CVEs published in October 2015
767 vulnerabilities, 144 critical, 2 exploited.
- apple mac os xThe Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain...7.2 High
- apple mac os xCross-site scripting (XSS) vulnerability in Notes in Apple OS X before 10.11 allows local users...2.1 Low
- apple mac os xIOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of...7.2 High
- apple mac os xIOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of...7.2 High
- apple mac os xIOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of...7.2 High
- apple mac os xThe debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain...2.1 Low
- apple mac os xIOHIDFamily in Apple OS X before 10.11 allows attackers to execute arbitrary code in a privileged...9.3 High
- apple mac os xIOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout...4.3 Medium
- apple mac os xIOAudioFamily in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory...2.1 Low
- apple mac os xThe backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain...2.1 Low
- apple mac os xAirScan in Apple OS X before 10.11 allows man-in-the-middle attackers to obtain eSCL packet...3.3 Low
- apple mac os xThe filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to...6.8 Medium
- apple mac os xApple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs,...4.3 Medium
- apple mac os xThe Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked...7.2 High
- apple mac os xThe Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain...7.2 High
- apple safari, opensuse leap +1 moreThe API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification...4.3 Medium
- apple safariThe Safari Extensions implementation in Apple Safari before 9 does not require user confirmation...10.0 High
- apple mac os xThe Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled,...1.9 Low
- audiofile, canonical ubuntu linux, fedoraproject fedora +2 moreBuffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File...8.8 High
- libav, opensuse leap, ubuntu +2 moreThe ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote...6.5 Medium
- postgresql, canonical ubuntu linux, debian linux +2 moreMultiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10...6.4 Medium
- postgresqlThe crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x...6.4 Medium
- cisco wireless lan controllerCisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19)...6.1 Medium
- cisco unified communications manager im and presence serviceThe REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows...5.0 Medium
- cybozu garoonCybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which...7.0 High
- gnu gccThe std::random_device class in libstdc++ in the GNU Compiler Collection (aka GCC) before 4.9.4...5.0 Medium
- google androidmediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to...5.0 Medium
- google androidmediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to gain...9.3 High
- google androidlibstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary...10.0 High
- cisco vpn clientCisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows...7.2 High
- sqliteSQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges...6.8 Medium
- google androidThe Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1...9.3 High
- google androidmediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process...5.0 Medium
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidmediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted...9.3 High
- google androidMedia Player Framework in Android before 5.1.1 LMY48T allows attackers to gain privileges via a...9.3 High
- google androidMedia Projection in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to...4.3 Medium
- google androidSkia, as used in Android before 5.1.1 LMY48T, allows remote attackers to execute arbitrary code...10.0 High
- google androidlibutils in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or...10.0 High
- google androidThe Sonivox components in Android before 5.1.1 LMY48T allow remote attackers to execute arbitrary...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- google androidlibstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code...10.0 High
- Show moreLoading…