CVEs published in November 2015
382 vulnerabilities, 76 critical, 2 exploited.
- google androidmediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute...10.0 High
- google androidmediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows...10.0 High
- google androidTelephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and...5.8 Medium
- google androidBluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send...5.1 Medium
- google androidlibmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain...9.3 High
- google androidmediaserver in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to...5.0 Medium
- google androidlibstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain...10.0 High
- google androidlibutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to...10.0 High
- google androidmediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers...10.0 High
- horde groupware, debian linux, horde application framework +2 moreMultiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware...6.8 Medium
exfat-utilsMageiaUpdated exfat-utils package fixes security vulnerabilitiesNo score- mediawikiMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 uses the thumbnail...5.0 Medium
- mediawikiMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not properly...4.0 Medium
- mediawikiMediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x before 1.25.3 does not throttle file...6.8 Medium
- mediawikiThe chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x...6.8 Medium
- mediawikiThe chunked upload API (ApiUpload) in MediaWiki before 1.23.11, 1.24.x before 1.24.4, and 1.25.x...3.5 Low
- samsung smartviewerThe rtsp_getdlsendtime method in the CNC_Ctrl control in Samsung SmartViewer allows remote...6.8 Medium
- samsung smartviewerSamsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to...6.8 Medium
- fortinet fortimanager firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in...4.3 Medium
- fortinet fortimanager firmwareMultiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in...4.3 Medium
- polarssl, trustedfirmware mbed tls, debian linux +2 more +4 moreHeap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before...6.8 Medium
- oxwallMultiple cross-site request forgery (CSRF) vulnerabilities in Oxwall before 1.8 allow remote...6.8 Medium
- wp-championship project wp-championshipMultiple SQL injection vulnerabilities in cs_admin_users.php in the wp-championship plugin 5.8...7.5 High
- apache ambariApache Ambari Open Redirect5.8 Medium
- apache ambariApache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain...6.5 Medium
- apache ambariCross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote...3.5 Low
- apache ambariApache Ambari SSRF Vulnerability5.5 Medium
libvdpauDebianlibvdpau - regression updateNo score- xmlsoft libxml2, apple iphone os, mac os x +4 more +6 moreThe xz_decomp function in xzlib.c in libxml2 2.9.1 does not properly detect compression errors,...2.6 Low
elasticsearchDebianelasticsearch - end of lifeNo score- openafsrx/rx.c in OpenAFS 1.5.75 through 1.5.78, 1.6.x before 1.6.15, and 1.7.x before 1.7.33 does not...5.0 Medium
- openafs, debian linux +1 morerx/rx.c in OpenAFS before 1.6.15 and 1.7.x before 1.7.33 does not properly initialize the padding...5.0 Medium