Solaris

CVE-2026-61202 Jul 21, 22:18 HIGH This Week

Local privilege-boundary compromise in Oracle Solaris 11.3 and 11.4 (Utility component) allows a low-privileged attacker with a local logon to gain unauthorized read and write access to critical Solaris data, with a scope change that can significantly impact additional products beyond Solaris itself. The flaw carries a CVSS 3.1 base score of 7.5 despite requiring high attack complexity, reflecting the high confidentiality and integrity impact combined with scope change. There is no public exploit identified at time of analysis, and it is not listed in CISA KEV.

CVE-2026-60834 Jul 21, 22:18 HIGH This Week

Elevated information disclosure and data tampering in Oracle Solaris 11.4 allows a low-privileged, network-authenticated attacker to abuse the Remote Administration Daemon (RAD) utility component to gain complete read access to all Solaris-accessible data and modify a subset of it, with a scope change that can significantly impact other products on the host. Oracle rates it CVSS 3.1 7.1 with high attack complexity, and it is addressed in the July 2026 Critical Patch Update. There is no public exploit identified at time of analysis and it is not in CISA KEV, so exploitation is not confirmed in the wild.

CVE-2026-60833 Jul 21, 22:18 HIGH This Week

Local privilege escalation and full compromise in Oracle Solaris 11.4 (Utility component) allows a low-privileged local user with logon access to the host to take over the operating system, impacting confidentiality, integrity, and availability. Oracle rates it CVSS 3.1 7.0 and flags it as difficult to exploit (AC:H). There is no public exploit identified at time of analysis and it is not listed in CISA KEV; the fix ships in Oracle's July 2026 Critical Patch Update.

CVE-2026-60661 Jul 21, 22:18 HIGH This Week

Local privilege escalation to full system takeover in Oracle Solaris 11.4 lets a low-privileged local user compromise the Filesystems component and, due to a scope change, significantly impact additional products beyond Solaris itself. Exploitation is rated difficult (high attack complexity) and requires an existing local logon, but a successful attack yields complete confidentiality, integrity, and availability compromise. No public exploit identified at time of analysis; this was disclosed in the Oracle Critical Patch Update of July 2026 and is not listed in CISA KEV.

CVE-2026-60659 Jul 21, 22:18 HIGH This Week

Local privilege-abuse in the Filesystems component of Oracle Solaris 11.4 allows a low-privileged user with logon access to the host to corrupt or destroy critical operating-system data and to trigger a complete, repeatable denial of service (hang or crash) of the OS. Disclosed in Oracle's July 2026 Critical Patch Update and rated CVSS 3.1 7.1 with high Integrity and Availability impact but no confidentiality loss. There is no public exploit identified at time of analysis and it is not listed in CISA KEV.

CVE-2020-14871 Oct 21, 15:15 CRITICAL POC KEV PATCH THREAT Act Now

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2019-3010 Oct 16, 18:15 HIGH POC KEV PATCH THREAT Act Now

Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. Public exploit code available.

CVE-2017-3631 Jun 22, 13:29 MEDIUM POC PATCH THREAT This Month

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Rated medium severity (CVSS 5.3), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 10.9%.

CVE-2017-3630 Jun 22, 13:29 MEDIUM POC PATCH THREAT This Month

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Rated medium severity (CVSS 5.3), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 10.9%.

CVE-2017-3629 Jun 22, 13:29 HIGH POC PATCH THREAT Act Now

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Kernel). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 29.4%.

CVE-2017-3622 Apr 24, 19:59 HIGH POC PATCH THREAT Act Now

Vulnerability in the Solaris component of Oracle Sun Systems Products Suite (subcomponent: Common Desktop Environment (CDE)). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. Public exploit code available and EPSS exploitation probability 19.6%.

CVE-2016-3718 May 05, 18:59 MEDIUM POC KEV PATCH THREAT Act Now

The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

CVE-2016-3715 May 05, 18:59 MEDIUM POC KEV PATCH THREAT Act Now

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image. Rated medium severity (CVSS 5.5), this vulnerability is no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

CVE-2015-4495 Aug 08, 00:59 HIGH POC KEV PATCH THREAT Act Now

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Actively exploited in the wild (cisa kev) and public exploit code available.

