Page 23 of 415 results (0.009 seconds)

CVSS: 7.2EPSS: 0%CPEs: 2EXPL: 0

Unspecified vulnerability in the multi-language environment library (libmle) in Solaris 7 and 8, as shipped with the Japanese locale, allows local users to gain privileges via unknown attack vectors. • http://secunia.com/advisories/16219 http://securitytracker.com/id?1014579 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101807-1 http://www.osvdb.org/18269 http://www.vupen.com/english/advisories/2005/1221 •

CVSS: 3.6EPSS: 0%CPEs: 14EXPL: 0

Unspecified vulnerability in the XView library (libxview.so) in Solaris 2.5 to 10 allows local users to corrupt files via unknown vectors related to the handling of the clipboard selection while an XView application exits. • http://sunsolve.sun.com/search/document.do?assetkey=1-26-100881-1 http://sunsolve.sun.com/search/document.do?assetkey=1-26-27525-1 http://www.ciac.org/ciac/bulletins/p-264.shtml http://www.osvdb.org/18809 http://www.securityfocus.com/bid/13016 •

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0

Unspecified vulnerability in in.named in Solaris 9 allows attackers to cause a denial of service via unknown manipulations that cause in.named to "make unnecessary queries." • http://secunia.com/advisories/17460 http://securitytracker.com/id?1015191 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102030-1 http://www.osvdb.org/20752 http://www.securityfocus.com/bid/15384 http://www.vupen.com/english/advisories/2005/2388 https://exchange.xforce.ibmcloud.com/vulnerabilities/23062 •

CVSS: 4.3EPSS: 0%CPEs: 3EXPL: 0

The default configuration of the web server for the Solaris Management Console (SMC) in Solaris 8, 9, and 10 enables the HTTP TRACE method, which could allow remote attackers to obtain sensitive information such as cookies and authentication data from HTTP headers. • http://secunia.com/advisories/17334 http://securitytracker.com/id?1015112 http://sunsolve.sun.com/search/document.do?assetkey=1-26-102016-1 http://www.securityfocus.com/bid/15222 http://www.vupen.com/english/advisories/2005/2226 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1445 https://owasp.org/www-community/attacks/Cross_Site_Tracing • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •

CVSS: 4.6EPSS: 0%CPEs: 4EXPL: 0

Unspecified vulnerability in the (1) Xsun and (2) Xprt commands in Solaris 7, 8, 9, and 10 allows local users to execute arbitrary code. • http://secunia.com/advisories/16955 http://secunia.com/advisories/17246 http://sunsolve.sun.com/search/document.do?assetkey=1-26-101800-1 http://support.avaya.com/elmodocs2/security/ASA-2005-220.pdf http://www.osvdb.org/19699 http://www.osvdb.org/19700 https://exchange.xforce.ibmcloud.com/vulnerabilities/22410 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A943 •