CVEs published in October 2015
767 vulnerabilities, 144 critical, 2 exploited.
- ibm content template catalogCross-site scripting (XSS) vulnerability in IBM Content Template Catalog 4.x before 4.1.4 for...4.3 Medium
- ibm openpages grc platformCross-site request forgery (CSRF) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2...6.8 Medium
- ibm openpages grc platformCross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1...3.5 Low
- ibm openpages grc platformIBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1...4.0 Medium
- ibm openpages grc platformIBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1...4.0 Medium
- ibm openpages grc platformIBM OpenPages GRC Platform 6.2 before IF7, 6.2.1 before 6.2.1.1 IF5, 7.0 before FP4, and 7.1...4.0 Medium
- ibm openpages grc platformCross-site scripting (XSS) vulnerability in IBM OpenPages GRC Platform 6.2 before IF7, 6.2.1...3.5 Low
- email-address project email-addressAlgorithmic complexity vulnerability in Address.pm in the Email-Address module 1.908 and earlier...7.8 High
- gollum project gollumGollum Exposure of Sensitive Information4.3 Medium
- symantec netbackup opscenterCross-site scripting (XSS) vulnerability in an application console in the server in Symantec...3.5 Low
- ajaxplorerDirectory traversal vulnerability in AjaXplorer 2.0 allows remote attackers to read arbitrary...5.0 Medium
- icz matchasnsICZ MATCHA SNS before 1.3.7 allows remote authenticated users to obtain administrative privileges...6.5 Medium
- icz matchasnsThe installer in ICZ MATCHA SNS before 1.3.7 does not properly configure the database, which...6.8 Medium
- icz matchasnsThe installer in ICZ MATCHA INVOICE before 2.5.7 does not properly configure the database, which...6.8 Medium
- icz matchasnsMultiple SQL injection vulnerabilities in ICZ MATCHA INVOICE before 2.5.7 allow remote...6.5 Medium
- basercmsSQL injection vulnerability in baserCMS before 3.0.8 allows remote authenticated users to execute...6.5 Medium
- basercmsbaserCMS Access Control Bypass6.5 Medium
- mitsubishi electric melsec fx3gThe HTTP application on Mitsubishi Electric MELSEC FX3G PLC devices before April 2015 allows...7.8 High
- omron cj2h plc, cj2m plc, cx-programmer +2 moreOmron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1...2.1 Low
- omron cx-programmerOmron CX-One CX-Programmer before 9.6 uses a reversible format for password storage in project...2.1 Low
- omron cj2h plc, cj2m plc, cx-programmer +2 moreOmron CX-One CX-Programmer before 9.6, CJ2M PLC devices before 2.1, and CJ2H PLC devices before 1...5.0 Medium
- cisco email security appliance, email security appliance firmware +1 moreCisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to...6.8 Medium
- cisco nx-osCisco NX-OS 6.0(2)U6(0.46) on N3K devices allows remote authenticated users to cause a denial of...4.0 Medium
- canarylabs trendwebBuffer overflow in Canary Labs Trend Web Server before 9.5.2 allows remote attackers to execute...7.5 High
- google androidlibutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via...9.3 High
- emc rsa certificate manager, rsa onestep +1 moreDirectory traversal vulnerability in EMC RSA OneStep 6.9 before build 559, as used in RSA...7.8 High
- google androidlibstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code...9.3 High
- datalex airline booking softwareDatalex airline booking software before 2015-09-03 allows remote attackers to read or write to...7.5 High
- gnome gdk-pixbuf, canonical ubuntu linux, opensuse +2 moreInteger overflow in the pixops_scale_nearest function in pixops/pixops.c in gdk-pixbuf before 2...6.8 Medium
- gnome gdk-pixbuf, opensuse +1 moreio-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows...6.8 Medium
- linux kernelRace condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local...6.9 Medium
- gnu binutilsihex.c in GNU Binutils before 2.26 contains a stack buffer overflow when printing bad bytes in...9.8 Critical
- mcafee vulnerability managerMultiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in...6.8 Medium
- xenlibxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using...3.6 Low
- fuseiso project fuseiso, debian linux, fedoraproject fedora +2 moreStack-based buffer overflow in the isofs_real_readdir function in isofs.c in FuseISO 20070708...7.3 High
- fuseiso project fuseiso, fedoraproject fedora +1 moreInteger overflow in the isofs_real_read_zf function in isofs.c in FuseISO 20070708 might allow...7.3 High
- google androidSampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider...10.0 High
- google androidInteger underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in...10.0 High
- google androidMultiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android...9.3 High
- google androidMultiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp...5.0 Medium
- google androidpackages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1...7.2 High
- google androidThe checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1...9.3 High
- google androidThe Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android...9.3 High
- google androidThe Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1...6.8 Medium
- google androidThe getProcessRecordLocked method in services/core/java/com/android/server/am...6.8 Medium
- google androidThe SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to (1) intercept...9.3 High
- google androidMultiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in...9.3 High
- google androidThe OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5...9.3 High
- google androidThe Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in...10.0 High
- google androidBuffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in...9.3 High
- Show moreLoading…