CVE-2026-61052 Jul 21, 22:18 MEDIUM This Month

Complete denial-of-service in Oracle Solaris 11.4's Filesystems component allows any low-privileged local user to cause a kernel hang or repeated crash of the operating system. The attack requires only a valid low-privileged logon session and no special configuration, making it trivially repeatable once inside the system. No public exploit code has been identified at time of analysis, and this vulnerability has not been listed in CISA KEV.

CVE-2026-21942 Jan 20, 22:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). Supported versions that are affected are 10 and 11. [CVSS 5.0 MEDIUM]

CVE-2026-21935 Jan 20, 22:15 MEDIUM This Month

Solaris versions up to 11 contains a vulnerability that allows attackers to unauthorized creation, deletion or modification access to critical data or all O (CVSS 5.8).

CVE-2026-21928 Jan 20, 22:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The supported version that is affected is 11. [CVSS 5.3 MEDIUM]

CVE-2026-21927 Jan 20, 22:15 MEDIUM This Month

Solaris versions up to 10 contains a vulnerability that allows attackers to unauthorized creation, deletion or modification access to critical data or all O (CVSS 5.8).

CVE-2025-53070 Oct 21, 20:20 MEDIUM This Month

Denial of service in the Filesystem component of Oracle Solaris 11 allows a locally authenticated, highly privileged attacker to hang or repeatedly crash the operating system, but only when a second, different person performs an interaction that triggers the faulty filesystem operation. Because the CVSS vector (AV:L/PR:H/UI:R) requires local logon, high privilege, and mandatory third-party user interaction, realistic exploitation is largely confined to insider abuse or post-compromise scenarios, and Oracle's scope-change rating (S:C) means dependent products may also be disrupted by the outage; there is no confidentiality or integrity impact. EPSS is 0.15% (3rd percentile), there is no CISA KEV listing, and no public exploit code identified at time of analysis.

CVE-2025-53068 Oct 21, 20:20 MEDIUM This Month

Local denial of service in the kernel of Oracle Solaris 11 allows a low-privileged user who already holds a logon account on the host to trigger a hang or repeatedly crash the operating system. The flaw is rated CVSS 3.1 6.5 (AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H): exploitation is local and requires existing credentials, but no user interaction and low complexity make the trigger reliably repeatable once access is obtained, and the scope change means co-located or dependent products can be affected too. At time of analysis there is no public exploit identified and EPSS is only 0.15% (3rd percentile), so real-world urgency is driven by the need for pre-existing local access rather than by active exploitation; Oracle addresses it in its October 2025 Critical Patch Update.

CVE-2025-30700 Apr 15, 21:15 LOW PATCH Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Pluggable authentication module). Rated low severity (CVSS 3.5), this vulnerability is remotely exploitable, low attack complexity.

CVE-2025-30690 Apr 15, 21:15 HIGH PATCH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated high severity (CVSS 7.2).

CVE-2025-21551 Jan 21, 21:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: File system). Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity. No vendor patch available.

CVE-2024-21151 Jul 16, 23:15 LOW Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

CVE-2024-21105 Apr 16, 22:15 LOW Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Rated low severity (CVSS 2.0), this vulnerability is low attack complexity. No vendor patch available.

CVE-2024-21059 Apr 16, 22:15 HIGH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Rated high severity (CVSS 7.8). No vendor patch available.

CVE-2024-20999 Apr 16, 22:15 HIGH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Zones). Rated high severity (CVSS 8.2), this vulnerability is low attack complexity. No vendor patch available.

CVE-2024-20946 Jan 16, 22:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

CVE-2024-20920 Jan 16, 22:15 LOW PATCH Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated low severity (CVSS 3.8), this vulnerability is low attack complexity. This Exposure of Sensitive Information vulnerability could allow attackers to access sensitive data that should not be disclosed.

