CVEs published in September 2015
555 vulnerabilities, 81 critical, 2 exploited.
- joomla joomla\!Cross-site scripting (XSS) vulnerability in the login module in Joomla! 3.4.x before 3.4.4 allows...4.3 Medium
- owncloud serverownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check...4.0 Medium
- owncloud serverDirectory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows...7.5 High
- sap netweaver j2ee engineSQL injection vulnerability in the BP_FIND_JOBS_WITH_PROGRAM function module in SAP NetWeaver...7.5 High
- mcafee threat intelligence exchangeThe Secondary server in Threat Intelligence Exchange (TIE) before 1.2.0 uses weak permissions for...2.1 Low
- mcafee agentDirectory traversal vulnerability in the remote log viewing functionality in McAfee Agent (MA) 5...5.0 Medium
- redhat openshiftrubygem-openshift-origin-console in Red Hat OpenShift 2.2 allows remote authenticated users to...6.5 Medium
- f5 big-ip edge gateway, big-ip advanced firewall manager, big-ip analytics +7 more +9 moreThe FastL4 virtual server in F5 BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, GTM, Link Controller,...5.0 Medium
- apple iphone osWebKit in Apple iOS before 9 mishandles "Content-Disposition: attachment" HTTP headers, which...4.3 Medium
- apple itunesThe Software Update component in Apple iTunes before 12.3 does not properly handle redirection,...4.3 Medium
- apple iphone os, watchos +1 moreThe Apple Pay component in Apple iOS before 9 allows remote terminals to obtain sensitive recent...4.3 Medium
- apple iphone os, mac os x +1 moreThe CFNetwork FTPProtocol component in Apple iOS before 9 allows remote FTP proxy servers to...5.0 Medium
- apple mac os x serverMultiple unspecified vulnerabilities in Twisted in Wiki Server in Apple OS X Server before 5.0.3...10.0 High
- apple xcodeIDE Xcode Server in Apple Xcode before 7.0 does not ensure that server traffic is encrypted,...3.3 Low
- apple xcodeIDE Xcode Server in Apple Xcode before 7.0 does not properly restrict access to repository e-mail...5.0 Medium
- apple iphone osWebKit in Apple iOS before 9 allows man-in-the-middle attackers to conduct redirection attacks by...2.6 Low
- apple iphone osThe HTML form implementation in WebKit in Apple iOS before 9 does not prevent QuickType access to...5.0 Medium
- apple iphone osSafari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and...5.0 Medium
- apple iphone osSafari in Apple iOS before 9 allows remote attackers to spoof the relationship between URLs and...4.3 Medium
- apple iphone os, mac os x, watchos +2 moreThe kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of...10.0 High
- apple iphone os, mac os x, watchos +2 morelibpthread in the kernel in Apple iOS before 9 allows local users to gain privileges or cause a...7.2 High
- apple iphone os, watchos +1 moreCFNetwork in Apple iOS before 9 relies on the hardware UID for its cache encryption key, which...2.1 Low
- apple iphone os, mac os x, watchos +2 moreThe kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of...7.2 High
- sqliteMultiple unspecified vulnerabilities in SQLite before 3.8.10.2, as used in Apple iOS before 9,...10.0 High
- apple iphone osSiri in Apple iOS before 9 allows physically proximate attackers to bypass an intended client...2.1 Low
- apple iphone os, mac os x, watchos +2 moreThe CFNetwork Cookies component in Apple iOS before 9 allows remote attackers to track users via...5.0 Medium
- apple iphone os, mac os x, watchos +2 moreThe processor_set_tasks API implementation in Apple iOS before 9 allows local users to bypass an...7.2 High
- apple iphone osCoreAnimation in Apple iOS before 9 allows attackers to bypass intended IOSurface restrictions...4.3 Medium
- apple iphone os, mac os x +1 moreXNU in the kernel in Apple iOS before 9 does not properly validate the headers of TCP packets,...5.0 Medium
- apple iphone os, mac os x, watchos +2 moredyld in Dev Tools in Apple iOS before 9 allows attackers to execute arbitrary code in a...9.3 High
- apple itunes, iphone os, mac os x +1 more +3 moreCoreText in Apple iOS before 9 and iTunes before 12.3 allows remote attackers to execute...7.5 High
- apple iphone os, mac os x, watchos +2 moreThe Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Apple iOS before 9...3.3 Low
- apple iphone os, mac os x, watchos +2 moreThe kernel in Apple iOS before 9 allows local users to gain privileges or cause a denial of...7.2 High
- apple iphone os, watchos +1 moreIOHIDFamily in Apple iOS before 9 allows attackers to execute arbitrary code in a privileged...9.3 High
- apple iphone os, mac os x, watchos +2 moreIOStorageFamily in Apple iOS before 9 does not properly initialize an unspecified data structure,...2.1 Low
- apple iphone os, mac os x, watchos +2 moreThe Audio component in Apple iOS before 9 allows remote attackers to cause a denial of service ...4.3 Medium
- apple iphone osSpringBoard in Apple iOS before 9 allows physically proximate attackers to bypass a lock-screen...2.1 Low
- apple iphone os, watchos +1 moreThe CFNetwork HTTPProtocol component in Apple iOS before 9 mishandles HSTS state, which allows...5.0 Medium
- apple iphone os, watchos +1 moreThe CFNetwork HTTPProtocol component in Apple iOS before 9 allows remote attackers to bypass the...5.0 Medium
- apple iphone osMail in Apple iOS before 9 allows remote attackers to use an address-book contact as a spoofed e...5.0 Medium
- apple iphone osThe Application Store component in Apple iOS before 9 allows remote attackers to cause a denial...4.3 Medium
- apple iphone os, watchos +1 moreApple iOS before 9 allows attackers to discover the e-mail address of a player via a crafted Game...4.3 Medium
- apple iphone os, mac os x +1 moreThe convenience initializer in the Multipeer Connectivity component in Apple iOS before 9 does...2.1 Low
- apple iphone osAppleKeyStore in Apple iOS before 9 allows physically proximate attackers to reset the count of...2.1 Low
- apple iphone os, watchos +1 moreIOAcceleratorFamily in Apple iOS before 9 allows local users to gain privileges or cause a denial...7.2 High
- apple iphone os, mac os x, watchos +2 moreThe Disk Images component in Apple iOS before 9 allows local users to gain privileges or cause a...7.2 High
- apple iphone os, watchos +1 moreIOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a...9.3 High
- apple iphone os, watchos +1 moreIOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a...9.3 High
- apple iphone os, watchos +1 moreIOKit in the kernel in Apple iOS before 9 allows attackers to execute arbitrary code in a...9.3 High
- apple iphone os, watchos +1 moreIOMobileFrameBuffer in Apple iOS before 9 allows local users to gain privileges or cause a denial...7.2 High
- Show moreLoading…