# CVEs published 2015-10-18 23 CVEs were published on October 18, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-5661](https://cve.now/CVE-2015-5661.md): The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive i (no CVSS) - [CVE-2015-6477](https://cve.now/CVE-2015-6477.md): Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application in Nordex Control 2 (NC2) SCADA 16 and earlier allow (CVSS 6.1) - [CVE-2015-6482](https://cve.now/CVE-2015-6482.md): Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer deref (no CVSS) - [CVE-2015-7032](https://cve.now/CVE-2015-7032.md): The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote (no CVSS) - [CVE-2015-7033](https://cve.now/CVE-2015-7033.md): The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers before 3.6 allow remote (no CVSS) - [CVE-2015-7034](https://cve.now/CVE-2015-7034.md): The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary code or cause a denial (no CVSS) - [CVE-2015-6843](https://cve.now/CVE-2015-6843.md): Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it easier for remote att (no CVSS) - [CVE-2015-6844](https://cve.now/CVE-2015-6844.md): Cross-site scripting (XSS) vulnerability in Reviewer in EMC SourceOne Email Supervisor before 7.2 allows remote attackers to inject arbitrar (no CVSS) - [CVE-2015-6845](https://cve.now/CVE-2015-6845.md): EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier for remote attackers (no CVSS) - [CVE-2015-6846](https://cve.now/CVE-2015-6846.md): EMC SourceOne Email Supervisor before 7.2 uses hardcoded encryption keys, which makes it easier for attackers to obtain access by examining (no CVSS) - [CVE-2015-5444](https://cve.now/CVE-2015-5444.md): Multiple cross-site scripting (XSS) vulnerabilities in HP Smart Profile Server Data Analytics Layer (SPS DAL) 2.3 before 2.3.5 allow remote (no CVSS) - [CVE-2015-5662](https://cve.now/CVE-2015-5662.md): Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry (no CVSS) - [CVE-2015-7184](https://cve.now/CVE-2015-7184.md): The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in certain situations where (no CVSS) - [CVE-2015-7635](https://cve.now/CVE-2015-7635.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS) - [CVE-2015-7636](https://cve.now/CVE-2015-7636.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS) - [CVE-2015-7637](https://cve.now/CVE-2015-7637.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS) - [CVE-2015-7638](https://cve.now/CVE-2015-7638.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS) - [CVE-2015-7639](https://cve.now/CVE-2015-7639.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS) - [CVE-2015-7640](https://cve.now/CVE-2015-7640.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS) - [CVE-2015-7641](https://cve.now/CVE-2015-7641.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS) - [CVE-2015-7642](https://cve.now/CVE-2015-7642.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and before 11.2.202.535 (no CVSS) - [CVE-2015-7647](https://cve.now/CVE-2015-7647.md): Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to exe (no CVSS) - [CVE-2015-7648](https://cve.now/CVE-2015-7648.md): Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux allows attackers to exe (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-10-18 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.