Skip to content
OpenAdvisories

Archive

October 2015

Vulnerabilities first published in this month (UTC), newest first.

← September 2015 2015 / October November 2015 →
  1. 136
  2. 27
  3. 324
  4. 417
  5. 520
  6. 630
  7. 7 
  8. 83
  9. 949
  10. 10 
  11. 114
  12. 1216
  13. 133
  14. 14109
  15. 1522
  16. 1621
  17. 17 
  18. 1823
  19. 1918
  20. 20 
  21. 21136
  22. 22 
  23. 2371
  24. 24 
  25. 2511
  26. 2624
  27. 279
  28. 2826
  29. 2922
  30. 3019
  31. 316
All Critical High Medium Low Exploited only Public exploit

44 results · Clear filters · Feed

  • Unscored —
    CVE-2015-7858 Public exploit EPSS 86%

    SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via u…

  • Unscored —
    CVE-2015-7857 Public exploit EPSS 94%

    SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.…

  • Unscored —
    CVE-2015-7297 Public exploit EPSS 100%

    SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via u…

  • Critical 9.8
    CVE-2015-5285 Public exploit

    Kallithea CRLF injection vulnerability

    CRLF injection vulnerability in Kallithea before 0.3 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the came_from parameter to _admin/login.

    kallithea PyPI
  • Unscored —
    CVE-2015-2900 Public exploit

    The AddUserFinding add_userfinding2 function in Medicomp MEDCIN Engine before 2.22.20153.226 allows remote attackers to…

  • Unscored —
    CVE-2015-7900 Public exploit

    Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive…

  • Unscored —
    CVE-2015-7903 Public exploit

    SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remot…

  • Unscored —
    CVE-2015-7904 Public exploit

    Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 a…

  • Unscored —
    CVE-2015-7902 Public exploit

    Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for faile…

  • Unscored —
    CVE-2015-7901 Public exploit

    Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execu…

  • Unscored —
    CVE-2015-6493 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 b…

  • Unscored —
    CVE-2015-6494 Public exploit

    Cross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430…

  • Unscored —
    CVE-2015-7986 Public exploit

    The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —
    CVE-2015-3256 Public exploit

    PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daem…

  • Unscored —
    CVE-2015-7007 Public exploit EPSS 53%

    Script Editor in Apple OS X before 10.11.1 allows remote attackers to bypass an intended user-confirmation requirement …

  • Unscored —
    CVE-2015-6995 Public exploit

    The Disk Images component in Apple iOS before 9.1 and OS X before 10.11.1 misparses images, which allows attackers to e…

  • Unscored —
    CVE-2015-6996 Public exploit

    IOAcceleratorFamily in Apple iOS before 9.1, OS X before 10.11.1, and watchOS before 2.0.1 allows attackers to execute …

  • Unscored —
    CVE-2015-5932 Public exploit

    The kernel in Apple OS X before 10.11.1 allows local users to gain privileges by leveraging an unspecified "type confus…

  • Unscored —
    CVE-2015-4843 Public exploit

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60, and Java SE Embedded 8u51, allows remote attackers t…

    openjdk-7 openjdk-6 Ubuntu
  • Unscored —
    CVE-2015-4870 Public exploit EPSS 30%

    Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticate…

    percona-server-5.6 percona-xtradb-cluster-5.6 mysql-5.5 mariadb-10.0 Ubuntu
  • Unscored —
    CVE-2015-4878 Public exploit

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8…

  • Unscored —
    CVE-2015-4877 Public exploit

    Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8…

  • Unscored —
    CVE-2015-7648 Public exploit EPSS 30%

    Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux al…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-7647 Public exploit EPSS 30%

    Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux al…

    flashplugin-nonfree Ubuntu
  • High 7.8
    CVE-2015-7645 Exploited · Ransomware Public exploit EPSS 65%

    Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.53…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • Unscored —
    CVE-2015-6763 Public exploit

    Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service …

    chromium-browser oxide-qt Ubuntu
  • Unscored —
    CVE-2015-7622 Public exploit EPSS 23%

    Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015…

  • Unscored —
    CVE-2015-2482 Public exploit EPSS 32%

    The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 a…

  • Unscored —
    CVE-2015-2554 Public exploit

    The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 1…

  • Unscored —
    CVE-2015-2553 Public exploit

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W…

  • Unscored —
    CVE-2015-2342 Public exploit EPSS 89%

    The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not …

  • Unscored —
    CVE-2015-7766 Public exploit EPSS 81%

    PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL …

  • Unscored —
    CVE-2015-7767 Public exploit

    Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial o…

  • Unscored —
    CVE-2015-7765 Public exploit EPSS 67%

    ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser …

  • Unscored —
    CVE-2015-7768 Public exploit EPSS 63%

    Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD comm…

  • Unscored —
    CVE-2015-5889 Public exploit

    rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors in…

  • Unscored —
    CVE-2015-6606 Public exploit

    The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to…

  • Unscored —
    CVE-2015-7709 Public exploit EPSS 79%

    The arkeiad daemon in the Arkeia Backup Agent in Western Digital Arkeia 11.0.12 and earlier allows remote attackers to …

  • Unscored —
    CVE-2015-7707 Public exploit

    Ignite Realtime Openfire 3.10.2 allows remote authenticated users to gain administrator access via the isadmin paramete…

  • Unscored —
    CVE-2015-1338 Public exploit

    kernel_crashdump in Apport before 2.19 allows local users to cause a denial of service (disk consumption) or possibly g…

    apport Ubuntu