CVEs published in October 2015
767 vulnerabilities, 144 critical, 2 exploited.
- xscreensaver project xscreensaver, canonical ubuntu linux +1 moredriver/subprocs.c in XScreenSaver before 5.34 does not properly perform an internal consistency...2.1 Low
- openstack novaOpenStack Compute (Nova) allows remote attackers to bypass intended restriction5.0 Medium
- adobe shockwave playerAdobe Shockwave Player before 12.2.1.171 allows attackers to execute arbitrary code or cause a...10.0 High
- epson network utilityEPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which...6.9 Medium
- ibm websphere portalIBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0...5.0 Medium
- infinite automation systems mango automationUnrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x...6.5 Medium
- infinite automation systems mango automationSQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0...6.5 Medium
- infinite automation systems mango automationInfinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different...5.0 Medium
- infinite automation systems mango automationInfinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote...6.5 Medium
- infinite automation systems mango automationInfinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote...4.3 Medium
- siemens ruggedcom rugged operating systemSiemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by...3.3 Low
- infinite automation systems mango automationCross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x...3.5 Low
- infinite automation systems mango automationCross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and...6.8 Medium
- rockwellautomation micrologix 1100 firmware, micrologix 1400 firmware +1 moreAllen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003...7.8 High
- rockwellautomation micrologix 1100 firmware, micrologix 1400 firmware +1 moreAllen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003...4.0 Medium
- rockwellautomation micrologix 1100 firmware, micrologix 1400 firmware +1 moreStack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400...10.0 High
- rockwellautomation micrologix 1100 firmware, micrologix 1400 firmware +1 moreCross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100...4.3 Medium
- rockwellautomation micrologix 1100 firmware, micrologix 1400 firmware +1 moreSQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400...6.5 Medium
- tibco spotfire server, spotfire analytics platform for aws +1 moreSpotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4...5.0 Medium
- tibco spotfire server, spotfire analytics platform for aws +1 moreSpotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4...4.0 Medium
- janitza umg 508, umg 509, umg 511 +2 more +4 moreJanitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes...5.0 Medium
- janitza umg 508, umg 509, umg 511 +2 more +4 moreThe web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN...10.0 High
- janitza umg 508, umg 509, umg 511 +2 more +4 moreThe debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require...7.5 High
- janitza umg 508, umg 509, umg 511 +2 more +4 moreMultiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509,...4.3 Medium
- janitza umg 508, umg 509, umg 511 +2 more +4 moreJanitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive...5.0 Medium
- janitza umg 508, umg 509, umg 511 +2 more +4 moreThe FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which...7.5 High
- janitza umg 508, umg 509, umg 511 +2 more +4 moreCross-site request forgery (CSRF) vulnerability on Janitza UMG 508, 509, 511, 604, and 605...6.8 Medium
- phpmyadminphpMyAdmin allows remote attackers to spoof content via the url parameter5.0 Medium
- ntpDirectory traversal vulnerability in the save_config function in ntpd in ntp_control.c in NTP...6.5 Medium
- sap hanaThe index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute...7.5 High
- redhat jboss enterprise application platform, jboss wildfly application server +1 moreThe Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly ...5.0 Medium
- redhat jboss enterprise application platform, jboss wildfly application server +1 moreCross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat...6.8 Medium
- redhat jboss enterprise application platform, jboss wildfly application server +1 moreThe Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly ...4.3 Medium
- afnetworking project afnetworkingThe default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the...4.3 Medium
- cisco asr 5000 softwareThe Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices...5.0 Medium
- lockon ec-cubeCross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows...5.1 Medium
- canonical apport, ubuntu linux +1 moreApport privilege escalation through Python module imports7.4 High
- colorbox project colorboxThe Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with...3.5 Low
- owncloud desktop client, qt +1 moreownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call...5.1 Medium
- numara asset managerHP Asset Manager 9.40 and 9.41 before 9.41.11103 P4-rev1 and 9.50 before 9.50.11925 P3 allows...2.1 Low
- ibm cognos disclosure managementIBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the...9.3 High
- ibm integration bus, websphere message broker +1 moreIBM WebSphere Message Broker 8 before 8.0.0.6 and Integration Bus 9 before 9.0.0.4 do not check...3.2 Low
- ibm general parallel file system, spectrum scale +1 moreIBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and...2.1 Low
- ibm general parallel file system, spectrum scale +1 moreIBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and...7.2 High
libxml2Debianlibxml2 - regression updateNo score- libpng, canonical ubuntu linux, debian linux +7 more +9 moreThe png_convert_to_rfc1123 function in png.c in libpng 1.0.x before 1.0.64, 1.2.x before 1.2.54,...5.0 Medium
- openstack image registry and delivery service \(glance\)OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service6.8 Medium
- openstack novaOpenStack Compute (nova) allows remote authenticated users to cause a denial of service6.8 Medium
lxdmMageiaUpdated lxdm packages fix security vulnerabilityNo scorersyncMageiaUpdated rsync packages fix security vulnerabilityNo score- Show moreLoading…