Known vulnerabilities in Oracle Solaris 10

Vendor: Oracle
Version: 10
Software CPE: cpe:2.3:o:oracle:solaris:*:*:*:*:*:*:*:*
Total vulnerabilities: 147
Public exploits: 13
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Oracle Solaris version 10 Oracle Solaris 10 is affected by 147 vulnerabilities: 1 critical, 31 high, 45 medium, 70 low Critical High Medium Low

Vulnerabilities (147)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU94555 - Improper input validation
CVE-2024-21147
CWE-20 Medium
No
No
11.4 SRU 71 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU93118 - Use of Potentially Dangerous Function
CVE-2024-39331
CWE-676 High
No
No
11.4 SRU 71 24.06.2024 SB2024062429
SB2024062430
SB2024062431
and 46 more
#VU92195 - NULL Pointer Dereference
CVE-2023-45918
CWE-476 Medium
No
No
11.4 SRU 71 18.06.2024 SB2024061808
SB2024061809
SB2024080107
and 5 more
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
11.4 SRU 71 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU90121 - Integer overflow
CVE-2024-5197
CWE-190 High
No
No
11.4 SRU 71 31.05.2024 SB2024053145
SB2024060640
SB2024061506
and 14 more
#VU89735 - Integer overflow
CVE-2024-4453
CWE-190 High
No
No
11.4 SRU 71 22.05.2024 SB2024052221
SB2024052942
SB2024060419
and 10 more
#VU89295 - Untrusted Search Path
CVE-2024-24787
CWE-426 Medium
No
No
11.4 SRU 71 09.05.2024 SB2024050936
SB2024050937
SB2024050938
and 12 more
#VU88533 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2024-32487
CWE-78 Medium
No
No
11.4 SRU 71 15.04.2024 SB2024041531
SB2024041533
SB2024042949
and 63 more
#VU88115 - Heap-based Buffer Overflow
CVE-2024-31080
CWE-122 Low
No
No
11.4 SRU 71 04.04.2024 SB2024040412
SB2024040418
SB2024040419
and 46 more
#VU87846 - Improper input validation
CVE-2024-2004
CWE-20 Low
No
No
11.4 SRU 71 27.03.2024 SB2024032713
SB2024032740
SB2024032748
and 28 more
#VU87807 - Use of Potentially Dangerous Function
CVE-2024-30202
CWE-676 High
No
No
11.4 SRU 71 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 6 more
#VU87680 - Uncontrolled Recursion
CVE-2024-25111
CWE-674 Medium
No
No
11.4 SRU 71 20.03.2024 SB2024032067
SB2024032078
SB2024032634
and 24 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757
CWE-611 Medium
No
No
11.4 SRU 71 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 74 more
#VU87189 - Stack-based buffer overflow
CVE-2024-22667
CWE-121 High
No
No
11.4 SRU 71 07.03.2024 SB2024030722
SB2024030729
SB2024031839
and 14 more
#VU87163 - Memory corruption
CVE-2024-25580
CWE-119 Medium
No
No
11.4 SRU 71 06.03.2024 SB2024030642
SB2024030649
SB2024030650
and 15 more
#VU85267 - Covert Timing Channel
CVE-2023-5388
CWE-385 Medium
No
No
11.3 ESU 36.33, 11.4 SRU 68, 11.4 SRU 71 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU78930 - Incorrect Default Permissions
CVE-2023-38497
CWE-276 Low
Public exploit available
No
11.4 SRU 71 03.08.2023 SB2023080354
SB2023080355
SB2023080365
and 16 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361
CWE-326 Medium
No
No
11.4 SRU 71 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU66124 - NULL Pointer Dereference
CVE-2021-4209
CWE-476 Medium
No
No
11.4 SRU 71 05.08.2022 SB2022080508
SB2022080509
SB2022080528
and 11 more
#VU65825 - Permissions, Privileges, and Access Controls
CVE-2022-32744
CWE-264 Low
No
No
11.4 SRU 71 27.07.2022 SB2022072721
SB2022072728
SB2022072922
and 20 more


Showing elements 1 - 20 out of 147