CVE-2017-3631

CVE-2017-3631 is a local privilege-escalation vulnerability in the Solaris kernel component affecting Solaris 11.x. The available description confirms a vulnerable kernel path enabling a low-privilege user with logon to Solaris to compromise the system, with a CVSS v3 base score of 5.3 (Impact on...

CVE-2017-3630

CVE-2017-3630 affects Oracle Solaris Kernel (Solaris 10/11). The issue is described as a Stack Clash due to an insufficiently sized stack guard page on unpatched Solaris, enabling a local user with logon to escalate privileges via RSH and compromise Solaris data integrity/readability or cause par...

CVE-2017-3629

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to compromise Solaris...

CVE-2017-3629

CVE-2017-3629 affects the Solaris kernel in Oracle Sun Systems Products Suite, with patched/affected versions 10 and 11. The vulnerability is a local, kernel-level issue that enables a low-privilege user with logon to compromise Solaris, potentially leading to a full takeover of the system. Explo...

Oracle Sun Systems Products Suite Solaris Local Elevation of Privilege Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A local lift vulnerability exists in the Kernel subcomponent of the Solaris component version 11 of the Oracle Sun Systems Products Suite. An attacker...

sun-sentinel.com XSS vulnerability

Open Bug Bounty ID: OBB-241365 Description| Value ---|--- Affected Website:| sun-sentinel.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the coders/sun.c component in the console-based graphic editor ImageMagick arises from reading data beyond the specified buffer. Exploiting this vulnerability allows a malicious actor to cause a service failure reading beyond the memory limit, resulting in the application...

The vulnerability of the console-based graphic editor ImageMagick, which allows a hacker to trigger a service failure

The vulnerability of the console-based graphic editor ImageMagick arises due to buffer overflow. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure termination of the application by using a specially created SUN file...

Solaris 10 (sparc) : 152724-02 (deprecated)

GNOME 2.6.0: libgdk-pixbuf-2.0.so patch. Date this patch was last updated by Sun : Nov/09/17 This plugin has been deprecated and either replaced with individual 152724 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

Solaris 10 (x86) : 152652-01 (deprecated)

GNOME 2.6.0x86: libgdk-x11-2.0.so patch. Date this patch was last updated by Sun : May/11/17 This plugin has been deprecated and either replaced with individual 152652 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disable...

DEBIAN-CVE-2017-8356

In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service memory leak via a crafted file...

UBUNTU-CVE-2017-8356

In ImageMagick 7.0.5-5, the ReadSUNImage function in sun.c allows attackers to cause a denial of service memory leak via a crafted file...

Oracle Sun ZFS Storage Appliance Kit Unauthorized Operation Vulnerability

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the User Interface subsystem subcomponent of the Sun ZFS Storage AK component in Oracle Sun...

Oracle Solaris Remote Vulnerability (CNVD-2017-06323)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation, of which Solaris is a Unix-like operating system. A security vulnerability exists in the Remote Administration Daemon subcomponent of the Solaris component of Oracle Sun Systems Products Suite, version...

Oracle Sun ZFS Storage Appliance Kit Remote Vulnerability (CNVD-2017-06327)

Oracle Sun Systems Products Suite is a suite of Sun systems products from Oracle Corporation.Sun ZFS Storage Appliance Kit AK is one of the ZFS storage appliance kits. A security vulnerability exists in the RAS subsystems subcomponent of the Sun ZFS Storage AK component of the Oracle Sun Systems...

[SECURITY] Fedora 26 Update: tomcat-8.0.43-1.fc26

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

CVE-2017-3621

Vulnerability in the Sun ZFS Storage Appliance Kit AK component of Oracle Sun Systems Products Suite subcomponent: IPC Frameworks. The supported version that is affected is AK 2013. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to...

CVE-2017-3622

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Common Desktop Environment CDE. The supported version that is affected is 10. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where Solaris executes to...

CVE-2017-3623

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel RPC. For supported versions that are affected see note. Easily "exploitable" vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise Solaris. While the...

CVE-2017-3582

Vulnerability in the Oracle SuperCluster Specific Software component of Oracle Sun Systems Products Suite subcomponent: Backup/Restore Utility. Supported versions that are affected are 2.3.8 and 2.3.13. Easily "exploitable" vulnerability allows unauthenticated attacker with logon to the...