CVE-2020-2656: Undefined Security Weakness

Vulnerability in the Oracle Solaris product of Oracle Systems component: X Window System. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris...

Oracle Java SE CVE-2020-2585 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'JavaFX' component. This vulnerability affects the following supported versions: Java SE: 8u241 Technologies Affected Oracle JDKLinux Producti...

Oracle Solaris cpujan2020 Multiple Remote Security Vulnerabilities

Description Oracle Solaris is prone to multiple remote security vulnerabilities that exists in the 'Kernel' component. These issues can be exploited over 'SMB' protocol. These vulnerabilities affect the following supported versions: 11 Technologies Affected Oracle Solaris 11 Recommendations Block...

PT-2020-1519 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient access control in the kernel of Oracle Solaris, allowing an unauthenticated attacker with network access via the SMB protocol to compromise the system. Successful...

PT-2020-1477

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient access control in the Filesystem component of Oracle Solaris, allowing an attacker to modify, add, or delete data, or cause a partial denial of service. Successful...

PT-2020-1407

Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 10 and 11 Description The issue is related to insufficient access control in the kernel of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris...

Oracle Java SE CVE-2020-2655 Remote Security Vulnerability

Description Oracle Java SE is prone to a remote security vulnerability. The vulnerability can be exploited over 'HTTPS' protocol. This issue affects the 'JSSE' component. This vulnerability affects the following supported versions: Java SE: 11.0.5, 13.0.1 Technologies Affected Oracle JDKLinux...

PT-2020-1583

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to inadequate access control in the Filesystem component of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise Oracle Solaris...

Oracle Java SE/Java SE Embedded CVE-2020-2593 Remote Security Vulnerability

Description Oracle Java SE and Java SE Embedded are prone to a remote security vulnerability. The vulnerability can be exploited over multiple protocols. This issue affects the 'Networking' component. This vulnerability affects the following supported versions: Java SE: 7u241, 8u231, 11.0.5,...

Oracle Solaris CVE-2020-2696 Local Security Vulnerability

Description Oracle Solaris is prone to a local security vulnerability. This issue affects the 'Common Desktop Environment' component. This vulnerability affects the following supported version: 10 Technologies Affected Oracle Solaris 10 Recommendations Permit local access for trusted individuals...

PT-2020-1348 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 10 Description: The issue is related to a component of Oracle Solaris, specifically the Common Desktop Environment, which has inadequate access control. This allows a low-privileged attacker with logon access to the...

PT-2020-1416 · Oracle · X-Window-System +1

Name of the Vulnerable Software and Affected Versions: Oracle Solaris versions 10 and 11 Description: The issue is related to inadequate access control in the X Window System component of Oracle Solaris. It allows an attacker with low privileges and logon access to the infrastructure to compromis...

PT-2020-1451

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to a kernel vulnerability in Oracle Solaris, which can be exploited by an unauthenticated attacker with network access via SMB. This vulnerability may impact additional products and ca...

Oracle Solaris cpujan2020 Multiple Local Security Vulnerabilities

Description Oracle Solaris is prone to multiple local security vulnerabilities. These vulnerabilities affect the following supported versions: 11 Technologies Affected Oracle Solaris 11 Recommendations Permit local access for trusted individuals only. Where possible, use restricted environments a...

PT-2020-1507

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to inadequate access control in the Consolidation Infrastructure component of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise...

Oracle Solaris cpujan2020 Multiple Local Security Vulnerabilities

Description Oracle Solaris is prone to multiple local security vulnerabilities. These vulnerabilities affect the following supported versions: 10, 11 Technologies Affected Oracle Solaris 10 Oracle Solaris 11 Recommendations Permit local access for trusted individuals only. Where possible, use...

Oracle solaris sshd Remote Root Exploit

amd64/sparc targets, used vs. solaris in datacenters only rare across the perimeter...

Security Bulletin: Denial of Service vulnerability in IBM Spectrum Protect Backup-Archive Client (CVE-2019-4406)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Backup-Archive Client is vulnerable to a denial of service attack. Vulnerability Details CVEID: CVE-2019-4406 DESCRIPTION: The IBM Spectrum Protect Client may be vulnerable to a denial of service attack due to a timing issue between...

FreeBSD Solaris PF IPv6 Network Firewall

The vulnerability of the PF IPv6 network firewall in FreeBSD and Solaris is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to bypass existing access control policies or cause service failures using a specially crafted IPv6 packet...

Ansible solaris_zone module OS command injection vulnerability

Ansible is a computer system configuration manager from the American company Ansible. The product can be used to publish, manage, and organize computer systems. solariszone is one of the modules used to manage Solaris zones. There is an operating system command injection vulnerability in Ansible'...