CVEs

396,200 total · page 6484 of 7,924

CVE	Vendor / Product	Risk	CVSS	EPSS	Published	Description
CVE-2015-5919	Apple Inc. watchOS	0.00	—	0.00	Oct 9, 2015	GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5918.
CVE-2015-5918	Apple Inc. watchOS	0.00	—	0.00	Oct 9, 2015	GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5919.
CVE-2015-5917	Apple Inc. OS X	0.00	—	0.03	Oct 9, 2015	The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (memory consumption and daemon outage) via a STAT command containing a crafted pattern, as demonstrated by multiple instances of the…
CVE-2015-5915	Apple Inc. OS X	0.00	—	0.01	Oct 9, 2015	Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors.
CVE-2015-5914	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a "Thunderstrike" issue. NOTE: this issue exists…
CVE-2015-5913	Apple Inc. OS X	0.00	—	0.02	Oct 9, 2015	Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request.
CVE-2015-5902	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The debugging feature in the kernel in Apple OS X before 10.11 mismanages state, which allows local users to cause a denial of service via unspecified vectors.
CVE-2015-5901	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash files, which might allow local users to obtain sensitive information by reading storage media, as demonstrated by reading a flash drive.
CVE-2015-5900	Apple Inc. OS X	0.00	—	0.02	Oct 9, 2015	The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denial of service (boot failure) via a crafted app that writes to an unintended address.
CVE-2015-5897	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by using an environment variable to inject code into processes that rely on this framework.
CVE-2015-5894	Apple Inc. OS X	0.00	—	0.01	Oct 9, 2015	The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access…
CVE-2015-5893	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
CVE-2015-5891	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5890	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5872, and CVE-2015-5873.
CVE-2015-5889	Apple Inc. OS X	0.03	—	0.05	Oct 9, 2015	rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables.
CVE-2015-5888	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file.
CVE-2015-5887	Apple Inc. OS X	0.00	—	0.02	Oct 9, 2015	The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data.
CVE-2015-5884	Apple Inc. Mail	0.00	—	0.00	Oct 9, 2015	The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment.
CVE-2015-5883	Apple Inc. Terminal	0.00	—	0.02	Oct 9, 2015	The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret directional override formatting characters differently, which allows remote attackers to spoof the content of a text document via a crafted character sequence.
CVE-2015-5878	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	Notes in Apple OS X before 10.11 misparses links, which allows local users to obtain sensitive information via unspecified vectors.
CVE-2015-5877	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5830.
CVE-2015-5875	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	Cross-site scripting (XSS) vulnerability in Notes in Apple OS X before 10.11 allows local users to inject arbitrary web script or HTML via crafted text.
CVE-2015-5873	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5872, and CVE-2015-5890.
CVE-2015-5872	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5873, and CVE-2015-5890.
CVE-2015-5871	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5872, CVE-2015-5873, and CVE-2015-5890.
CVE-2015-5870	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspecified vectors.
CVE-2015-5866	Apple Inc. OS X	0.00	—	0.03	Oct 9, 2015	IOHIDFamily in Apple OS X before 10.11 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-5865	Apple Inc. OS X	0.00	—	0.01	Oct 9, 2015	IOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
CVE-2015-5864	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	IOAudioFamily in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
CVE-2015-5854	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors.
CVE-2015-5853	Apple Inc. OS X	0.00	—	0.01	Oct 9, 2015	AirScan in Apple OS X before 10.11 allows man-in-the-middle attackers to obtain eSCL packet payload data via unspecified vectors.
CVE-2015-5849	Apple Inc. OS X	0.00	—	0.02	Oct 9, 2015	The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection.
CVE-2015-5836	Apple Inc. Apple Online Store Kit	0.00	—	0.01	Oct 9, 2015	Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app.
CVE-2015-5833	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation.
CVE-2015-5830	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5877.
CVE-2015-5828	Apple Inc. Safari	0.00	—	0.02	Oct 9, 2015	The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.
CVE-2015-5780	Apple Inc. Safari	0.00	—	0.02	Oct 9, 2015	The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors.
CVE-2015-3785	Apple Inc. OS X	0.00	—	0.00	Oct 9, 2015	The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors.
CVE-2015-6311	Cisco Systems, Inc. Wireless Lan Controller Software	0.00	—	0.01	Oct 8, 2015	Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers to cause a denial of service (device outage) by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236.
CVE-2015-6310	Cisco Systems, Inc. Unified Communications Manager Im And Presence Service	0.00	—	0.02	Oct 8, 2015	The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632.
CVE-2015-5649	Cybozu Garoon	0.00	—	0.01	Oct 8, 2015	Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain…
CVE-2015-7718	Google Android	0.00	—	0.00	Oct 6, 2015	mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bug 22278703, a different vulnerability than CVE-2015-6605.
CVE-2015-7717	Google Android	0.00	—	0.01	Oct 6, 2015	mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 19573085, a different vulnerability than CVE-2015-6596.
CVE-2015-7716	Google Android	0.00	—	0.02	Oct 6, 2015	libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20721050, a different vulnerability than CVE-2015-3873.
