Oracle Solaris Filesystem Data Access

The vulnerability of the Oracle Solaris operating system’s Filesystem component is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or to gain unauthorized access to protected information...

Oracle Solaris Kernel DoS

The vulnerability of the Oracle Solaris operating system’s kernel is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to cause service failures using the SMB protocol over the network...

SMB Server Privilege Escalation

The vulnerability of the SMB Server component of the Oracle Solaris operating system is related to lack of access control mechanisms. Exploiting this vulnerability can allow an attacker to modify, add, or delete data...

Oracle Solaris Consolidation Infrastructure Full Control

The vulnerability of the Oracle Solaris operating system’s Consolidation Infrastructure component is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain full control over the operating system...

Oracle Solaris Filesystem Data Access

The vulnerability of the Oracle Solaris operating system’s Filesystem component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or cause partial service interruptions...

Oracle Solaris Kernel DoS

The vulnerability of the Oracle Solaris operating system’s kernel is related to resource release errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

CVE-2015-2802

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the...

CVE-2015-2802

An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Manager 9.30 through 9.32, 9.40 through 9.41, 9.50, and Asset Manager Cloudsystem Chargeback 9.40, which could let a remote malicious user obtain sensitive information. This is the...

CVE-2015-2802

CVE-2015-2802 affects HP SiteScope 11.2/11.3 (Windows/Linux/S Solaris) and HP Asset Manager 9.30–9.32, 9.40–9.41, 9.50, plus Asset Manager Cloudsystem Chargeback 9.40. The vulnerability is a TLS RC4/Bar Mitzvah information disclosure, enabling a remote attacker to obtain sensitive information. Th...

zapchasti-solaris-rio.ru Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1083509 Security Researcher geeknik Helped patch 8729 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting zapchasti-solaris-rio.ru...

Solaris Filesystem DoS

The vulnerability of the Filesystem component in the Solaris operating system is related to resource release errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

X Window System Oracle Solaris Privilege Escalation

The vulnerability of the X Window System component in the Oracle Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to modify, add, or delete data, or gain unauthorized access to protected information...

Oracle Solaris Kernel DoS

The vulnerability of the Oracle Solaris operating system’s kernel is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to cause a service failure...

MGASA-2020-0060 Updated ansible package fixes security vulnerabilities

A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...

Updated ansible package fixes security vulnerabilities

A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...

PT-2020-6246

Name of the Vulnerable Software and Affected Versions Ansible Engine versions 2.7.15 through 2.9.2 and all previous versions Description A flaw was found in the solaris zone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked...

Oracle Solaris Common Desktop Environment Full Control

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain full control over the system...

Ansible: vulnerability in solaris_zone module via crafted solaris zone

A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...

Ansible: vulnerability in solaris_zone module via crafted solaris zone

A flaw was found in the solariszone module from the Ansible Community modules. When setting the name for the zone on the Solaris host, the zone name is checked by listing the process with the 'ps' bare command on the remote machine. An attacker could take advantage of this flaw by crafting the na...

Moderate: Red Hat Security Advisory: Ansible security and bug fix update (2.8.8)

An update for ansible is now available for Ansible Engine 2.8 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE lin...