CVEs published in October 2015
767 vulnerabilities, 144 critical, 2 exploited.
- cisco telepresence video communication server softwareThe process-management implementation in Cisco TelePresence Video Communication Server (VCS)...6.9 Medium
- cisco ucs b-series blade server softwareCisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local...4.9 Medium
- vmware vcenter serverThe JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6...10.0 High
- vmware vcenter servervpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote...5.0 Medium
- cisco iosThe RADIUS client implementation in Cisco IOS 15.4(3)M2.2, when a shared RADIUS secret is...6.3 Medium
- rsa web threat detectionEMC RSA Web Threat Detection before 5.1 SP1 allows local users to obtain root privileges by...7.2 High
- rsa web threat detectionEMC RSA Web Threat Detection before 5.1 SP1 stores a cleartext AnnoDB password in a configuration...4.0 Medium
- optipng project optipng, canonical ubuntu linux +1 moregifread.c in gif2png, as used in OptiPNG before 0.7.6, allows remote attackers to cause a denial...5.5 Medium
- optipng project optipng, canonical ubuntu linux +1 moreUse-after-free vulnerability in OptiPNG 0.6.4 allows remote attackers to execute arbitrary code...8.8 High
- unzip project unzip, canonical ubuntu linux, debian linux +2 moreInfo-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (infinite loop) via empty...4.3 Medium
- unzip project unzip, canonical ubuntu linux, debian linux +2 moreInfo-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over...6.8 Medium
- network applied communication laboratory shimane prefecture cmsSQL injection vulnerability in Network Applied Communication Laboratory Pref Shimane CMS 2.x...6.5 Medium
- dojotoolkit dojoCross-Site Scripting in dojo4.3 Medium
- loenshotel phprechnungSQL injection vulnerability in list.php in phpRechnung before 1.6.5 allows remote authenticated...6.5 Medium
- ibm license metric toolIBM License Metric Tool 9 before 9.2.1.0 and Endpoint Manager for Software Use Analysis 9 before...4.0 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreLibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote...6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger overflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 allows remote...6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreInteger underflow in LibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2, when the...6.8 Medium
- apache openoffice, libreoffice, canonical ubuntu linux +1 more +3 moreLibreOffice before 4.4.5 and Apache OpenOffice before 4.1.2 uses the stored LinkUpdateMode...4.3 Medium
isodumperMageiaUpdated isodumper package fixes command injectionNo score- php, apple mac os x +1 moreOff-by-one error in the phar_parse_zipfile function in ext/phar/zip.c in PHP before 5.5.30 and 5...6.8 Medium
- php, apple mac os x +1 moreThe phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14...6.8 Medium
- konicaminolta ftp utilityBuffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary...7.5 High
- konicaminolta ftp utilityBuffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary...7.5 High
- zohocorp manageengine opmanagerPGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote...9.0 High
- zohocorp manageengine opmanagerZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin"...9.0 High
- apple mac os xMail in Apple OS X before 10.11 does not properly recognize user preferences, which allows...5.0 Medium
- apple mac os xlibxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for...5.0 Medium
- apple iphone osApple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which...2.1 Low
- apple watchos, icu-project international components for unicode, apple mac os x +2 moreUnspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in...10.0 High
- apple watch osGasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of...7.2 High
- apple watch osGasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of...7.2 High
- netbsd tnftpdThe glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11,...5.0 Medium
- apple mac os xApple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly,...5.0 Medium
- apple mac os xThe EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify...4.7 Medium
- apple mac os xHeimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks...6.8 Medium
- apple mac os xThe debugging feature in the kernel in Apple OS X before 10.11 mismanages state, which allows...4.9 Medium
- apple mac os xThe Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash...2.1 Low
- apple mac os xThe protected range register in the EFI component in Apple OS X before 10.11 has an incorrect...7.1 High
- apple mac os xThe Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by...4.6 Medium
- apple mac os xThe X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the...4.3 Medium
- apple mac os xSMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory...2.1 Low
- apple mac os xThe SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain...7.2 High
- apple mac os xIOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of...7.2 High
- apple mac os xrsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root...7.2 High
- apple mac os xThe Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain...7.2 High
- apple mac os xThe TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts...10.0 High
- apple mac os xThe Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for...3.3 Low
- apple mac os xThe bidirectional text-display and text-selection implementations in Terminal in Apple OS X...5.0 Medium
- apple mac os xNotes in Apple OS X before 10.11 misparses links, which allows local users to obtain sensitive...2.1 Low
- Show moreLoading…