CVEs published in October 2015
767 vulnerabilities, 144 critical, 2 exploited.
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidThe Runtime subsystem in Android before 5.1.1 LMY48T allows attackers to gain privileges via a...9.3 High
- google androidmediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process...5.0 Medium
- google androidBluetooth in Android before 5.1.1 LMY48T allows attackers to remove stored SMS messages via a...6.4 Medium
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- zend framework, debian linux +1 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc9.8 Critical
- doctrine-project annotations, cache, common +7 more +9 moreZendframework Local file disclosure via XXE injection in Zend_XmlRpc7.8 High
- spice project spice, canonical ubuntu linux, debian linux +6 more +8 moreHeap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to...7.1 High
- linux kernelThe sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect...4.7 Medium
lxcUbuntulxc regressionNo score- arkeia western digital arkeiaThe arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier...10.0 High
- 4homepages 4imagesCross-site scripting (XSS) vulnerability in 4images 1.7.11 and earlier allows remote attackers to...4.3 Medium
- igniterealtime openfireIgnite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access...6.5 Medium
- juniper pulse connect secureThe Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse)...3.5 Low
- juniper pulse connect secureThe Secure Meeting (Pulse Collaboration) in Pulse Connect Secure (formerly Juniper Junos Pulse)...5.0 Medium
- glpi-project glpiGLPI before 0.85.3 allows remote authenticated users to create super-admin accounts by leveraging...4.0 Medium
- glpi-project glpiUnrestricted file upload in GLPI before 0.85.3 allows remote authenticated users to execute...9.0 High
- freeswitchHeap-based buffer overflow in the parse_string function in libs/esl/src/esl_json.c in FreeSWITCH...7.5 High
- anchorcms anchor cmssystem/session/drivers/cookie.php in Anchor CMS 0.9.x allows remote attackers to conduct PHP...7.5 High
firefoxUbuntufirefox regressionNo score- pythonUntrusted search path vulnerability in python.exe in Python through 3.5.0 on Windows allows local...7.2 High
- ibm emptoris sourcingIBM Emptoris Sourcing 10.0.2.0 before iFix6, 10.0.2.2 before iFix11, 10.0.2.3, 10.0.2.5 before...4.0 Medium
- ibm b2b advanced communicationsIBM Multi-Enterprise Integration Gateway 1.x through 1.0.0.1 and B2B Advanced Communications 1.0...4.3 Medium
- ibm sterling b2b integratorIBM Sterling B2B Integrator 5.2 before 5020500_8 allows remote authenticated users to conduct...3.5 Low
- ibm b2b advanced communicationsCross-site scripting (XSS) vulnerability in IBM Multi-Enterprise Integration Gateway 1.x through...4.3 Medium
- ibm emptoris, emptoris program management +1 moreCross-site scripting (XSS) vulnerability in IBM Emptoris Strategic Supply Management Platform and...3.5 Low
- ibm maximo asset management, smartcloud control desk, change and configuration management database +10 more +12 moreSQL injection vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5...6.5 Medium
- ibm maximo asset management, smartcloud control desk, change and configuration management database +10 more +12 moremaximouiweb/webmodule/webclient/utility/merlin.jsp in IBM Maximo Asset Management 7.1 through 7.1...4.0 Medium
- ibm urbancode deployIBM UrbanCode Deploy 6.0 and 6.0.1.x before 6.0.1.10, 6.1.1.x before 6.1.1.8, and 6.1.2 writes...6.0 Medium
- ibm maximo asset management, smartcloud control desk, change and configuration management database +10 more +12 moreCross-site scripting (XSS) vulnerability in IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5...3.5 Low
- ibm emptoris program management, emptoris supplier lifecycle management, emptoris strategic supply management +2 moreCross-site scripting (XSS) vulnerability in IBM Emptoris Supplier Lifecycle Management and...4.3 Medium
- ibm qradar security information and event managerIBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote...9.0 High
- ibm websphere extreme scaleCross-site scripting (XSS) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and...3.5 Low
- ibm websphere extreme scaleIBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 has an improper account...5.0 Medium
- ibm websphere extreme scaleSession fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1...4.3 Medium
- ibm websphere extreme scaleCRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before...4.3 Medium
- ibm websphere extreme scaleIBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 improperly performs...2.1 Low
- ibm websphere extreme scaleCross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0...6.0 Medium
- ibm websphere extreme scaleIBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 does not set the secure...4.3 Medium
- ibm qradar security information and event managerUnspecified vulnerability in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5...9.0 High
- ibm qradar security information and event managerThe xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2...9.0 High
- ibm tivoli storage flashcopy manager, tivoli storage manager for virtual environments +1 moreCross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments:...3.5 Low
- ibm urbancode buildCross-site scripting (XSS) vulnerability in the Projects page in IBM UrbanCode Build 6.1.x before...3.5 Low
- ibm tivoli common reportingCross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and...3.5 Low
- ibm maximo asset management, smartcloud control desk, change and configuration management database +10 more +12 moreIBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0 before...5.0 Medium
- ibm maximo asset management, smartcloud control desk, change and configuration management database +10 more +12 moreIBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before...2.1 Low
- dotclearCross-site scripting (XSS) vulnerability in Dotclear before 2.8.1 allows remote attackers to...4.3 Medium
- ibm business process managerCross-site scripting (XSS) vulnerability in IBM Business Process Manager (BPM) 8.0.x through 8.0...3.5 Low
- ibm content navigatorCross-site scripting (XSS) vulnerability in IBM Content Navigator 2.0.2 before 2.0.2-ICN-FP007...3.5 Low
- Show moreLoading…