CVE-2023-22129 Oct 17, 22:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

CVE-2023-22128 Oct 17, 22:15 LOW PATCH Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated low severity (CVSS 3.1), this vulnerability is remotely exploitable, no authentication required.

CVE-2023-22023 Jul 18, 21:15 HIGH PATCH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Interface). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

CVE-2023-22003 Apr 18, 20:15 LOW Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Rated low severity (CVSS 3.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

CVE-2023-21985 Apr 18, 20:15 HIGH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Rated high severity (CVSS 7.7), this vulnerability is low attack complexity. No vendor patch available.

CVE-2023-21984 Apr 18, 20:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Libraries). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

CVE-2023-21948 Apr 18, 20:15 HIGH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Core). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. No vendor patch available.

CVE-2023-21928 Apr 18, 20:15 LOW PATCH Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: IPS repository daemon). Rated low severity (CVSS 1.8).

CVE-2023-21896 Apr 18, 20:15 HIGH PATCH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Rated high severity (CVSS 7.0). This Improper Privilege Management vulnerability could allow attackers to escalate privileges to gain unauthorized elevated access.

CVE-2023-21900 Jan 18, 00:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: NSSwitch). Rated medium severity (CVSS 4.0), this vulnerability is remotely exploitable.

CVE-2022-39417 Oct 18, 21:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

CVE-2022-39401 Oct 18, 21:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

CVE-2022-21610 Oct 18, 21:15 LOW PATCH Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: LDoms). Rated low severity (CVSS 3.3).

CVE-2022-21494 Apr 19, 21:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 4.0). No vendor patch available.

CVE-2022-21493 Apr 19, 21:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.9), this vulnerability is low attack complexity. No vendor patch available.

CVE-2022-21463 Apr 19, 21:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

CVE-2022-21461 Apr 19, 21:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

CVE-2022-21446 Apr 19, 21:15 HIGH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Rated high severity (CVSS 8.2), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2022-21416 Apr 19, 21:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Rated medium severity (CVSS 5.0), this vulnerability is low attack complexity. No vendor patch available.

CVE-2021-35589 Oct 20, 11:17 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device drivers). Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity.

CVE-2021-35549 Oct 20, 11:16 LOW Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Rated low severity (CVSS 3.9), this vulnerability is low attack complexity. No vendor patch available.

CVE-2021-35539 Oct 20, 11:16 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated medium severity (CVSS 6.5), this vulnerability is low attack complexity. No vendor patch available.

CVE-2021-2381 Jul 21, 15:15 LOW Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated low severity (CVSS 3.9), this vulnerability is low attack complexity. No vendor patch available.

CVE-2021-2192 Apr 22, 22:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity.

CVE-2021-2167 Apr 22, 22:15 HIGH PATCH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Rated high severity (CVSS 7.8), this vulnerability is low attack complexity.

CVE-2020-14818 Oct 21, 15:15 LOW Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Rated low severity (CVSS 3.0), this vulnerability is remotely exploitable. No vendor patch available.

CVE-2020-14759 Oct 21, 15:15 LOW PATCH Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated low severity (CVSS 2.5).

CVE-2020-14758 Oct 21, 15:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.6), this vulnerability is low attack complexity.

CVE-2020-14754 Oct 21, 15:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity.

CVE-2020-14724 Jul 15, 18:15 HIGH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). Rated high severity (CVSS 7.3), this vulnerability is low attack complexity. No vendor patch available.

CVE-2020-14545 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Device Driver Utility). Rated medium severity (CVSS 5.0). No vendor patch available.

CVE-2020-14542 Jul 15, 18:15 LOW Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: libsuri). Rated low severity (CVSS 3.3), this vulnerability is low attack complexity. No vendor patch available.

CVE-2020-14537 Jul 15, 18:15 MEDIUM This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Packaging Scripts). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

CVE-2020-12243 Apr 28, 19:15 HIGH POC PATCH This Week

In filter.c in slapd in OpenLDAP before 2.4.50, LDAP search filters with nested boolean expressions can result in denial of service (daemon crash). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2020-2944 Apr 15, 14:15 HIGH POC PATCH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. Public exploit code available.

