Skip to content
OpenAdvisories

Archive

October 2015

Vulnerabilities first published in this month (UTC), newest first.

← September 2015 2015 / October November 2015 →
  1. 136
  2. 27
  3. 324
  4. 417
  5. 520
  6. 630
  7. 7 
  8. 83
  9. 949
  10. 10 
  11. 114
  12. 1216
  13. 133
  14. 14109
  15. 1522
  16. 1621
  17. 17 
  18. 1823
  19. 1918
  20. 20 
  21. 21136
  22. 22 
  23. 2371
  24. 24 
  25. 2511
  26. 2624
  27. 279
  28. 2826
  29. 2922
  30. 3019
  31. 316
All Critical High Medium Low Exploited only Public exploit

726 results · Feed

  • Unscored —
    CVE-2015-2898

    Multiple stack-based buffer overflows in Medicomp MEDCIN Engine before 2.22.20153.226 might allow remote attackers to e…

  • Unscored —
    CVE-2015-2899

    Heap-based buffer overflow in the QualifierList retrieve_qualifier_list function in Medicomp MEDCIN Engine before 2.22.…

  • Unscored —
    CVE-2015-5040

    Buffer overflow in IBM Domino 8.5.1 through 8.5.3 before 8.5.3 FP6 IF10 and 9.x before 9.0.1 FP4 IF3 allows remote atta…

  • Unscored —
    CVE-2015-5668

    SQL injection vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to execute arbitrary…

  • Unscored —
    CVE-2015-5669

    Techno Project Japan Enisys Gw before 1.4.1 allows remote authenticated users to write to arbitrary files and consequen…

  • Unscored —
    CVE-2015-5671

    Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to bypass intended access restrictions and read arb…

  • Unscored —
    CVE-2015-5670

    Cross-site scripting (XSS) vulnerability in Techno Project Japan Enisys Gw before 1.4.1 allows remote attackers to inje…

  • Unscored —
    CVE-2015-7649

    Adobe Shockwave Player before 12.2.1.171 allows attackers to execute arbitrary code or cause a denial of service (memor…

  • Unscored —
    CVE-2015-6034

    EPSON Network Utility 4.10 uses weak permissions (Everyone: Full Control) for eEBSVC.exe, which allows local users to g…

  • Unscored —
    CVE-2014-8912

    IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 through …

  • Unscored —
    CVE-2015-7900 Public exploit

    Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote attackers to obtain sensitive…

  • Unscored —
    CVE-2015-7903 Public exploit

    SQL injection vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remot…

  • Unscored —
    CVE-2015-7836

    Siemens RUGGEDCOM ROS before 4.2.1 allows remote attackers to obtain sensitive information by sniffing the network for …

  • High —
    CVE-2015-7873

    phpMyAdmin allows remote attackers to spoof content via the url parameter

    The redirection feature in url.php in phpMyAdmin 4.4.x before 4.4.15.1 and 4.5.x before 4.5.1 allows remote attackers to spoof content via the url parameter.

    phpmyadmin phpmyadmin/phpmyadmin Debian Packagist
  • Unscored —
    CVE-2015-7904 Public exploit

    Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 a…

  • Unscored —
    CVE-2015-7902 Public exploit

    Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 provides different error messages for faile…

  • Unscored —
    CVE-2015-7901 Public exploit

    Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 build 430 allows remote authenticated users to execu…

  • Unscored —
    CVE-2015-6486

    SQL injection vulnerability on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN …

  • Unscored —
    CVE-2015-6488

    Cross-site scripting (XSS) vulnerability in the web server on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000…

  • High 7.5
    CVE-2015-6492

    Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote attackers t…

  • Critical 9.8
    CVE-2015-6490

    Stack-based buffer overflow on Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices through B FRN…

  • Unscored —
    CVE-2015-6491

    Allen-Bradley MicroLogix 1100 devices before B FRN 15.000 and 1400 devices before B FRN 15.003 allow remote authenticat…

  • Unscored —
    CVE-2015-6493 Public exploit

    Cross-site request forgery (CSRF) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x through 2.6.0 b…

  • Unscored —
    CVE-2015-6494 Public exploit

    Cross-site scripting (XSS) vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430…

  • Unscored —
    CVE-2015-3972

    The web interface on Janitza UMG 508, 509, 511, 604, and 605 devices supports only short PIN values for authentication,…

  • Unscored —
    CVE-2015-3968

    The FTP service on Janitza UMG 508, 509, 511, 604, and 605 devices has a default password, which makes it easier for re…

  • Unscored —
    CVE-2015-3970

    Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 dev…

  • Unscored —
    CVE-2015-3973

    Janitza UMG 508, 509, 511, 604, and 605 devices improperly generate session tokens, which makes it easier for remote at…

  • Unscored —
    CVE-2015-3969

    Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to obtain sensitive network-connection informati…

  • Unscored —
    CVE-2015-3971

    The debug interface on Janitza UMG 508, 509, 511, 604, and 605 devices does not require authentication, which allows re…

  • Unscored —
    CVE-2015-3967

    Cross-site request forgery (CSRF) vulnerability on Janitza UMG 508, 509, 511, 604, and 605 devices allows remote attack…

  • Unscored —
    CVE-2015-5713

    Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, …

  • Unscored —
    CVE-2015-5712

    Spotfire Parsing Library and Spotfire Security Filter in TIBCO Spotfire Server 5.5.x before 5.5.4, 6.0.x before 6.0.5, …

  • Unscored —
    CVE-2015-7986 Public exploit

    The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a den…

  • Unscored —
    CVE-2015-3996

    The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework b…

  • Unscored —
    CVE-2015-5220

    The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application S…

  • Unscored —
    CVE-2015-5188

    Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Plat…

  • Medium —
    CVE-2015-5262 EPSS 19%

    Denial of service vulnerability in org.apache.httpcomponents:httpclient

    http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configuration setting during an SSL handshake, which allows remote attackers to cause a denial of service (HTTPS call hang) via unsp…

    httpcomponents-client httpcomponents-client org.apache.httpcomponents:httpclient commons-httpclient Debian Ubuntu Maven
  • Low —
    CVE-2015-5240

    OpenStack Neutron Race condition vulnerability

    Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, allows remote authenticated users to bypass IP anti-spoofing controls by changing the device owner of a port to start wi…

    neutron neutron Debian PyPI
  • Unscored —
    CVE-2015-5178

    The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application …