# |
CVE ID
|
CWE ID
|
# of Exploits
|
Vulnerability Type(s)
|
Publish Date
|
Update Date
|
Score
|
Gained Access Level
|
Access
|
Complexity
|
Authentication
|
Conf.
|
Integ.
|
Avail.
|
1 |
CVE-2012-0109 |
|
|
|
2012-01-18 |
2018-01-06 |
3.6 |
None |
Local |
Low |
Not required |
Partial |
None |
Partial |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect confidentiality and availability, related to TCP/IP. |
2 |
CVE-2012-0103 |
|
|
|
2012-01-18 |
2017-08-29 |
4.9 |
None |
Local |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to Kernel. |
3 |
CVE-2012-0100 |
|
|
|
2012-01-18 |
2018-01-06 |
6.8 |
None |
Local |
Low |
??? |
Complete |
Complete |
Complete |
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Kerberos. |
4 |
CVE-2012-0099 |
|
|
|
2012-01-18 |
2018-01-06 |
2.6 |
None |
Remote |
High |
Not required |
None |
None |
Partial |
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to sshd. |
5 |
CVE-2012-0098 |
|
|
|
2012-01-18 |
2018-01-06 |
1.9 |
None |
Local |
Medium |
Not required |
None |
None |
Partial |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2011-0813. |
6 |
CVE-2012-0097 |
|
|
|
2012-01-18 |
2017-08-29 |
2.1 |
None |
Local |
Low |
Not required |
Partial |
None |
None |
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect confidentiality via unknown vectors related to ksh93 Shell. |
7 |
CVE-2012-0096 |
|
|
|
2012-01-18 |
2018-01-06 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network. |
8 |
CVE-2012-0094 |
|
|
|
2012-01-18 |
2018-01-06 |
7.8 |
None |
Remote |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows remote attackers to affect availability, related to TCP/IP. |
9 |
CVE-2011-3543 |
|
|
|
2011-10-18 |
2017-08-29 |
7.8 |
None |
Remote |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to iSCSI DataMover (IDM). |
10 |
CVE-2011-3542 |
|
|
|
2011-10-18 |
2017-08-29 |
4.9 |
None |
Local |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to Kernel/Performance Counter BackEnd Module (pcbe). |
11 |
CVE-2011-3515 |
|
|
|
2011-10-18 |
2017-08-29 |
5.6 |
None |
Local |
Low |
Not required |
None |
Partial |
Complete |
Unspecified vulnerability in the Oracle Solaris 10 and 11 Express allows local users to affect integrity and availability via unknown vectors related to Process File System (procfs). |
12 |
CVE-2011-3508 |
|
|
|
2011-10-18 |
2017-08-29 |
9.3 |
None |
Remote |
Medium |
Not required |
Complete |
Complete |
Complete |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect confidentiality, integrity, and availability, related to LDAP library. |
13 |
CVE-2011-2298 |
|
|
|
2011-07-21 |
2011-10-05 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect availability, related to KSSL. |
14 |
CVE-2011-2296 |
|
|
|
2011-07-21 |
2011-10-05 |
4.9 |
None |
Local |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to Kernel/SCTP. |
15 |
CVE-2011-2295 |
|
|
|
2011-07-21 |
2011-10-05 |
4.7 |
None |
Local |
Medium |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to Driver/USB. |
16 |
CVE-2011-2294 |
|
|
|
2011-07-21 |
2011-10-05 |
5.0 |
None |
Remote |
Low |
Not required |
None |
None |
Partial |
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows remote attackers to affect availability, related to SSH. |
17 |
CVE-2011-2293 |
|
|
|
2011-07-21 |
2011-10-05 |
4.9 |
None |
Local |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to Zones. |
18 |
CVE-2011-2290 |
|
|
|
2011-07-21 |
2011-10-05 |
4.9 |
None |
Local |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel/sockfs. |
19 |
CVE-2011-2287 |
|
|
|
2011-07-21 |
2011-10-05 |
7.8 |
None |
Remote |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to fingerd. |
20 |
CVE-2011-2259 |
|
|
|
2011-07-20 |
2011-10-05 |
4.9 |
None |
Local |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability, related to UFS. |
