← Back

Solaris

solaris

Vendor: Oracle • 562 CVEs

CVEs (562)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2016-3715
6Canonical
ImagemagickOpensuse+3 more
30Enterprise Linux Desktop
Enterprise Linux EusEnterprise Linux For Ibm Z Systems+27 more
Apr 22, 2026
May 5, 2016
N/A· v4
5.5 MEDIUM· v3
5.8 MEDIUM· v2
The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.
CVE-2016-4085
3Debian
OracleWireshark
3Debian Linux
SolarisWireshark
May 6, 2026
Apr 25, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service (application crash) or possibly have unspecif...Show more
Stack-based buffer overflow in epan/dissectors/packet-ncp2222.inc in the NCP dissector in Wireshark 1.12.x before 1.12.11 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a long string in a packet.Show less
CVE-2016-4082
3Debian
OracleWireshark
3Debian Linux
SolarisWireshark
May 6, 2026
Apr 25, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service...Show more
epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 uses the wrong variable to index an array, which allows remote attackers to cause a denial of service (out-of-bounds access and application crash) via a crafted packet.Show less
CVE-2016-4079
3Debian
OracleWireshark
3Debian Linux
SolarisWireshark
May 6, 2026
Apr 25, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause a denial of service (out-of-bounds wri...Show more
epan/dissectors/packet-pktc.c in the PKTC dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not verify BER identifiers, which allows remote attackers to cause a denial of service (out-of-bounds write and application crash) via a crafted packet.Show less
CVE-2016-3465
1Oracle
1Solaris
May 6, 2026
Apr 21, 2016
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to ZFS.
CVE-2016-3462
1Oracle
1Solaris
May 6, 2026
Apr 21, 2016
N/A· v4
5.5 MEDIUM· v3
4.9 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect availability via vectors related to Network Configuration Service.
CVE-2016-3441
1Oracle
1Solaris
May 6, 2026
Apr 21, 2016
N/A· v4
7.8 HIGH· v3
7.2 HIGH· v2
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect confidentiality, integrity, and availability via vectors related to Filesystem.
CVE-2016-3419
1Oracle
1Solaris
May 6, 2026
Apr 21, 2016
N/A· v4
3.3 LOW· v3
2.1 LOW· v2
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via vectors related to Filesystem.
CVE-2016-0693
1Oracle
1Solaris
May 6, 2026
Apr 21, 2016
N/A· v4
9.8 CRITICAL· v3
10.0 HIGH· v2
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to the PAM LDAP module.
CVE-2016-0676
1Oracle
1Solaris
May 6, 2026
Apr 21, 2016
N/A· v4
4.7 MEDIUM· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect availability via vectors related to the kernel.
CVE-2016-0669
1Oracle
1Solaris
May 6, 2026
Apr 21, 2016
N/A· v4
6.0 MEDIUM· v3
5.2 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows local users to affect integrity and availability via vectors related to Fwflash.
CVE-2016-0623
1Oracle
1Solaris
May 6, 2026
Apr 21, 2016
N/A· v4
4.7 MEDIUM· v3
4.3 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 11.3 allows remote attackers to affect integrity via vectors related to the Automated Installer sub-component.
CVE-2016-2381
5Canonical
DebianOpensuse+2 more
10Communications Billing And Revenue Management
Configuration ManagerDatabase Server+7 more
May 6, 2026
Apr 8, 2016
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Perl might allow context-dependent attackers to bypass the taint protection mechanism in a child process via duplicate environment variables in envp.
CVE-2015-2774
3Erlang
OpensuseOracle
3Erlang/otp
OpensuseSolaris
May 6, 2026
Apr 7, 2016
N/A· v4
5.9 MEDIUM· v3
4.3 MEDIUM· v2
Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of...Show more
Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).Show less
CVE-2015-8629
5Debian
MitOpensuse+2 more
12Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+9 more
May 6, 2026
Feb 13, 2016
N/A· v4
5.3 MEDIUM· v3
2.1 LOW· v2
The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authen...Show more
The xdr_nullstring function in lib/kadm5/kadm_rpc_xdr.c in kadmind in MIT Kerberos 5 (aka krb5) before 1.13.4 and 1.14.x before 1.14.1 does not verify whether '\0' characters exist as expected, which allows remote authenticated users to obtain sensitive information or cause a denial of service (out-of-bounds read) via a crafted string.Show less
CVE-2015-7546
2Openstack
Oracle
3Keystone
KeystonemiddlewareSolaris
May 6, 2026
Feb 3, 2016
N/A· v4
7.5 HIGH· v3
6.0 MEDIUM· v2
The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4 (Kilo) and Liberty before 2.3.3 does not...Show more
The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keystonemiddleware (formerly python-keystoneclient) before 1.5.4 (Kilo) and Liberty before 2.3.3 does not properly invalidate authorization tokens when using the PKI or PKIZ token providers, which allows remote authenticated users to bypass intended access restrictions and gain access to cloud resources by manipulating byte fields within a revoked token.Show less
CVE-2016-0618
1Oracle
1Solaris
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
1.4 LOW· v2
Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect confidentiality via unknown vectors related to Zones.
CVE-2016-0616
6Canonical
DebianMariadb+3 more
14Debian Linux
Enterprise Linux DesktopEnterprise Linux Hpc Node+11 more
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors relate...Show more
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.Show less
CVE-2016-0609
6Canonical
DebianMariadb+3 more
16Debian Linux
Enterprise LinuxEnterprise Linux Desktop+13 more
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
1.7 LOW· v2
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi...Show more
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via unknown vectors related to privileges.Show less
CVE-2016-0608
6Canonical
DebianMariadb+3 more
16Debian Linux
Enterprise LinuxEnterprise Linux Desktop+13 more
May 6, 2026
Jan 21, 2016
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availabi...Show more
Unspecified vulnerability in Oracle MySQL 5.5.46 and earlier, 5.6.27 and earlier, and 5.7.9 and MariaDB before 5.5.47, 10.0.x before 10.0.23, and 10.1.x before 10.1.10 allows remote authenticated users to affect availability via vectors related to UDF.Show less