← Back

Solaris

solaris

Vendor: Oracle • 562 CVEs

CVEs (562)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
2Imagemagick
Oracle
2Imagemagick
Solaris
May 6, 2026
Dec 13, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table...Show more
The ReadDCMImage function in DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact via vectors involving the for statement in computing the pixel scaling table.Show less
2Imagemagick
Oracle
2Imagemagick
Solaris
May 6, 2026
Dec 13, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The DCM reader in ImageMagick before 6.9.4-5 and 7.x before 7.0.1-7 allows remote attackers to have unspecified impact by leveraging lack of NULL pointer checks.
2Imagemagick
Oracle
2Imagemagick
Solaris
May 6, 2026
Dec 13, 2016
N/A· v4
8.1 HIGH· v3
6.8 MEDIUM· v2
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trig...Show more
The WPG parser in ImageMagick before 6.9.4-4 and 7.x before 7.0.1-5, when a memory limit is set, allows remote attackers to have unspecified impact via vectors related to the SetImageExtent return-value check, which trigger (1) a heap-based buffer overflow in the SetPixelIndex function or an invalid write operation in the (2) ScaleCharToQuantum or (3) SetPixelIndex functions.Show less
2Imagemagick
Oracle
2Imagemagick
Solaris
May 6, 2026
Dec 13, 2016
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
The VerticalFilter function in the DDS coder in ImageMagick before 6.9.4-3 and 7.x before 7.0.1-4 allows remote attackers to have unspecified impact via a crafted DDS file, which triggers an out-of-bounds read.
2Oracle
Pivotal Software
2Rabbitmq
Solaris
May 6, 2026
Dec 9, 2016
N/A· v4
6.5 MEDIUM· v3
6.8 MEDIUM· v2
The Management plugin in RabbitMQ before 3.6.1 allows remote authenticated users with certain privileges to cause a denial of service (resource consumption) via the (1) lengths_age or (2) lengths_incr parameter.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Lynx.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
6.1 MEDIUM· v3
5.6 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Kernel Zones.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Kernel Zones.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect confidentiality via unknown vectors.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
3.1 LOW· v3
2.6 LOW· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect availability via vectors related to IKE.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
4.1 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect integrity via vectors related to Kernel.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
5.0 MEDIUM· v3
4.7 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via unknown vectors.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Kernel/X86.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
5.3 MEDIUM· v3
4.6 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors.
1Oracle
1Solaris
May 6, 2026
Oct 25, 2016
N/A· v4
2.8 LOW· v3
1.9 LOW· v2
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via vectors related to Bash.
3Hp
IscOracle
5Bind
Hp UxLinux+2 more
May 6, 2026
Sep 28, 2016
N/A· v4
7.5 HIGH· v3
7.8 HIGH· v2
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure a...Show more
buffer.c in named in ISC BIND 9 before 9.9.9-P3, 9.10.x before 9.10.4-P3, and 9.11.x before 9.11.0rc3 does not properly construct responses, which allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted query.Show less
3Libarchive
OracleRedhat
10Enterprise Linux Desktop
Enterprise Linux Hpc NodeEnterprise Linux Hpc Node Eus+7 more
May 6, 2026
Sep 21, 2016
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Integer overflow in the ISO parser in libarchive before 3.2.1 allows remote attackers to cause a denial of service (application crash) via a crafted ISO file.
2Openssl
Oracle
3Linux
OpensslSolaris
May 6, 2026
Sep 16, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that...Show more
The tls_decrypt_ticket function in ssl/t1_lib.c in OpenSSL before 1.1.0 does not consider the HMAC size during validation of the ticket length, which allows remote attackers to cause a denial of service via a ticket that is too short.Show less
2Oracle
Wireshark
2Solaris
Wireshark
May 6, 2026
Aug 7, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted...Show more
epan/dissectors/packet-pktap.c in the Ethernet dissector in Wireshark 2.x before 2.0.4 mishandles the packet-header data type, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.Show less
2Oracle
Wireshark
2Solaris
Wireshark
May 6, 2026
Aug 7, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (applicat...Show more
wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service (application crash) via a crafted file.Show less