CVE-2023-21928

CVE-2023-21928 affects Oracle Solaris 11, in the IPS repository daemon. The issue is due to insufficient input validation, enabling a high-privilege attacker with local access to compromise Solaris; exploitation requires user interaction. The impact is unauthorized updates/inserts/deletes to Sola...

CVE-2023-21896

CVE-2023-21896 affects Oracle Solaris NSSwitch on Solaris 10 and 11. The vulnerability, described as difficult to exploit, allows a low-privileged attacker with logon to compromise Solaris and can lead to a full takeover. The CVSS v3.1 base score is 7.0 (Impact: Confidentiality, Integrity, Availa...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle Corporation. A security vulnerability exists in Oracle Solaris version 11, which can be exploited by an attacker to compromise Oracle Solaris by logging on to Oracle Solaris...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle Corporation. A security vulnerability exists in Oracle Solaris version 10 and 11, which can be exploited by an attacker to compromise Oracle Solaris by logging into Oracle Solaris...

PT-2023-2660 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 10 Description: The issue is related to errors in processing input data in the Core component of the Oracle Solaris operating system. Exploitation of this issue can allow an attacker to execute arbitrary code, potential...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle Corporation. A security vulnerability exists in Oracle Solaris version 11, which can be exploited by attackers to cause Oracle Solaris to hang or crash frequently and repeatedly...

PT-2023-2535

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to errors in processing input data in the Libraries component of Oracle Solaris. It can be exploited by a remote attacker to launch a denial-of-service DoS attack, potentially causing...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle Corporation. A security vulnerability exists in Oracle Solaris version 10 and 11, which can be exploited by an attacker to compromise Oracle Solaris by logging into Oracle Solaris...

PT-2023-2541 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris versions 10 and 11 Description: The issue is related to errors in handling input data in the NSSwitch component of Oracle Solaris, which can be exploited to compromise the system. A successful attack can result in the takeover ...

PT-2023-2542 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris versions 10 and 11 Description: The issue is related to errors in processing input data in the Utility component of Oracle Solaris. Exploitation of this issue can allow an attacker to execute arbitrary code. Successful attacks...

PT-2023-2529

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11 Description The issue is related to insufficient input validation in the Utility component of Oracle Solaris, allowing an unauthenticated attacker with logon to the infrastructure to compromise Oracle Solaris...

CVE-2023-22003: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2023-21985: Improper Access Control

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

CVE-2023-21984: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Libraries. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this vulnerability can...

CVE-2023-21948: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: Core. The supported version that is affected is 10. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2023-21928: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: IPS repository daemon. The supported version that is affected is 11. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle...

CVE-2023-21896: Improper Privilege Management

Vulnerability in the Oracle Solaris product of Oracle Systems component: NSSwitch. Supported versions that are affected are 10 and 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

Oracle Solaris 安全漏洞

Oracle Solaris is a set of UNIX operating systems from the American company Oracle. A security vulnerability exists in Oracle Solaris version 10. An attacker could exploit this vulnerability by logging on to Oracle Solaris to compromise Oracle Solaris...

Oracle Solaris 安全漏洞

Oracle Solaris is a UNIX operating system from Oracle Corporation. A security vulnerability exists in Oracle Solaris versions 10 and 11. An attacker could exploit this vulnerability to gain unauthorized access to update, insert, or delete certain Oracle Solaris accessible data...

Solaris 10 (x86) : 153154-07

SunOS 5.10x86: kernel patch. Date this patch was last updated by Sun : Apr/13/23 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include"compat.inc"; if description...