← Back

Solaris

solaris

Vendor: Oracle • 555 CVEs

CVEs (555)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-2574
1Oracle
1Solaris
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
2.1 LOW· v2
Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality via unknown vectors related to Text Utilities.
CVE-2015-2573
6Canonical
DebianMariadb+3 more
14Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+11 more
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.
CVE-2015-2571
6Canonical
DebianMariadb+3 more
14Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+11 more
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Optimizer.
CVE-2015-2568
6Canonical
DebianMariadb+3 more
15Communications Policy Management
Debian LinuxEnterprise Linux Desktop+12 more
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability via unknown vectors related to Server : Security : Privileges.
CVE-2015-0505
6Canonical
DebianMariadb+3 more
14Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+11 more
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via vectors related to DDL.
CVE-2015-0499
6Canonical
DebianMariadb+3 more
14Debian Linux
Enterprise Linux DesktopEnterprise Linux Eus+11 more
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
3.5 LOW· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : Federated.
CVE-2015-0471
1Oracle
1Solaris
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
4.4 MEDIUM· v2
Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to libelfsign.
CVE-2015-0448
1Oracle
1Solaris
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
7.2 HIGH· v2
Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors related to ZFS File system.
CVE-2015-0433
6Canonical
DebianMariadb+3 more
15Communications Policy Management
Debian LinuxEnterprise Linux Desktop+12 more
May 6, 2026
Apr 16, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect availability via vectors related to InnoDB : DML.
CVE-2015-0251
5Apache
AppleOpensuse+2 more
9Enterprise Linux Desktop
Enterprise Linux Hpc NodeEnterprise Linux Server+6 more
May 6, 2026
Apr 8, 2015
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The mod_dav_svn server in Subversion 1.5.0 through 1.7.19 and 1.8.0 through 1.8.11 allows remote authenticated users to spoof the svn:author property via a crafted v1 HTTP protocol request sequences.
CVE-2015-0248
5Apache
AppleOpensuse+2 more
9Enterprise Linux Desktop
Enterprise Linux Hpc NodeEnterprise Linux Server+6 more
May 6, 2026
Apr 8, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combination...Show more
The (1) mod_dav_svn and (2) svnserve servers in Subversion 1.6.0 through 1.7.19 and 1.8.0 through 1.8.11 allow remote attackers to cause a denial of service (assertion failure and abort) via crafted parameter combinations related to dynamically evaluated revision numbers.Show less
CVE-2015-0798
2Mozilla
Oracle
2Firefox
Solaris
May 6, 2026
Apr 8, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript c...Show more
The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, and Desktop Firefox pre-release, does not properly handle privileged URLs, which makes it easier for remote attackers to execute arbitrary JavaScript code with chrome privileges by leveraging the ability to bypass the Same Origin Policy.Show less
CVE-2015-1351
3Apple
OraclePhp
5Linux
Mac Os XPhp+2 more
May 6, 2026
Mar 30, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified othe...Show more
Use-after-free vulnerability in the _zend_shared_memdup function in zend_shared_alloc.c in the OPcache extension in PHP through 5.6.7 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.Show less
CVE-2015-2317
6Canonical
DebianDjangoproject+3 more
6Debian Linux
DjangoFedora+3 more
May 6, 2026
Mar 25, 2015
N/A· v4
N/A· v3
4.3 MEDIUM· v2
The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scr...Show more
The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control character in a URL, as demonstrated by a \x08javascript: URL.Show less
CVE-2015-2316
5Canonical
DjangoprojectFedoraproject+2 more
5Django
FedoraOpensuse+2 more
May 6, 2026
Mar 25, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by...Show more
The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string.Show less
CVE-2015-2155
5Debian
FedoraprojectOpensuse+2 more
5Debian Linux
FedoraOpensuse+2 more
May 6, 2026
Mar 24, 2015
N/A· v4
N/A· v3
7.5 HIGH· v2
The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.
CVE-2015-2190
3Opensuse
OracleWireshark
3Opensuse
SolarisWireshark
May 6, 2026
Mar 8, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote attackers to cause a denial of service (assertion failure and application exit)...Show more
epan/proto.c in Wireshark 1.12.x before 1.12.4 does not properly handle integer data types greater than 32 bits in size, which allows remote attackers to cause a denial of service (assertion failure and application exit) via a crafted packet that is improperly handled by the LLDP dissector.Show less
CVE-2015-2189
5Debian
MageiaOpensuse+2 more
6Debian Linux
LinuxMageia+3 more
May 6, 2026
Mar 8, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds r...Show more
Off-by-one error in the pcapng_read function in wiretap/pcapng.c in the pcapng file parser in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via an invalid Interface Statistics Block (ISB) interface ID in a crafted packet.Show less
CVE-2015-2188
5Debian
MageiaOpensuse+2 more
6Debian Linux
LinuxMageia+3 more
May 6, 2026
Mar 8, 2015
N/A· v4
N/A· v3
5.0 MEDIUM· v2
epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out...Show more
epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4 does not properly initialize a data structure, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted packet that is improperly handled during decompression.Show less
CVE-2015-0829
4Canonical
MozillaOpensuse+1 more
4Firefox
OpensuseSolaris+1 more
May 6, 2026
Feb 25, 2015
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback.