Skip to content
OpenAdvisories

Archive

1 October 2015

Vulnerabilities first published on this day (UTC), newest first.

← September 2015 2015 / October /1 November 2015 →
  1. 136
  2. 27
  3. 324
  4. 417
  5. 520
  6. 630
  7. 7 
  8. 83
  9. 949
  10. 10 
  11. 114
  12. 1216
  13. 133
  14. 14109
  15. 1522
  16. 1621
  17. 17 
  18. 1823
  19. 1918
  20. 20 
  21. 21136
  22. 22 
  23. 2371
  24. 24 
  25. 2511
  26. 2624
  27. 279
  28. 2826
  29. 2922
  30. 3019
  31. 316
All Critical High Medium Low Exploited only Public exploit

36 results · Feed

  • Unscored —
    CVE-2015-7236

    Use-after-free vulnerability in xprt_set_caller in rpcb_svc_com.c in rpcbind 0.2.1 and earlier allows remote attackers …

    rpcbind rpcbind Debian Ubuntu
  • Unscored —
    CVE-2015-7612

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Organizations page in Enterprise Manager in McAfee Vu…

  • Unscored —
    CVE-2015-7311

    libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device mod…

    xen xen Debian Ubuntu
  • Unscored —
    CVE-2015-1335

    lxc-start in lxc before 1.0.8 and 1.1.x before 1.1.4 allows local container administrators to escape AppArmor confineme…

    lxc lxc Debian Ubuntu
  • Unscored —
    CVE-2015-1338 Public exploit

    kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly g…

    apport Ubuntu
  • Unscored —
    CVE-2015-1541

    The AppWidgetServiceImpl implementation in com/android/server/appwidget/AppWidgetServiceImpl.java in the Settings appli…

  • Unscored —
    CVE-2015-1536

    Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.…

  • Unscored —
    CVE-2015-1539 EPSS 86%

    Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1…

  • Unscored —
    CVE-2015-1528 Public exploit

    Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allow…

    android Ubuntu
  • Unscored —
    CVE-2015-1538 Public exploit EPSS 99%

    Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android be…

  • Unscored —
    CVE-2015-6575

    SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which al…

  • Unscored —
    CVE-2015-3849

    The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M d…

  • Unscored —
    CVE-2015-3826 EPSS 74%

    The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I d…

  • Unscored —
    CVE-2015-3863

    Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow …

    android Ubuntu
  • Unscored —
    CVE-2015-3829 EPSS 90%

    Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5…

  • Unscored —
    CVE-2015-3837 Public exploit

    The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly…

  • Unscored —
    CVE-2015-3858

    The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obso…

  • Unscored —
    CVE-2015-3836

    The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1 LM…

  • Unscored —
    CVE-2015-3864 Public exploit EPSS 87%

    Integer underflow in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in mediaserver in …

  • Unscored —
    CVE-2015-3833

    The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android …

  • Unscored —
    CVE-2015-3827 EPSS 81%

    The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not…

  • Unscored —
    CVE-2015-3834

    Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android …

  • Unscored —
    CVE-2015-3842

    Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 L…

  • Unscored —
    CVE-2015-3844

    The getProcessRecordLocked method in services/core/java/com/android/server/am/ActivityManagerService.java in ActivityMa…

  • Unscored —
    CVE-2015-3824 EPSS 90%

    The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not…

  • Unscored —
    CVE-2015-3845

    The Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1 LMY48M does not consider pa…

    android Ubuntu
  • Unscored —
    CVE-2015-3828 EPSS 85%

    The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I d…

  • Unscored —
    CVE-2015-3835

    Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android be…

  • Unscored —
    CVE-2015-3843

    The SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to (1) intercept or (2) emulate unspeci…

  • Unscored —
    CVE-2015-3860

    packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restr…

  • Unscored —
    CVE-2015-3832

    Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers…

  • Unscored —
    CVE-2015-3831

    Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the media…

  • Unscored —
    CVE-2015-3861

    Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in me…

  • Unscored —
    CVE-2014-7916

    Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors…

  • Unscored —
    CVE-2014-7917

    Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors…

  • Unscored —
    CVE-2014-7915

    Integer overflow in SampleTable.cpp in libstagefright in Android before 5.0.0 has unspecified impact and attack vectors…