Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
October

CVEs published in October 2015

767 vulnerabilities, 144 critical, 2 exploited.

Known exploitedIn KEVPublic exploitFix available

apple watchos, iphone os, mac os x +2 moreFontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote...CVE-2015-59426.8 MediumOctober 23, 2015
apple iphone os, mac os x +1 moreThe Accelerate Framework component in Apple iOS before 9.1 and OS X before 10.11.1, when multi...CVE-2015-59406.8 MediumOctober 23, 2015
apple watchos, iphone os, mac os x +2 moreImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote...CVE-2015-59396.8 MediumOctober 23, 2015
apple mac os xImageIO in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a...CVE-2015-59386.8 MediumOctober 23, 2015
apple watchos, iphone os, mac os x +2 moreImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote...CVE-2015-59376.8 MediumOctober 23, 2015
apple watchos, iphone os, mac os x +2 moreImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote...CVE-2015-59366.8 MediumOctober 23, 2015
apple watchos, iphone os, mac os x +2 moreImageIO in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote...CVE-2015-59356.8 MediumOctober 23, 2015
apple mac os xAudio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a...CVE-2015-59346.8 MediumOctober 23, 2015
apple mac os xAudio in Apple OS X before 10.11.1 allows remote attackers to execute arbitrary code or cause a...CVE-2015-59336.8 MediumOctober 23, 2015
apple mac os xThe kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an...CVE-2015-5932Public exploit7.2 HighOctober 23, 2015
apple itunes, safari +1 moreWebKit, as used in Apple Safari before 9.0.1 and iTunes before 12.3.1, allows remote attackers to...CVE-2015-59316.8 MediumOctober 23, 2015
apple itunes, safari, iphone os +2 moreWebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows...CVE-2015-59306.8 MediumOctober 23, 2015
apple itunes, safari, iphone os +2 moreWebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows...CVE-2015-59296.8 MediumOctober 23, 2015
apple watchos, iphone os, mac os x +2 moreFontParser in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows remote...CVE-2015-59276.8 MediumOctober 23, 2015
apple watchos, iphone os, mac os x +2 moreThe CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1...CVE-2015-59266.8 MediumOctober 23, 2015
apple watchos, iphone os, mac os x +2 moreThe CoreGraphics component in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1...CVE-2015-59256.8 MediumOctober 23, 2015
apple iphone os, mac os x +1 moreThe OpenGL implementation in Apple iOS before 9.1 and OS X before 10.11.1 allows remote attackers...CVE-2015-59246.8 MediumOctober 23, 2015
apple mac os xApple Mac EFI before 2015-002, as used in OS X before 10.11.1 and other products, mishandles...CVE-2015-70357.5 HighOctober 23, 2015
apple mac os x serverThe Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header...CVE-2015-70315.0 MediumOctober 23, 2015
apple xcodeThe Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has...CVE-2015-70307.5 HighOctober 23, 2015
apple iphone osThe Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status...CVE-2015-70224.3 MediumOctober 23, 2015
apple itunes, iphone os, mac os x +2 moreCoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote...CVE-2015-70177.5 HighOctober 23, 2015
apple iphone osWebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or...CVE-2015-70056.8 MediumOctober 23, 2015
apple iphone osThe kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app.CVE-2015-70047.1 HighOctober 23, 2015
apple iphone osNotification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings,...CVE-2015-70002.1 LowOctober 23, 2015
apple iphone osThe OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows...CVE-2015-69995.0 MediumOctober 23, 2015
apple iphone os, watchos +1 moreThe X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the...CVE-2015-69974.3 MediumOctober 23, 2015
apple itunes, iphone os, mac os x +2 moreCoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote...CVE-2015-69927.5 HighOctober 23, 2015
apple iphone oscom.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows...CVE-2015-69869.3 HighOctober 23, 2015
apple iphone osWebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or...CVE-2015-69826.8 MediumOctober 23, 2015
apple iphone osWebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or...CVE-2015-69816.8 MediumOctober 23, 2015
apple iphone os, watchos +1 moreGasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged...CVE-2015-69799.3 HighOctober 23, 2015
apple itunes, iphone os, mac os x +2 moreCoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote...CVE-2015-69757.5 HighOctober 23, 2015
cakephp Debiancakephp - security updateDLA-333-1Fix availableNo scoreOctober 23, 2015
xmlsoft libxml2, apple iphone os, mac os x +6 more +8 moreThe xmlParseConditionalSections function in parser.c in libxml2 does not properly skip...CVE-2015-7942Fix available6.8 MediumOctober 23, 2015
linux kernelThe dgnc_mgmt_ioctl function in drivers/staging/dgnc/dgnc_mgmt.c in the Linux kernel through 4.3...CVE-2015-7885Fix available2.3 LowOctober 23, 2015
linux kernelThe vivid_fb_ioctl function in drivers/media/platform/vivid/vivid-osd.c in the Linux kernel...CVE-2015-7884Fix available2.3 LowOctober 23, 2015
apple itunes, safari, iphone os +2 moreWebKit, as used in Apple iOS before 9.1, Safari before 9.0.1, and iTunes before 12.3.1, allows...CVE-2015-5928Fix available6.8 MediumOctober 23, 2015
ntp, debian linux, netapp clustered data ontap +4 more +6 moreCrypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote...CVE-2015-7871Fix availableEPSS 81.8%9.8 CriticalOctober 22, 2015
ntp, debian linux, netapp clustered data ontap +6 more +8 moreThe decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7855Public exploitFix availableEPSS 31.2%6.5 MediumOctober 22, 2015
ntp, netapp clustered data ontap, data ontap +3 more +5 moreThe datalen parameter in the refclock driver in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77...CVE-2015-7853Fix availableEPSS 11.8%9.8 CriticalOctober 22, 2015
ntp, debian linux, netapp clustered data ontap +10 more +12 morentpq in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a...CVE-2015-7852Fix availableEPSS 12.3%5.9 MediumOctober 22, 2015
ntp, debian linux, netapp clustered data ontap +4 more +6 morentpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to...CVE-2015-7850Fix available6.5 MediumOctober 22, 2015
ntp, citrix xenserver, netapp clustered data ontap +5 more +7 moreThe rate limiting feature in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote...CVE-2015-7705Fix availableEPSS 12.2%9.8 CriticalOctober 22, 2015
ntp, citrix xenserver, debian linux +11 more +13 moreThe ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to...CVE-2015-7704Fix availableEPSS 10.7%7.5 HighOctober 22, 2015
ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77...CVE-2015-7703Fix available7.5 HighOctober 22, 2015
ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7702Fix available6.5 MediumOctober 22, 2015
ntp, debian linux, netapp clustered data ontap +9 more +11 moreMemory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4...CVE-2015-7701Fix available7.5 HighOctober 22, 2015
ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7692Fix available7.5 HighOctober 22, 2015
ntp, debian linux, netapp clustered data ontap +9 more +11 moreThe crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows...CVE-2015-7691Fix available7.5 HighOctober 22, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open