CVE-2015-7600	Cisco Systems, Inc. VPN Client	0.00	—	0.01	Oct 6, 2015	Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section.
CVE-2015-6607	SQLite SQLite	0.00	—	0.02	Oct 6, 2015	SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586.
CVE-2015-6606	Google Android	0.00	—	0.01	Oct 6, 2015	The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786.
CVE-2015-6605	Google Android	0.00	—	0.01	Oct 6, 2015	mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bugs 20915134 and 23142203, a different vulnerability than CVE-2015-7718.
CVE-2015-6604	Google Android	0.00	—	0.02	Oct 6, 2015	libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23129786.
CVE-2015-6603	Google Android	0.00	—	0.02	Oct 6, 2015	libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23227354.

CVE-2015-5919Oct 9, 2015
Apple Inc.
watchOS
risk 0.00cvss —epss 0.00
GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5918.
CVE-2015-5918Oct 9, 2015
Apple Inc.
watchOS
risk 0.00cvss —epss 0.00
GasGauge in Apple watchOS before 2 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5919.
CVE-2015-5917Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.03
The glob implementation in tnftpd (formerly lukemftpd), as used in Apple OS X before 10.11, allows remote attackers to cause a denial of service (memory consumption and daemon outage) via a STAT command containing a crafted pattern, as demonstrated by multiple instances of the…
CVE-2015-5915Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.01
Apple OS X before 10.11 does not ensure that the keychain's lock state is displayed correctly, which has unspecified impact and attack vectors.
CVE-2015-5914Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The EFI component in Apple OS X before 10.11 allows physically proximate attackers to modify firmware during the EFI update process by inserting an Apple Ethernet Thunderbolt adapter with crafted code in an Option ROM, aka a "Thunderstrike" issue. NOTE: this issue exists…
CVE-2015-5913Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.02
Heimdal, as used in Apple OS X before 10.11, allows remote attackers to conduct replay attacks against the SMB server via packet data that represents a Kerberos authenticated request.
CVE-2015-5902Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The debugging feature in the kernel in Apple OS X before 10.11 mismanages state, which allows local users to cause a denial of service via unspecified vectors.
CVE-2015-5901Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The Secure Empty Trash feature in Finder in Apple OS X before 10.11 improperly deletes Trash files, which might allow local users to obtain sensitive information by reading storage media, as demonstrated by reading a flash drive.
CVE-2015-5900Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.02
The protected range register in the EFI component in Apple OS X before 10.11 has an incorrect value, which allows attackers to cause a denial of service (boot failure) via a crafted app that writes to an unintended address.
CVE-2015-5897Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The Address Book framework in Apple OS X before 10.11 allows local users to gain privileges by using an environment variable to inject code into processes that rely on this framework.
CVE-2015-5894Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.01
The X.509 certificate-trust implementation in Apple OS X before 10.11 does not recognize that the kSecRevocationRequirePositiveResponse flag implies a revocation-checking requirement, which makes it easier for man-in-the-middle attackers to spoof endpoints by leveraging access…
CVE-2015-5893Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
SMBClient in SMB in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
CVE-2015-5891Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The SMB implementation in the kernel in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors.
CVE-2015-5890Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5872, and CVE-2015-5873.
CVE-2015-5889Oct 9, 2015
Apple Inc.
OS X
risk 0.03cvss —epss 0.05
rsh in the remote_cmds component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving environment variables.
CVE-2015-5888Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The Install Framework Legacy component in Apple OS X before 10.11 allows local users to obtain root privileges via vectors involving a privileged executable file.
CVE-2015-5887Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.02
The TLS Handshake Protocol implementation in Secure Transport in Apple OS X before 10.11 accepts a Certificate Request message within a session in which no Server Key Exchange message has been sent, which allows remote attackers to have an unspecified impact via crafted TLS data.
CVE-2015-5884Oct 9, 2015
Apple Inc.
Mail
risk 0.00cvss —epss 0.00
The Mail Drop feature in Mail in Apple OS X before 10.11 mishandles encryption parameters for attachments, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during transmission of an S/MIME e-mail message with a large attachment.
CVE-2015-5883Oct 9, 2015
Apple Inc.
Terminal
risk 0.00cvss —epss 0.02
The bidirectional text-display and text-selection implementations in Terminal in Apple OS X before 10.11 interpret directional override formatting characters differently, which allows remote attackers to spoof the content of a text document via a crafted character sequence.
CVE-2015-5878Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
Notes in Apple OS X before 10.11 misparses links, which allows local users to obtain sensitive information via unspecified vectors.
CVE-2015-5877Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5830.
CVE-2015-5875Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
Cross-site scripting (XSS) vulnerability in Notes in Apple OS X before 10.11 allows local users to inject arbitrary web script or HTML via crafted text.
CVE-2015-5873Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5872, and CVE-2015-5890.
CVE-2015-5872Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5871, CVE-2015-5873, and CVE-2015-5890.
CVE-2015-5871Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
IOGraphics in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5872, CVE-2015-5873, and CVE-2015-5890.
