21 matches found
EUVD-2026-106460
Vulnerability in the Oracle Solaris product of Oracle Systems component: Image Packaging System. The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks require...
EUVD-2026-106456
Vulnerability in the Oracle Solaris product of Oracle Systems component: Image Packaging System. The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this...
EUVD-2026-106453
Vulnerability in the Oracle Solaris product of Oracle Systems component: Image Packaging System. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Solaris. Successful attacks require...
EUVD-2026-106256
Vulnerability in the Oracle Solaris product of Oracle Systems component: Image Packaging System. Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks o...
CVE-2026-87417
Vulnerability in the Oracle Solaris product of Oracle Systems component: Image Packaging System. The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks of this...
CVE-2026-87421
Vulnerability in the Oracle Solaris product of Oracle Systems component: Image Packaging System. The supported version that is affected is 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks require...
CVE-2026-87414
Vulnerability in the Oracle Solaris product of Oracle Systems component: Image Packaging System. The supported version that is affected is 11.4. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Solaris. Successful attacks require...
CVE-2026-60432
Vulnerability in the Oracle Solaris product of Oracle Systems component: Image Packaging System. Supported versions that are affected are 11.3 and 11.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Solaris. Successful attacks o...
CVE-2026-87421
The Image Packaging System component in Oracle Solaris version 11.4 is vulnerable to an easily exploitable flaw. An unauthenticated attacker with network access via HTTP can compromise the system, though the attack requires human interaction from a user. Successful exploitation can result in unau...
CVE-2026-87417
A vulnerability exists in the Image Packaging System component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation may lead to unauthorized access to critical data or complete acce...
CVE-2026-87414
A vulnerability exists in the Image Packaging System component of Oracle Solaris version 11.4 . An unauthenticated attacker with network access via TLS can exploit this high-complexity vulnerability, though it requires human interaction from a third party. Successful exploitation may allow the at...
CVE-2026-60432
A vulnerability exists in the Image Packaging System component of Oracle Solaris versions 11.3 and 11.4 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successful exploitation can lead to a complete takeover of Oracle Solaris . Whi...
PT-2026-119729
Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Image Packaging System allows an unauthenticated attacker with network access via TLS to compromise the system. Exploitation is difficult and requires human interaction from a user other th...
PT-2026-119732
Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description A flaw in the Image Packaging System allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to unauthorized access to critical data or...
PT-2026-119736
Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11.4 Description An issue exists in the Image Packaging System component that allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation requires human interaction a...
PT-2026-119532
Name of the Vulnerable Software and Affected Versions Oracle Solaris versions 11.3 and 11.4 Description A flaw in the Image Packaging System allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful exploitation can lead to a full takeover of the affecte...
dotnet: Multiple .NET components susceptible to hash flooding
A flaw was found in dotnet. The System.Security.Cryptography.Cose, System.IO.Packaging and System.Runtime.Caching components may be exposed to hostile input, making them susceptible to hash flooding attacks, resulting in denial of service...
Snapd Flaw Lets Attackers Gain Root Access On Linux Systems
Ubuntu and some other Linux distributions suffer from a severe privilege escalation vulnerability that could allow a local attacker or a malicious program to obtain root privileges and total control over the targeted system. Dubbed "DirtySock" and identified as CVE-2019-7304, the vulnerability wa...
Debian DSA-4242-1 : ruby-sprockets - security update
Orange Tsai discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker can take advantage of this flaw to read arbitrary files outside an application's root directory via specially crafted requests, when the Sprockets server is used in production. C...
RubyGems BSON Denial of Service Vulnerability (CNVD-2015-03761)
RubyGems gems is a Ruby packaging system for packaging Ruby components. A denial of service vulnerability exists in RubyGems BSON. This vulnerability can be exploited to launch a denial of service attack...