CVEs published October 9, 2015
49 CVEs were published on October 9, 2015: 0 critical, 0 high.
- Published
- 49
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 49
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 49
- CVE-2015-1337Simple Streams (simplestreams) does not properly verify the GPG signatures of disk image files, which allows remote mirror servers to spoof
- CVE-2015-5234IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly sanitize applet URLs, which allows remote attackers to inject applets into
- CVE-2015-5235IcedTea-Web before 1.5.3 and 1.6.x before 1.6.1 does not properly determine the origin of unsigned applets, which allows remote attackers to
- CVE-2015-7765ZOHO ManageEngine OpManager 11.5 build 11600 and earlier uses a hardcoded password of "plugin" for the IntegrationUser account, which allows
- CVE-2015-7766PGSQL:SubmitQuery.do in ZOHO ManageEngine OpManager 11.6, 11.5, and earlier allows remote administrators to bypass SQL query restrictions vi
- CVE-2015-7767Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code or cause a denial of service (applicatio
- CVE-2015-7768Buffer overflow in Konica Minolta FTP Utility 1.0 allows remote attackers to execute arbitrary code via a long CWD command.
- CVE-2015-3785The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-
- CVE-2015-5780The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, wh
- CVE-2015-5828The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code
- CVE-2015-5830The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory co
- CVE-2015-5833The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physicall
- CVE-2015-5836Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to
- CVE-2015-5849The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows
- CVE-2015-5853AirScan in Apple OS X before 10.11 allows man-in-the-middle attackers to obtain eSCL packet payload data via unspecified vectors.
- CVE-2015-5854The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified v
- CVE-2015-5864IOAudioFamily in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
- CVE-2015-5865IOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
- CVE-2015-5866IOHIDFamily in Apple OS X before 10.11 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memo
- CVE-2015-5870The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspec
- CVE-2015-5871IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified
- CVE-2015-5872IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified
- CVE-2015-5873IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified
- CVE-2015-5875Cross-site scripting (XSS) vulnerability in Notes in Apple OS X before 10.11 allows local users to inject arbitrary web script or HTML via c
- CVE-2015-5877The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory co
- CVE-2015-5878Notes in Apple OS X before 10.11 misparses links, which allows local users to obtain sensitive information via unspecified vectors.
- CVE-2015-5883The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret directional override form
- CVE-2015-5884The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote
- CVE-2015-5887The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a sess
- CVE-2015-5888The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privi
- CVE-2015-5889rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment v
- CVE-2015-5890IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified
- CVE-2015-5891The SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory c
- CVE-2015-5893SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
- CVE-2015-5894The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag
- CVE-2015-5897The Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by using an environment variable to inject code
- CVE-2015-5900The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denia
- CVE-2015-5901The Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash files, which might allow local users to obtain
- CVE-2015-5902The debugging feature in the kernel in Apple OS X before 10.11 mismanages state, which allows local users to cause a denial of service via u
- CVE-2015-5913Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that r
- CVE-2015-5914The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inser
- CVE-2015-5915Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vecto
- CVE-2015-5917The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of ser
- CVE-2015-5918GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified ve
- CVE-2015-5919GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified ve
- CVE-2015-5922Unspecified vulnerability in International Components for Unicode (ICU) before 53.1.0, as used in Apple OS X before 10.11 and watchOS before
- CVE-2015-5923Apple iOS before 9.0.2 does not properly restrict the options available on the lock screen, which allows physically proximate attackers to r
- CVE-2015-7760libxpc in launchd in Apple OS X before 10.11 does not restrict the creation of processes for network connections, which allows remote attack
- CVE-2015-7761Mail in Apple OS X before 10.11 does not properly recognize user preferences, which allows attackers to obtain sensitive information via an