Skip to content
OpenAdvisories

Archive

9 October 2015

Vulnerabilities first published on this day (UTC), newest first.

← September 2015 2015 / October /9 November 2015 →
  1. 136
  2. 27
  3. 324
  4. 417
  5. 520
  6. 630
  7. 7 
  8. 83
  9. 949
  10. 10 
  11. 114
  12. 1216
  13. 133
  14. 14109
  15. 1522
  16. 1621
  17. 17 
  18. 1823
  19. 1918
  20. 20 
  21. 21136
  22. 22 
  23. 2371
  24. 24 
  25. 2511
  26. 2624
  27. 279
  28. 2826
  29. 2922
  30. 3019
  31. 316
All Critical High Medium Low Exploited only Public exploit

49 results · Feed

  • Unscored —
    CVE-2015-7766 Public exploit EPSS 81%

    PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL …

  • Unscored —
    CVE-2015-7767 Public exploit

    Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial o…

  • Unscored —
    CVE-2015-7765 Public exploit EPSS 67%

    ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser …

  • Unscored —
    CVE-2015-7768 Public exploit EPSS 63%

    Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comm…

  • Unscored —
    CVE-2015-1337

    Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mir…

    simplestreams Ubuntu
  • Unscored —
    CVE-2015-5234

    IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers t…

    icedtea-web icedtea-web Debian Ubuntu
  • Unscored —
    CVE-2015-5235

    IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allow…

    icedtea-web icedtea-web Debian Ubuntu
  • Unscored —
    CVE-2015-7761

    Mail in Apple OS X before 10.11 does not properly recognize user preferences, which allows attackers to obtain sensitiv…

  • Unscored —
    CVE-2015-7760

    libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which…

  • Unscored —
    CVE-2015-3785

    The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypas…

  • Unscored —
    CVE-2015-5887

    The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request …

  • Unscored —
    CVE-2015-5915

    Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified im…

  • Unscored —
    CVE-2015-5923

    Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically pro…

  • Unscored —
    CVE-2015-5890

    IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corrup…

  • Unscored —
    CVE-2015-5836

    Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attacker…

  • Unscored —
    CVE-2015-5833

    The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, w…

  • Unscored —
    CVE-2015-5888

    The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vect…

  • Unscored —
    CVE-2015-5854

    The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain it…

  • Unscored —
    CVE-2015-5901

    The Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash files, which might allow l…

  • Unscored —
    CVE-2015-5853

    AirScan in Apple OS X before 10.11 allows man-in-the-middle attackers to obtain eSCL packet payload data via unspecifie…

  • Unscored —
    CVE-2015-5873

    IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corrup…

  • Unscored —
    CVE-2015-5870

    The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout i…

  • Unscored —
    CVE-2015-5871

    IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corrup…

  • Unscored —
    CVE-2015-5894

    The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequire…

  • Unscored —
    CVE-2015-5897

    The Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by using an environment var…

  • Unscored —
    CVE-2015-5900

    The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attac…

  • Unscored —
    CVE-2015-5830

    The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial …

  • Unscored —
    CVE-2015-5866

    IOHIDFamily in Apple OS X before 10.11 allows attackers to execute arbitrary code in a privileged context or cause a de…

  • Unscored —
    CVE-2015-5889 Public exploit

    rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors in…

  • Unscored —
    CVE-2015-5780

    The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an in…

  • Unscored —
    CVE-2015-5849

    The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a differen…

  • Unscored —
    CVE-2015-5919

    GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruptio…

  • Unscored —
    CVE-2015-5883

    The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret dire…

  • Unscored —
    CVE-2015-5893

    SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via…

  • Unscored —
    CVE-2015-5902

    The debugging feature in the kernel in Apple OS X before 10.11 mismanages state, which allows local users to cause a de…

  • Unscored —
    CVE-2015-5914

    The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI up…

  • Unscored —
    CVE-2015-5864

    IOAudioFamily in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via un…

  • Unscored —
    CVE-2015-5865

    IOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout information via a craft…

  • Unscored —
    CVE-2015-5828

    The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection …

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Unscored —
    CVE-2015-5891

    The SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain privileges or cause a denial…