CVEs published October 27, 2015
9 CVEs were published on October 27, 2015: 0 critical, 0 high.
- Published
- 9
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- neutron
- 1
- org.apache.httpcomponents:httpclient
- 1
Medium, low and unrated 9
- CVE-2015-3996The default AFSecurityPolicy.validatesDomainName configuration for AFSSLPinningModeNone in the AFNetworking framework before 2.5.3, as used
- CVE-2015-5178The Management Console in Red Hat Enterprise Application Platform before 6.4.4 and WildFly (formerly JBoss Application Server) does not send
- CVE-2015-5188Cross-site request forgery (CSRF) vulnerability in the Web Console (web-console) in Red Hat Enterprise Application Platform before 6.4.4 and
- CVE-2015-5220The Web Console in Red Hat Enterprise Application Platform (EAP) before 6.4.4 and WildFly (formerly JBoss Application Server) allows remote
- CVE-2015-5240Race condition in OpenStack Neutron before 2014.2.4 and 2015.1 before 2015.1.2, when using the ML2 plugin or the security groups AMQP API, aneutron
- CVE-2015-5262http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignores the http.socket.timeout configurationorg.apache.httpcomponents:httpclient
- CVE-2015-7986The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memor
- CVE-2015-5665Cross-site request forgery (CSRF) vulnerability in LOCKON EC-CUBE 2.11.0 through 2.13.3 allows remote attackers to hijack the authentication
- CVE-2015-6340The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with software 19.0.M0.60737 allows remote atta