CVEs published in October 2015
767 vulnerabilities, 144 critical, 2 exploited.
- airdroidThe SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents,...4.3 Medium
- emc sourceone email supervisorEMC SourceOne Email Supervisor before 7.2 uses hardcoded encryption keys, which makes it easier...6.8 Medium
- emc sourceone email supervisorEMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs,...7.5 High
- emc sourceone email supervisorCross-site scripting (XSS) vulnerability in Reviewer in EMC SourceOne Email Supervisor before 7.2...4.3 Medium
- emc sourceone email supervisorReviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to...5.0 Medium
- adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207...10.0 High
- adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207...10.0 High
- adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207...10.0 High
- adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207...10.0 High
- adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207...10.0 High
- adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207...10.0 High
- adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207...10.0 High
- adobe air, air sdk, flash player +1 more +3 moreUse-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207...10.0 High
- avast antivirusDirectory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or...6.4 Medium
- hp smart profile server data analytics layerMultiple cross-site scripting (XSS) vulnerabilities in HP Smart Profile Server Data Analytics...4.3 Medium
tzdataDebiantzdata - new upstream versionNo score- owncloud serverThe files_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1...9.0 High
- owncloud, owncloud server +1 moreThe virtual filesystem in ownCloud Server before 6.0.9, 7.0.x before 7.0.7, and 8.0.x before 8.0...4.0 Medium
- owncloud, owncloud server +1 moreCross-site scripting (XSS) vulnerability in the activity application in ownCloud Server before 7...3.5 Low
- microsoft windows, owncloud, owncloud server +2 moreDirectory traversal vulnerability in the routing component in ownCloud Server before 7.0.6 and 8...10.0 High
- adobe flash playerAdobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11...10.0 High
- adobe flash playerAdobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11...10.0 High
- opennmsOpenNMS has a default password of rtc for the rtc account, which makes it easier for remote...10.0 High
- font project fontAbsolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress...4.0 Medium
- genetechsolutions pie registerMultiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register...6.5 Medium
- genetechsolutions pie registerCross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register...4.3 Medium
- veeam backup \& replicationVeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0 update 3 stores local administrator...2.1 Low
- jenkins, redhat openshift +1 moreJenkins allows for Privilege Escalation by Remote Authenticated Users7.5 High
- jenkins, redhat openshift +1 moreJenkins allows Cross-Site Scripting (XSS)4.3 Medium
- jenkins, redhat openshift +1 moreJenkins Cross-site Scripting vulnerability4.3 Medium
- jenkins, redhat openshift +1 moreJenkins does not Restrict Reserved Names Allowing for Privilege Escalation4.6 Medium
- jenkins, redhat openshift +1 moreJenkins Vulnerable to Denial of Service (DoS)3.5 Low
- jenkins, redhat openshift +1 moreDirectory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote...3.5 Low
- jenkins, redhat openshift +1 moreJenkins allows for Privilege Escalation by Remote Authenticated Users6.5 Medium
- juniper junosJ-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers...7.8 High
- juniper junosJuniper Junos OS before 11.4R12-S4, 12.1X44 before 12.1X44-D41, 12.1X46 before 12.1X46-D26, 12...7.8 High
- juniper junosJuniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3...5.0 Medium
- mozilla firefoxThe fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the...6.8 Medium
- cisco asr 5000 softwareCisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote...5.0 Medium
- cisco application policy infrastructure controllerCisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain...4.6 Medium
- qnap qtsDirectory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2...9.3 High
- extplorerCross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers...6.8 Medium
- ibm aix, vios +1 morenetstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows...6.9 Medium
- linux kernelThe Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests...7.8 High
- miniupnp project miniupnpc, canonical ubuntu linux, debian linux +2 more +4 moreBuffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka...6.8 Medium
- click project click, canonical ubuntu linux +1 moreclick/install.py in click does not require files in package filesystem tarballs to start with ./ ...9.8 Critical
- solarwinds log and event managerThe command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0...7.5 High
- solarwinds log and event managerSolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on...7.5 High
- solarwinds storage managerProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload...10.0 High
- sap businessobjects, businessobjects edge, businessobjects xi +2 moreSAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1...10.0 High
- Show moreLoading…