CVE-2020-2927 Apr 15, 14:15 HIGH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Rated high severity (CVSS 7.8). No vendor patch available.

CVE-2020-2851 Apr 15, 14:15 HIGH POC This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Rated high severity (CVSS 7.8). Public exploit code available and no vendor patch available.

CVE-2020-2771 Apr 15, 14:15 LOW POC Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Whodo). Rated low severity (CVSS 2.5). Public exploit code available and no vendor patch available.

CVE-2020-2749 Apr 15, 14:15 LOW Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF command svcbundle). Rated low severity (CVSS 2.5). No vendor patch available.

CVE-2020-10108 Mar 12, 13:15 PyPI CRITICAL POC PATCH Act Now

In Twisted Web through 19.10.0, there was an HTTP request splitting vulnerability. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2020-7044 Jan 16, 04:15 HIGH POC PATCH This Week

In Wireshark 3.2.x before 3.2.1, the WASSP dissector could crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

CVE-2020-2696 Jan 15, 17:15 HIGH POC PATCH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Common Desktop Environment). Rated high severity (CVSS 8.8), this vulnerability is low attack complexity. Public exploit code available.

CVE-2020-2680 Jan 15, 17:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated medium severity (CVSS 6.0), this vulnerability is low attack complexity.

CVE-2020-2664 Jan 15, 17:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated medium severity (CVSS 4.6), this vulnerability is low attack complexity.

CVE-2020-2656 Jan 15, 17:15 MEDIUM POC PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). Rated medium severity (CVSS 4.4), this vulnerability is low attack complexity. Public exploit code available.

CVE-2020-2647 Jan 15, 17:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.0), this vulnerability is low attack complexity.

CVE-2020-2605 Jan 15, 17:15 HIGH PATCH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated high severity (CVSS 7.1), this vulnerability is low attack complexity.

CVE-2020-2578 Jan 15, 17:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

CVE-2020-2565 Jan 15, 17:15 HIGH PATCH This Week

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Consolidation Infrastructure). Rated high severity (CVSS 7.5).

CVE-2020-2558 Jan 15, 17:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). Rated medium severity (CVSS 5.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

CVE-2019-19553 Dec 05, 01:15 HIGH This Week

In Wireshark 3.0.0 to 3.0.6 and 2.6.0 to 2.6.12, the CMS dissector could crash. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

CVE-2019-10219 Nov 08, 15:15 Maven MEDIUM POC PATCH This Month

A vulnerability was found in Hibernate-Validator. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

CVE-2019-3008 Oct 16, 18:15 LOW PATCH Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: LDAP Library). Rated low severity (CVSS 1.8).

CVE-2019-2961 Oct 16, 18:15 LOW PATCH Monitor

Vulnerability in the Oracle Solaris product of Oracle Systems (component: SMF services & legacy daemons). Rated low severity (CVSS 3.6).

CVE-2019-2765 Oct 16, 18:15 MEDIUM PATCH This Month

Vulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystem). Rated medium severity (CVSS 5.3).

CVE-2019-16168 Sep 09, 17:15 MEDIUM PATCH This Month

In SQLite through 3.29.0, whereLoopAddBtreeIndex in sqlite3.c can crash a browser or other application because of missing validation of a sqlite_stat1 sz field, aka a "severe division by zero in the. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

CVE-2019-16056 Sep 06, 18:15 HIGH PATCH This Week

An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

CVE-2019-13565 Jul 26, 13:15 HIGH PATCH This Week

An issue was discovered in OpenLDAP 2.x before 2.4.48. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

CVE-2019-13057 Jul 26, 13:15 MEDIUM PATCH This Month

An issue was discovered in the server in OpenLDAP before 2.4.48. Rated medium severity (CVSS 4.9), this vulnerability is remotely exploitable, low attack complexity.

CVE-2019-2844 Jul 23, 23:15 HIGH PATCH This Week

Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite (subcomponent: LDAP Client Tools). Rated high severity (CVSS 8.8), this vulnerability is low attack complexity.