CVE-2015-5870Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The debugging interfaces in the kernel in Apple OS X before 10.11 allow local users to obtain sensitive memory-layout information via unspecified vectors.
CVE-2015-5866Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.03
IOHIDFamily in Apple OS X before 10.11 allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVE-2015-5865Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.01
IOGraphics in Apple OS X before 10.11 allows attackers to obtain sensitive kernel memory-layout information via a crafted app.
CVE-2015-5864Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
IOAudioFamily in Apple OS X before 10.11 allows local users to obtain sensitive kernel memory-layout information via unspecified vectors.
CVE-2015-5854Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The backup implementation in Time Machine in Apple OS X before 10.11 allows local users to obtain access to keychain items via unspecified vectors.
CVE-2015-5853Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.01
AirScan in Apple OS X before 10.11 allows man-in-the-middle attackers to obtain eSCL packet payload data via unspecified vectors.
CVE-2015-5849Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.02
The filtering implementation in AppleEvents in Apple OS X before 10.11 mishandles attempts to send events to a different user, which allows attackers to bypass intended access restrictions by leveraging a screen-sharing connection.
CVE-2015-5836Oct 9, 2015
Apple Inc.
Apple Online Store Kit
risk 0.00cvss —epss 0.01
Apple Online Store Kit in Apple OS X before 10.11 improperly validates iCloud keychain item ACLs, which allows attackers to obtain access to keychain items via a crafted app.
CVE-2015-5833Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The Login Window component in Apple OS X before 10.11 does not ensure that the screen is locked at the intended time, which allows physically proximate attackers to obtain access by visiting an unattended workstation.
CVE-2015-5830Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The Intel Graphics Driver component in Apple OS X before 10.11 allows local users to gain privileges or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5877.
CVE-2015-5828Oct 9, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.02
The API in the WebKit Plug-ins component in Apple Safari before 9 does not provide notification of an HTTP Redirection (aka 3xx) status code to a plugin, which allows remote attackers to bypass intended request restrictions via a crafted web site.
CVE-2015-5780Oct 9, 2015
Apple Inc.
Safari
risk 0.00cvss —epss 0.02
The Safari Extensions implementation in Apple Safari before 9 does not require user confirmation before replacing an installed extension, which has unspecified impact and attack vectors.
CVE-2015-3785Oct 9, 2015
Apple Inc.
OS X
risk 0.00cvss —epss 0.00
The Telephony component in Apple OS X before 10.11, when the Continuity feature is enabled, allows local users to bypass intended telephone-call restrictions via unspecified vectors.
CVE-2015-6311Oct 8, 2015
Cisco Systems, Inc.
Wireless Lan Controller Software
risk 0.00cvss —epss 0.01
Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0), 7.3(101.0), and 7.4(1.19) allow remote attackers to cause a denial of service (device outage) by sending malformed 802.11i management data to a managed access point, aka Bug ID CSCub65236.
CVE-2015-6310Oct 8, 2015
Cisco Systems, Inc.
Unified Communications Manager Im And Presence Service
risk 0.00cvss —epss 0.02
The REST interface in Cisco Unified Communications Manager IM and Presence Service 11.5(1) allows remote attackers to cause a denial of service (SIP proxy service restart) via a crafted HTTP request, aka Bug ID CSCuw31632.
CVE-2015-5649Oct 8, 2015
Cybozu
Garoon
risk 0.00cvss —epss 0.01
Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 mishandles authentication requests, which allows remote authenticated users to conduct LDAP injection attacks, and consequently bypass intended login restrictions or obtain sensitive information, by leveraging certain…
CVE-2015-7718Oct 6, 2015
Google
Android
risk 0.00cvss —epss 0.00
mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bug 22278703, a different vulnerability than CVE-2015-6605.
CVE-2015-7717Oct 6, 2015
Google
Android
risk 0.00cvss —epss 0.01
mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 19573085, a different vulnerability than CVE-2015-6596.
CVE-2015-7716Oct 6, 2015
Google
Android
risk 0.00cvss —epss 0.02
libstagefright in Android 5.x before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 20721050, a different vulnerability than CVE-2015-3873.
CVE-2015-7600Oct 6, 2015
Cisco Systems, Inc.
VPN Client
risk 0.00cvss —epss 0.01
Cisco VPN Client 5.x through 5.0.07.0440 uses weak permissions for vpnclient.ini, which allows local users to gain privileges by entering an arbitrary program name in the Command field of the ApplicationLauncher section.
CVE-2015-6607Oct 6, 2015
SQLite
SQLite
risk 0.00cvss —epss 0.02
SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586.
CVE-2015-6606Oct 6, 2015
Google
Android
risk 0.00cvss —epss 0.01
The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786.
CVE-2015-6605Oct 6, 2015
Google
Android
risk 0.00cvss —epss 0.01
mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bugs 20915134 and 23142203, a different vulnerability than CVE-2015-7718.
CVE-2015-6604Oct 6, 2015
Google
Android
risk 0.00cvss —epss 0.02
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23129786.
CVE-2015-6603Oct 6, 2015
Google
Android
risk 0.00cvss —epss 0.02
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23227354.