Product:

Solaris

(Oracle)
Repositories • https://github.com/ImageMagick/ImageMagick
• https://github.com/krb5/krb5
• https://github.com/torvalds/linux
• https://github.com/newsoft/libvncserver
• https://github.com/wireshark/wireshark
#Vulnerabilities 542
Date Id Summary Products Score Patch Annotated
2015-04-16 CVE-2015-2578 Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap. Solaris N/A
2015-04-16 CVE-2015-2577 Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Accounting commands. Solaris N/A
2015-04-16 CVE-2015-2574 Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality via unknown vectors related to Text Utilities. Solaris N/A
2015-03-25 CVE-2015-2317 The utils.http.is_safe_url function in Django before 1.4.20, 1.5.x, 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1 does not properly validate URLs, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a control character in a URL, as demonstrated by a \x08javascript: URL. Ubuntu_linux, Debian_linux, Django, Fedora, Opensuse, Solaris N/A
2015-03-25 CVE-2015-2316 The utils.html.strip_tags function in Django 1.6.x before 1.6.11, 1.7.x before 1.7.7, and 1.8.x before 1.8c1, when using certain versions of Python, allows remote attackers to cause a denial of service (infinite loop) by increasing the length of the input string. Ubuntu_linux, Django, Fedora, Opensuse, Solaris N/A
2015-03-24 CVE-2015-2155 The force printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors. Debian_linux, Fedora, Opensuse, Solaris, Tcpdump N/A
2015-02-03 CVE-2015-1380 jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded body. Opensuse, Solaris, Privoxy N/A
2015-01-21 CVE-2015-1196 GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file. Patch, Opensuse, Solaris N/A
2015-01-21 CVE-2015-1038 p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive. P7zip, Fedora, Solaris N/A
2015-02-25 CVE-2015-0829 Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allows remote attackers to execute arbitrary code via a crafted MP4 video that is improperly handled during playback. Ubuntu_linux, Firefox, Opensuse, Solaris N/A