CVEs published in October 2015
767 vulnerabilities, 144 critical, 2 exploited.
- cisco firesight system software Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.4... 3.5 Low
- cisco firesight system software Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.3... 3.5 Low
- cisco ios The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices... 5.0 Medium
- qolsys iq panel Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates... 9.3 High
- qolsys iq panel Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote... 9.3 High
- html-scrubber project html-scrubber Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when... 2.6 Low
- busybox, canonical ubuntu linux, debian linux +2 more huft_build in archival/libarchive/decompress_gunzip.c in BusyBox before 1.27.2 misuses a pointer,... 5.5 Medium
- sap 3d visual enterprise viewer SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a... 6.8 Medium
- sap 3d visual enterprise viewer SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a... 6.8 Medium
- sap 3d visual enterprise viewer Multiple buffer overflows in SAP 3D Visual Enterprise Viewer (VEV) allow remote attackers to... 6.8 Medium
- xen The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post... 2.1 Low
- xen The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is... 4.9 Medium
- xen Race condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier... 4.7 Medium
- xen Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting... 2.1 Low
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 more The build_principal_va function in lib/krb5/krb/bld_princ.c in MIT Kerberos 5 (aka krb5) before 1... 4.0 Medium
- mit kerberos 5, canonical ubuntu linux, debian linux +5 more +7 more lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate... 7.1 High
- mit kerberos 5, canonical ubuntu linux, debian linux +6 more +8 more lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an... 5.0 Medium
- cisco unified communications domain manager, hosted collaboration solution +1 more Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for... 4.3 Medium
- cisco asr 5000 software Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices with software 19.1.0.61559 and... 5.0 Medium
- cisco prime service catalog SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows... 6.5 Medium
- cisco secure access control server Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco... 4.3 Medium
- cisco secure access control server The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server ... 4.0 Medium
- cisco secure access control server The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote... 4.0 Medium
- cisco secure access control server Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15)... 4.3 Medium
- cisco secure access control server SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5... 6.5 Medium
- cisco asa cx context-aware security software The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11... 4.0 Medium
- joomla joomla\! The com_content component in Joomla! 3.x before 3.4.5 does not properly check ACLs, which allows... 5.0 Medium
- joomla joomla\! The com_contenthistory component in Joomla! 3.2 before 3.4.5 does not properly check ACLs, which... 5.0 Medium
- joomla joomla\! SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute... 7.5 High
- joomla joomla\! SQL injection vulnerability in the getListQuery function in administrator/components... 7.5 High
- joomla joomla\! SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute... 7.5 High
- owncloud client ownCloud iOS app before 3.4.4 does not properly switch state between multiple instances, which... 5.0 Medium
- kallithea-scm kallithea Kallithea CRLF injection vulnerability 5.0 Medium
- xen Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain... 2.1 Low
- xen Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with... 4.9 Medium
- xen The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate... 7.2 High
- fedoraproject sssd Memory leak in the Privilege Attribute Certificate (PAC) responder plugin (sssd_pac_plugin.so) in... 6.8 Medium
- medicomp medcin engine The AddUserFinding implementation in Medicomp MEDCIN Engine 2.22.20153.x before 2.22.20153.226... 7.5 High
- techno project japan enisys gw Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to bypass intended access... 5.0 Medium
- techno project japan enisys gw Cross-site scripting (XSS) vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows... 4.3 Medium
- techno project japan enisys gw Techno Project Japan Enisys Gw before 1.4.1 allows remote authenticated users to write to... 6.5 Medium
- techno project japan enisys gw SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote... 7.5 High
- ibm domino Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4... 7.5 High
- ibm websphere portal IBM WebSphere Portal 8.5.0 before CF08 allows remote attackers to bypass intended access... 6.8 Medium
- ibm domino Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4... 7.5 High
- medicomp medcin engine Multiple stack-based buffer overflows in Medicomp MEDCIN Engine 2.22.20142.166 might allow remote... 6.8 Medium
- medicomp medcin engine The AddUserFinding add_userfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226... 6.8 Medium
- medicomp medcin engine Heap-based buffer overflow in the QualifierList retrieve_qualifier_list function in Medicomp... 6.8 Medium
- medicomp medcin engine Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow... 6.8 Medium
-
wordpressDebian wordpress - regression update No score - Show olderLoading…