Skip to content
OpenAdvisories

Archive

18 October 2015

Vulnerabilities first published on this day (UTC), newest first.

← September 2015 2015 / October /18 November 2015 →
  1. 136
  2. 27
  3. 324
  4. 417
  5. 520
  6. 630
  7. 7 
  8. 83
  9. 949
  10. 10 
  11. 114
  12. 1216
  13. 133
  14. 14109
  15. 1522
  16. 1621
  17. 17 
  18. 1823
  19. 1918
  20. 20 
  21. 21136
  22. 22 
  23. 2371
  24. 24 
  25. 2511
  26. 2624
  27. 279
  28. 2826
  29. 2922
  30. 3019
  31. 316
All Critical High Medium Low Exploited only Public exploit

23 results · Feed

  • Unscored —
    CVE-2015-7034

    The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary c…

  • Unscored —
    CVE-2015-7032

    The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers bef…

  • Unscored —
    CVE-2015-7033

    The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers bef…

  • Medium 6.1
    CVE-2015-6477 Scanner template EPSS 12%

    Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application in Nordex Control 2 (NC2) SCADA…

  • Unscored —
    CVE-2015-6482

    Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of servic…

  • Unscored —
    CVE-2015-5661

    The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers …

  • Unscored —
    CVE-2015-6844

    Cross-site scripting (XSS) vulnerability in Reviewer in EMC SourceOne Email Supervisor before 7.2 allows remote attacke…

  • Unscored —
    CVE-2015-6845

    EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier…

  • Unscored —
    CVE-2015-6843

    Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it …

  • Unscored —
    CVE-2015-6846

    EMC SourceOne Email Supervisor before 7.2 uses hardcoded encryption keys, which makes it easier for attackers to obtain…

  • Unscored —
    CVE-2015-7636

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7648 Public exploit EPSS 30%

    Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux al…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7642

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7637

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7647 Public exploit EPSS 30%

    Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux al…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7638

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7184

    The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in cer…

    firefox Ubuntu
  • Unscored —
    CVE-2015-7641

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7640

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7635

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7639

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-5444

    Multiple cross-site scripting (XSS) vulnerabilities in HP Smart Profile Server Data Analytics Layer (SPS DAL) 2.3 befor…

  • Unscored —
    CVE-2015-5662

    Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary file…