# CVEs published 2015-10-15 22 CVEs were published on October 15, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-6507](https://cve.now/CVE-2015-6507.md): The hdbsql client 1.00.091.00 Build 1418659308-1530 in SAP HANA allows local users to cause a denial of service (memory corruption) and poss (no CVSS) - [CVE-2015-7361](https://cve.now/CVE-2015-7361.md): FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not require authenticat (no CVSS) - [CVE-2015-7725](https://cve.now/CVE-2015-7725.md): Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticat (no CVSS) - [CVE-2015-7726](https://cve.now/CVE-2015-7726.md): Cross-site scripting (XSS) vulnerability in role deletion in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow (no CVSS) - [CVE-2015-7727](https://cve.now/CVE-2015-7727.md): Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 (NewDB100\_REL) allow remote a (no CVSS) - [CVE-2015-7728](https://cve.now/CVE-2015-7728.md): Cross-site scripting (XSS) vulnerability in user creation in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 (NewDB100\_ (no CVSS) - [CVE-2015-7729](https://cve.now/CVE-2015-7729.md): Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote (no CVSS) - [CVE-2015-7730](https://cve.now/CVE-2015-7730.md): SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attackers to cause a denial (no CVSS) - [CVE-2015-7838](https://cve.now/CVE-2015-7838.md): ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary files via unspecified (no CVSS) - [CVE-2015-7839](https://cve.now/CVE-2015-7839.md): SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/ (no CVSS) - [CVE-2015-7840](https://cve.now/CVE-2015-7840.md): The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrar (no CVSS) - [CVE-2015-6755](https://cve.now/CVE-2015-6755.md): The ContainerNode::parserInsertBefore function in core/dom/ContainerNode.cpp in Blink, as used in Google Chrome before 46.0.2490.71, proceed (no CVSS) - [CVE-2015-6756](https://cve.now/CVE-2015-6756.md): Use-after-free vulnerability in the CPDFSDK\_PageView implementation in fpdfsdk/src/fsdk\_mgr.cpp in PDFium, as used in Google Chrome before 4 (no CVSS) - [CVE-2015-6757](https://cve.now/CVE-2015-6757.md): Use-after-free vulnerability in content/browser/service\_worker/embedded\_worker\_instance.cc in the ServiceWorker implementation in Google Chr (no CVSS) - [CVE-2015-6758](https://cve.now/CVE-2015-6758.md): The CPDF\_Document::GetPage function in fpdfapi/fpdf\_parser/fpdf\_parser\_document.cpp in PDFium, as used in Google Chrome before 46.0.2490.71, (no CVSS) - [CVE-2015-6759](https://cve.now/CVE-2015-6759.md): The shouldTreatAsUniqueOrigin function in platform/weborigin/SecurityOrigin.cpp in Blink, as used in Google Chrome before 46.0.2490.71, does (no CVSS) - [CVE-2015-6760](https://cve.now/CVE-2015-6760.md): The Image11::map function in renderer/d3d/d3d11/Image11.cpp in libANGLE, as used in Google Chrome before 46.0.2490.71, mishandles mapping fa (no CVSS) - [CVE-2015-6761](https://cve.now/CVE-2015-6761.md): The update\_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71 and other products, (no CVSS) - [CVE-2015-6762](https://cve.now/CVE-2015-6762.md): The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implementation in Blink, as (no CVSS) - [CVE-2015-6763](https://cve.now/CVE-2015-6763.md): Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service or possibly have othe (no CVSS) - [CVE-2015-7645](https://cve.now/CVE-2015-7645.md): Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows rem (CVSS 7.8, KEV) - [CVE-2015-7834](https://cve.now/CVE-2015-7834.md): Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow attackers to cause a (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-10-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.