Solaris

solaris

Vendor: Oracle • 562 CVEs

CVEs (562)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2014-0420 5Canonical DebianMariadb+2 more 8Debian Linux Enterprise Linux DesktopEnterprise Linux Server+5 more Apr 29, 2026 Jan 15, 2014 N/A· v4 N/A· v3 2.8 LOW· v2 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.34 and earlier, and 5.6.14 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Replication.
CVE-2013-6672 6Canonical FedoraprojectMozilla+3 more 9Fedora FirefoxLinux Enterprise Desktop+6 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations.
CVE-2013-5619 6Canonical FedoraprojectMozilla+3 more 9Fedora FirefoxLinux Enterprise Desktop+6 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 7.5 HIGH· v2 Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array acces...Show more Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service (out-of-bounds array access) or possibly have unspecified other impact via crafted JavaScript code.Show less
CVE-2013-5614 7Canonical FedoraprojectMozilla+4 more 16Enterprise Linux Desktop Enterprise Linux EusEnterprise Linux Server+13 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended...Show more Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site.Show less
CVE-2013-5612 7Canonical FedoraprojectMozilla+4 more 16Enterprise Linux Desktop Enterprise Linux EusEnterprise Linux Server+13 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation t...Show more Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header.Show less
CVE-2013-5611 7Canonical FedoraprojectMozilla+4 more 9Fedora FirefoxLinux Enterprise Desktop+6 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 5.8 MEDIUM· v2 Mozilla Firefox before 26.0 does not properly remove the Application Installation doorhanger, which makes it easier for remote attackers to spoof a Web App installation site by controlling the timing of page navigation.
CVE-2013-5610 6Canonical FedoraprojectMozilla+3 more 9Fedora FirefoxLinux Enterprise Desktop+6 more Apr 29, 2026 Dec 11, 2013 N/A· v4 N/A· v3 10.0 HIGH· v2 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibl...Show more Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.Show less
CVE-2013-6629 9Artifex CanonicalDebian+6 more 11Chrome Debian LinuxFedora+8 more Apr 29, 2026 Nov 19, 2013 N/A· v4 N/A· v3 5.0 MEDIUM· v2 The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of componen...Show more The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-turbo through 1.3.0, as used in Google Chrome before 31.0.1650.48, Ghostscript, and other products, does not check for certain duplications of component data during the reading of segments that follow Start Of Scan (SOS) JPEG markers, which allows remote attackers to obtain sensitive information from uninitialized memory locations via a crafted JPEG image.Show less
CVE-2013-3812 6Canonical DebianMariadb+3 more 9Debian Linux Linux Enterprise DesktopLinux Enterprise Server+6 more Apr 29, 2026 Jul 17, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Replication...Show more Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Replication.Show less
CVE-2013-3809 5Canonical MariadbOpensuse+2 more 8Linux Enterprise Desktop Linux Enterprise ServerLinux Enterprise Software Development Kit+5 more Apr 29, 2026 Jul 17, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect integrity via unknown vectors related to Audit Log.
CVE-2013-3805 4Mariadb OpensuseOracle+1 more 7Linux Enterprise Desktop Linux Enterprise ServerLinux Enterprise Software Development Kit+4 more Apr 29, 2026 Jul 17, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Prepared Statements.
CVE-2013-3794 4Mariadb OpensuseOracle+1 more 7Linux Enterprise Desktop Linux Enterprise ServerLinux Enterprise Software Development Kit+4 more Apr 29, 2026 Jul 17, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.30 and earlier and 5.6.10 allows remote authenticated users to affect availability via unknown vectors related to Server Partition.
CVE-2013-3793 6Canonical DebianMariadb+3 more 9Debian Linux Linux Enterprise DesktopLinux Enterprise Server+6 more Apr 29, 2026 Jul 17, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation...Show more Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.31 and earlier and 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to Data Manipulation Language.Show less
CVE-2013-2376 2Mariadb Oracle 3Mariadb MysqlSolaris Apr 29, 2026 Apr 17, 2013 N/A· v4 N/A· v3 4.0 MEDIUM· v2 Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Stored Procedure.
CVE-2013-1511 2Mariadb Oracle 3Mariadb MysqlSolaris Apr 29, 2026 Apr 17, 2013 N/A· v4 N/A· v3 3.5 LOW· v2 Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVE-2013-1502 2Mariadb Oracle 3Mariadb MysqlSolaris Apr 29, 2026 Apr 17, 2013 N/A· v4 N/A· v3 1.5 LOW· v2 Unspecified vulnerability in Oracle MySQL 5.5.30 and earlier and 5.6.9 and earlier allows local users to affect availability via unknown vectors related to Server Partition.
CVE-2011-3201 3Gnome OracleRedhat 5Enterprise Linux Desktop Enterprise Linux ServerEnterprise Linux Workstation+2 more Apr 29, 2026 Mar 8, 2013 N/A· v4 N/A· v3 4.3 MEDIUM· v2 GNOME Evolution before 3.2.3 allows user-assisted remote attackers to read arbitrary files via the attachment parameter to a mailto: URL, which attaches the file to the email.
CVE-2012-0876 6Canonical DebianLibexpat Project+3 more 11Debian Linux Enterprise Linux DesktopEnterprise Linux Eus+8 more Apr 29, 2026 Jul 3, 2012 N/A· v4 N/A· v3 4.3 MEDIUM· v2 The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU co...Show more The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent attackers to cause a denial of service (CPU consumption) via an XML file with many identifiers with the same value.Show less
CVE-2011-3539 1Oracle 1Solaris Apr 29, 2026 Oct 18, 2011 N/A· v4 N/A· v3 1.7 LOW· v2 Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Zones.
CVE-2011-3537 1Oracle 1Solaris Apr 29, 2026 Oct 18, 2011 N/A· v4 N/A· v3 7.8 HIGH· v2 Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Filesystem.

Previous 1...252627 28 29 Next