Skip to contentOracle Solaris vulnerabilities
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDenial-of-service possibility in logout() view by filling session storeCVE-2015-5964Fix available5.0 Medium
- djangoproject django, canonical ubuntu linux, oracle solaris +2 moreDjango denial of service via empty session record creationCVE-2015-5963Fix available5.0 Medium
- mozilla firefox, oracle solaris +1 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 38.0 allow remote...CVE-2015-4496Fix available9.3 High
- mozilla firefox, opensuse, oracle solaris +2 moreMozilla Firefox before 40.0 allows man-in-the-middle attackers to bypass a mixed-content...CVE-2015-4483Fix available4.3 Medium
- mozilla firefox, opensuse, oracle solaris +2 moremar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows...CVE-2015-44824.6 Medium
- mozilla firefox, opensuse, oracle solaris +2 moreRace condition in the Mozilla Maintenance Service in Mozilla Firefox before 40.0 and Firefox ESR...CVE-2015-4481Public exploit3.3 Low
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright...CVE-2015-4493Fix available9.3 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreUse-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before...CVE-2015-4492Fix available7.5 High
- gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5...CVE-2015-4491Fix available6.8 Medium
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0...CVE-2015-4490Fix available4.3 Medium
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox...CVE-2015-4489Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0,...CVE-2015-4488Fix available7.5 High
- mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38...CVE-2015-4487Fix available7.5 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4486Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox...CVE-2015-4485Fix available10.0 High
- mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla...CVE-2015-4484Fix available5.0 Medium
- mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 High
- isc bind, apple os x server, canonical ubuntu linux +18 more +20 morenamed in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to...CVE-2015-5477In KEVPublic exploitFix availableEPSS 99.6%7.8 High
- google chrome, canonical ubuntu linux, debian linux +10 more +12 moreMultiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in...CVE-2015-1283Fix availableEPSS 18.3%6.8 Medium
- google chrome, debian linux, opensuse +5 more +7 moreThe ucnv_io_getConverterName function in common/ucnv_io.cpp in International Components for...CVE-2015-1270Fix available6.8 Medium
- apache http server, apple mac os x, mac os x server +2 more +4 moreThe read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not...CVE-2015-0253EPSS 12.8%5.0 Medium
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect...CVE-2015-47704.9 Medium
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect...CVE-2015-26621.9 Low
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability...CVE-2015-26513.8 Low
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect...CVE-2015-26317.2 High
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability...CVE-2015-26144.9 Medium
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect availability...CVE-2015-26094.9 Medium
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect...CVE-2015-25894.9 Medium
- oracle solarisUnspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect...CVE-2015-25801.9 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-4752Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +1 more +3 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier,...CVE-2015-4737Fix available3.5 Low
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2648Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +9 more +11 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2643Fix available4.0 Medium
- oracle mysql, canonical ubuntu linux, debian linux +3 more +5 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.23 and earlier allows...CVE-2015-2620Fix available4.3 Medium
- oracle mysql, canonical ubuntu linux, debian linux +8 more +10 moreUnspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier and 5.6.24 and earlier allows...CVE-2015-2582Fix available4.0 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Vulnerable to HTTP Response Splitting AttackCVE-2015-5144Fix available4.3 Medium
- djangoproject django, canonical ubuntu linux, debian linux +1 more +3 moreDjango Denial-of-service by filling session storeCVE-2015-5143Fix available7.8 High
- mozilla firefox, oracle solaris +1 moreMozilla Firefox before 39.0 on OS X includes native key press information during the logging of...CVE-2015-27424.3 Medium
- mozilla firefox, firefox esr, oracle solaris +2 moreMozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunderbird before 38.1 do not...CVE-2015-2741Fix available4.3 Medium
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +2 more +4 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2733Fix available10.0 High
- mozilla network security services, debian linux, novell suse linux enterprise desktop +4 more +6 moreMozilla Network Security Services (NSS) before 3.19.1, as used in Mozilla Firefox before 39.0,...CVE-2015-2730Fix available4.3 Medium
- mozilla firefox, firefox esr, thunderbird +1 more +3 moreThe AudioParamTimeline::AudioNodeInputValue function in the Web Audio implementation in Mozilla...CVE-2015-2729Fix available5.0 Medium
- mozilla firefox, novell suse linux enterprise desktop, suse linux enterprise server +2 more +4 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0 allow...CVE-2015-2726Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +4 more +6 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 39.0,...CVE-2015-2725Fix available10.0 High
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 moreUse-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox...CVE-2015-2722Fix available10.0 High
- mozilla firefox, firefox esr, novell suse linux enterprise desktop +3 more +5 morePDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 and 38.x before 38.1...CVE-2015-2743Fix available7.5 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreBuffer overflow in the nsXMLHttpRequest::AppendToResponseText function in Mozilla Firefox before...CVE-2015-2740Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe ArrayBufferBuilder::append function in Mozilla Firefox before 39.0, Firefox ESR 31.x before...CVE-2015-2739Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe YCbCrImageDataDeserializer::ToDataSourceSurface function in the YCbCr implementation in...CVE-2015-2738Fix available10.0 High
- mozilla firefox, firefox esr, thunderbird +6 more +8 moreThe rx::d3d11::SetBufferData function in the Direct3D 11 implementation in Mozilla Firefox before...CVE-2015-2737Fix available10.0 High
- Show moreLoading…