CVSS: 7.1EPSS: 0%CPEs: 2EXPL: 0CVE-2010-2392
https://notcve.org/view.php?id=CVE-2010-2392
13 Jul 2010 — Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect integrity and availability, related to ZFS. Vulnerabilidad no especificada en Oracle Solaris v10 y OpenSolaris permite a usuarios locales afectar la integridad y disponibilidad, relacionado con ZFS. • http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2010-2394
https://notcve.org/view.php?id=CVE-2010-2394
13 Jul 2010 — Unspecified vulnerability in Oracle Solaris 10 allows local users to affect availability, related to TCP/IP. Vulnerabilidad sin especificar en Oracle Solaris 10 permite a usuarios locales comprometer la disponibilidad, relacionada con TCP/IP. • http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •
CVSS: 4.7EPSS: 0%CPEs: 2EXPL: 0CVE-2010-2399
https://notcve.org/view.php?id=CVE-2010-2399
13 Jul 2010 — Unspecified vulnerability in Oracle Solaris 10 and OpenSolaris allows local users to affect availability via unknown vectors related to Kernel/VM. Vulnerabilidad sin especificar Oracle Solaris v10 y OpenSolaris permite a usuarios locales afectar la disponibilidad a través de vectores desconocidos relacionados con Kernel/VM. • http://www.oracle.com/technetwork/topics/security/cpuoct2010-175626.html •
CVSS: 5.5EPSS: 0%CPEs: 70EXPL: 0CVE-2009-4774
https://notcve.org/view.php?id=CVE-2009-4774
21 Apr 2010 — Unspecified vulnerability in Sun Solaris 10 and OpenSolaris snv_49 through snv_117, when 64bit mode is used on the Intel x86 platform and a Linux (lx) branded zone is configured, allows local users to cause a denial of service (panic) via unspecified vectors, a different vulnerability than CVE-2007-6225. Vulnerabilidad sin especificar en Sun Solaris 10 y OpenSolaris snv_49 a la snv_117, cuando se usa el modo 64bit en las plataformas Intel x86 y la "branded Zone" está configurada, permite a usuarios locales ... • http://secunia.com/advisories/36691 •
CVSS: 10.0EPSS: 7%CPEs: 6EXPL: 0CVE-2010-0444
https://notcve.org/view.php?id=CVE-2010-0444
09 Feb 2010 — HP Operations Agent 8.51, 8.52, 8.53, and 8.60 on Solaris 10 uses a blank password for the opc_op account, which allows remote attackers to execute arbitrary code via unspecified vectors. HP Operations Agent v8.51, v8.52, v8.53, y v8.60 en Solaris v10 utiliza una contraseña en blanco en la cuenta opc_op, lo que permite a atacantes remotos ejecutar código arbitrario a través de vectores desconocidos. • http://marc.info/?l=bugtraq&m=126566258722040&w=2 • CWE-255: Credentials Management Errors •
CVSS: 5.5EPSS: 0%CPEs: 66EXPL: 1CVE-2010-0453 – Solaris/Open Solaris UCODE_GET_VERSION IOCTL - Denial of Service
https://notcve.org/view.php?id=CVE-2010-0453
03 Feb 2010 — The ucode_ioctl function in intel/io/ucode_drv.c in Sun Solaris 10 and OpenSolaris snv_69 through snv_133, when running on x86 architectures, allows local users to cause a denial of service (panic) via a request with a 0 size value to the UCODE_GET_VERSION IOCTL, which triggers a NULL pointer dereference in the ucode_get_rev function, related to retrieval of the microcode revision. La función ucode_ioctl en intel/io/ucode_drv.c en Sun Solaris v10 y OpenSolaris desde snv_69 hasta snv_133, cuando es ejecutado... • https://www.exploit-db.com/exploits/11351 • CWE-20: Improper Input Validation •
CVSS: 9.1EPSS: 0%CPEs: 10EXPL: 0CVE-2004-2766
https://notcve.org/view.php?id=CVE-2004-2766
28 Jan 2010 — Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02 allows remote attackers to obtain unspecified "access" to e-mail via a crafted e-mail message, related to a "session hijacking" issue, a different vulnerability than CVE-2005-2022 and CVE-2006-5486. Webmail en Sun ONE Messaging Server v6.1 y iPlanet Messaging Server v5.2 anteriores a v5.2hf2.02 permite a atacantes remotos obtener "acceso" inespecífico al correo electrónico a través de un mensaje de correo electrónico m... • http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-55-1 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 1%CPEs: 4EXPL: 0CVE-2003-1576
https://notcve.org/view.php?id=CVE-2003-1576
28 Jan 2010 — Buffer overflow in pamverifier in Change Manager (CM) 1.0 for Sun Management Center (SunMC) 3.0 on Solaris 8 and 9 on the sparc platform allows remote attackers to execute arbitrary code via unspecified vectors. Desbordamiento de búfer en pamverifier en Change Manager (CM) v1.0 para Sun Management Center (SunMC) v3.0 en Solaris v8 y v9 en la plataforma sparc permite a atacantes remotos ejecutar código arbitrario a través de vectores inespecíficos. • http://sunsolve.sun.com/search/document.do?assetkey=1-21-113105-01-1 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.5EPSS: 0%CPEs: 10EXPL: 0CVE-2003-1575
https://notcve.org/view.php?id=CVE-2003-1575
28 Jan 2010 — VERITAS File System (VxFS) 3.3.3, 3.4, and 3.5 before MP1 Rolling Patch 02 for Sun Solaris 2.5.1 through 9 does not properly implement inheritance of default ACLs in certain circumstances related to the characteristics of a directory inode, which allows local users to bypass intended file permissions by accessing a file on a VxFS filesystem. VERITAS File System (VxFS) v3.3.3, v3.4, y v3.5 anterior a MP1 Rolling Patch 02 para Sun Solaris v2.5.1 a la v9, no implementa adecuadamente la herencia de las ACLs por... • http://sunsolve.sun.com/search/document.do?assetkey=1-21-113207-05-1 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 6.1EPSS: 0%CPEs: 10EXPL: 0CVE-2004-2765
https://notcve.org/view.php?id=CVE-2004-2765
28 Jan 2010 — Cross-site scripting (XSS) vulnerability in Webmail in Sun ONE Messaging Server 6.1 and iPlanet Messaging Server 5.2 before 5.2hf2.02, when Internet Explorer is used, allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, a different vulnerability than CVE-2005-2022 and CVE-2006-5486. Vulnerabilidad de ejecución de secuencias de comandos en sitios cruzados (XSS) en Webmail en Sun ONE Messaging Server v6.1 e iPlanet Messaging Server v5.2 anterior a 5.2hf2.02, cuando se u... • http://sunsolve.sun.com/search/document.do?assetkey=1-21-116568-56-1 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •