilla...CVE-2015-2734Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreUse-after-free vulnerability in the CSPService::ShouldLoad function in the microtask...CVE-2015-2731Fix available10.0 High
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreThe IndexedDatabaseManager class in the IndexedDB implementation in Mozilla Firefox before 39.0...CVE-2015-2728Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2724Fix available10.0 High
- mozilla network security services, canonical ubuntu linux, debian linux +5 more +7 moreMozilla Network Security Services (NSS) before 3.19, as used in Mozilla Firefox before 39.0,...CVE-2015-2721Fix available4.3 Medium
- xmlsoft libxml, apple iphone os, mac os x +8 more +10 moreNokogiri vulnerable to libxml XML Entity ExpansionCVE-2015-1819Fix available5.0 Medium
- ruby-lang ruby, rubygems, oracle solaris +1 more +3 moreRubyGems vulnerable to DNS hijack attackCVE-2015-3900Fix available5.0 Medium
- wireshark, debian linux, oracle solaris +2 moreThe dissect_wccp2r1_address_table_info function in epan/dissectors/packet-wccp.c in the WCCP...CVE-2015-4651Fix available5.0 Medium
- lighttpd, hp virtual customer access system, oracle solaris +2 moremod_auth in lighttpd before 1.4.36 allows remote attackers to inject arbitrary log entries via a...CVE-2015-3200Fix available7.5 High
- openstack horizon, oracle solaris +1 moreMultiple cross-site scripting (XSS) vulnerabilities in OpenStack Dashboard (Horizon) 2015.1.0...CVE-2015-3988Fix available3.5 Low
- mozilla firefox, firefox esr, thunderbird +5 more +7 moreBuffer overflow in the XML parser in Mozilla Firefox before 38.0, Firefox ESR 31.x before 31.7,...CVE-2015-2716Fix available7.5 High
- openstack keystone, oracle solaris +1 moreOpenStack Keystone Logs PasswordsCVE-2015-3646Fix available4.0 Medium
- erlang erlang\/otp, opensuse, oracle solaris +2 moreErlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections...CVE-2015-2774Fix available5.9 Medium
- squid-cache squid, fedoraproject fedora, oracle linux +1 more +3 moreSquid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when...CVE-2015-3455Fix availableEPSS 11.4%2.6 Low
- haxx curl, libcurl, apple mac os x +6 more +8 moreThe sanitize_cookie_path function in cURL and libcurl 7.31.0 through 7.41.0 does not properly...CVE-2015-3145Fix availableEPSS 30.5%7.5 High
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect...CVE-2015-25787.1 High
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality,...CVE-2015-25777.2 High
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality...CVE-2015-25742.1 Low
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect...CVE-2015-04714.4 Medium
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality...CVE-2015-04487.2 High
- mozilla firefox, oracle solaris +1 moreThe Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre...CVE-2015-07985.0 Medium
- php, apple mac os x, oracle linux +8 more +10 moreThe php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before...CVE-2015-3330Fix availableEPSS 13.5%6.8 Medium
- tcpdump, debian linux, fedoraproject fedora +2 more +4 moreThe force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service ...CVE-2015-2155Fix available7.5 High
- wireshark, opensuse, oracle solaris +2 moreepan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types...CVE-2015-2190Fix available5.0 Medium
- mozilla firefox, opensuse, oracle solaris +2 moreDouble free vulnerability in the nsXMLHttpRequest::GetResponse function in Mozilla Firefox before...CVE-2015-08286.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreBuffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to...CVE-2015-0829Fix available6.8 Medium
- samba rsync, opensuse, oracle solaris +2 morersync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in...CVE-2014-9512Fix available6.4 Medium
- freetype, canonical ubuntu linux, fedoraproject fedora +8 more +10 moreThe Mac_Read_POST_Resource function in base/ftobjs.c in FreeType before 2.5.4 proceeds with...CVE-2014-9674Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +2 more +4 moreArray index error in the parse_fond function in base/ftmac.c in FreeType before 2.5.4 allows...CVE-2014-9672Fix available5.8 Medium
- freetype, canonical ubuntu linux, debian linux +8 more +10 moreOff-by-one error in the pcf_get_properties function in pcf/pcfread.c in FreeType before 2.5.4...CVE-2014-9671Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer signedness errors in the pcf_get_encodings function in pcf/pcfread.c in FreeType...CVE-2014-9670Fix available4.3 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreMultiple integer overflows in sfnt/ttcmap.c in FreeType before 2.5.4 allow remote attackers to...CVE-2014-9669Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_sbit_decoder_init function in sfnt/ttsbit.c in FreeType before 2.5.4 proceeds with a count...CVE-2014-9666Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreFreeType before 2.5.4 does not check for the end of the data during certain parsing actions,...CVE-2014-9664Fix available6.8 Medium
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_cmap4_validate function in sfnt/ttcmap.c in FreeType before 2.5.4 validates a certain...CVE-2014-9663Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe _bdf_parse_glyphs function in bdf/bdflib.c in FreeType before 2.5.4 does not properly handle...CVE-2014-9660Fix available7.5 High
- freetype, canonical ubuntu linux, fedoraproject fedora +2 more +4 morecff/cf2intrp.c in the CFF CharString interpreter in FreeType before 2.5.4 proceeds with...CVE-2014-9659Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_kern function in sfnt/ttkern.c in FreeType before 2.5.4 enforces an incorrect...CVE-2014-9658Fix available7.5 High
- freetype, canonical ubuntu linux, debian linux +9 more +11 moreThe tt_face_load_hdmx function in truetype/ttpload.c in FreeType before 2.5.4 does not establish...CVE-2014-9657Fix available7.5 High
- privoxy, opensuse, oracle solaris +2 morejcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a...CVE-2015-1380Fix available5.0 Medium
- php, apple mac os x, oracle linux +2 more +4 moreUse-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the...CVE-2015-1351Fix available7.5 High
- 7-zip p7zip, fedoraproject fedora, oracle solaris +2 morep7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive.CVE-2015-1038Fix available5.8 Medium
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via...CVE-2015-03782.1 Low
- gnu patch, opensuse, oracle solaris +2 moreGNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a...CVE-2015-1196Fix available4.3 Medium
- libpng, apple mac os x, oracle solaris +2 moreBuffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6...CVE-2015-0973Fix available7.5 High
- python pillow, fedoraproject fedora, opensuse +1 more +3 morePillow denial of service via PNG bombCVE-2014-9601Fix available5.0 Medium
- libsndfile project libsndfile, canonical ubuntu linux, debian linux +2 more +4 moreThe sd2_parse_rsrc_fork function in sd2.c in libsndfile allows attackers to have unspecified...CVE-2014-9496Fix available2.1 Low
- sound exchange project exchange, debian linux, oracle solaris +2 moreMultiple heap-based buffer overflows in Sound eXchange (SoX) 14.4.1 and earlier allow remote...CVE-2014-8145Fix available7.5 High
- Show moreLoading…