Skip to content
OpenAdvisories

Archive

27 October 2015

Vulnerabilities first published on this day (UTC), newest first.

← September 2015 2015 / October /27 November 2015 →
  1. 136
  2. 27
  3. 324
  4. 417
  5. 520
  6. 630
  7. 7 
  8. 83
  9. 949
  10. 10 
  11. 114
  12. 1216
  13. 133
  14. 14109
  15. 1522
  16. 1621
  17. 17 
  18. 1823
  19. 1918
  20. 20 
  21. 21136
  22. 22 
  23. 2371
  24. 24 
  25. 2511
  26. 2624
  27. 279
  28. 2826
  29. 2922
  30. 3019
  31. 316
All Critical High Medium Low Exploited only Public exploit

9 results · Feed

  • Unscored —
    CVE-2015-7986 Public exploit

    The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —
    CVE-2015-3996

    The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework b…

  • Unscored —
    CVE-2015-5220

    The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application S…

  • Unscored —
    CVE-2015-5188

    Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Plat…

  • Medium —
    CVE-2015-5262 EPSS 19%

    Denial of service vulnerability in org.apache.httpcomponents:httpclient

    http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unsp…

    httpcomponents-client httpcomponents-client org.apache.httpcomponents:httpclient commons-httpclient Debian Ubuntu Maven
  • Low —
    CVE-2015-5240

    OpenStack Neutron Race condition vulnerability

    Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start wi…

    neutron neutron Debian PyPI
  • Unscored —
    CVE-2015-5178

    The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application …

  • Unscored —
    CVE-2015-6340

    The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.607…

  • Unscored —
    CVE-2015-5665

    Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hija…