21 |
CVE-2011-2258 |
|
|
|
2011-07-20 |
2011-10-05 |
4.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
Partial |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rksh. |
22 |
CVE-2011-0841 |
|
|
|
2011-04-20 |
2012-08-02 |
7.8 |
None |
Remote |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to TCP/IP. |
23 |
CVE-2011-0839 |
|
|
|
2011-04-20 |
2012-08-03 |
3.7 |
None |
Local |
High |
??? |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 9, 10, and 11 Express allows local users to affect availability, related to LOFS. |
24 |
CVE-2011-0829 |
|
|
|
2011-04-20 |
2012-08-03 |
4.9 |
None |
Local |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/SPARC. |
25 |
CVE-2011-0820 |
|
|
|
2011-04-20 |
2012-08-03 |
5.4 |
None |
Remote |
High |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Kernel. |
26 |
CVE-2011-0813 |
|
|
|
2011-04-20 |
2016-11-28 |
4.9 |
None |
Local |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel, a different vulnerability than CVE-2012-0098. |
27 |
CVE-2011-0812 |
|
|
|
2011-04-20 |
2012-08-03 |
3.7 |
None |
Local |
High |
??? |
None |
None |
Complete |
Unspecified vulnerability in the Solaris component in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect availability via unknown vectors related to Kernel. |
28 |
CVE-2011-0801 |
|
|
|
2011-04-20 |
2011-04-20 |
3.6 |
None |
Local |
Low |
Not required |
Partial |
Partial |
None |
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect confidentiality and integrity via unknown vectors related to cp. |
29 |
CVE-2011-0800 |
|
|
|
2011-04-20 |
2011-04-20 |
6.5 |
None |
Local |
Low |
??? |
Complete |
Complete |
Complete |
Unspecified vulnerability in the Solaris component in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Administration Utilities. |
30 |
CVE-2010-4459 |
|
|
|
2011-01-19 |
2017-08-17 |
4.6 |
None |
Local |
Low |
??? |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to SCTP and Kernel/sockfs. |
31 |
CVE-2010-4458 |
|
|
|
2011-01-19 |
2017-08-17 |
4.1 |
None |
Local |
Medium |
??? |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability, related to ZFS. |
32 |
CVE-2010-4457 |
|
|
|
2011-01-19 |
2017-08-17 |
7.8 |
None |
Remote |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 11 Express allows remote attackers to affect availability, related to SMB and CIFS. |
33 |
CVE-2010-4446 |
|
|
|
2011-01-19 |
2017-08-17 |
4.6 |
None |
Local |
Low |
??? |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 11 Express allows local users to affect availability via unknown vectors related to RDS and Kernel/InfiniBand. |
34 |
CVE-2010-4443 |
|
|
|
2011-01-19 |
2017-08-17 |
4.4 |
None |
Local |
Medium |
??? |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability, related to Kernel/NFS. |
35 |
CVE-2010-4442 |
|
|
|
2011-01-19 |
2017-08-17 |
4.4 |
None |
Local |
Medium |
??? |
None |
None |
Complete |
Unspecified vulnerability in Oracle Solaris 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel. |
36 |
CVE-2010-4440 |
|
|
|
2011-01-19 |
2017-08-17 |
4.4 |
None |
Local |
Medium |
??? |
None |
None |
Complete |
Unspecified vulnerability in Oracle 10 and 11 Express allows local users to affect availability via unknown vectors related to the Kernel. |
37 |
CVE-2010-2632 |
|
|
DoS |
2011-01-19 |
2017-08-17 |
7.8 |
None |
Remote |
Low |
Not required |
None |
None |
Complete |
Unspecified vulnerability in the FTP Server in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability. NOTE: the previous information was obtained from the January 2011 CPU. Oracle has not commented on claims from a reliable researcher that this is an issue in the glob implementation in libc that allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames. |