By publication date

Exploited and new serious CVEs: March 2015

77 records · 0 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
33Monitor	CVE-2015-2196Proof of concept	SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the cweb-dorado · spider calendar · CWE-89 pre-auth RCE SQL injection	High7.5	—	10.8%	Mar 3, 2015
21Monitor	CVE-2015-1637No exploit	Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wimicrosoft · windows 7 · CWE-310 Pre-auth	Medium4.3	—	13.1%	Mar 6, 2015
40Plan	CVE-2015-2177Proof of concept	Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) Tsiemens · simatic s7-300 cpu firmware · CWE-20 Pre-auth Denial of service	High7.5	—	33.7%	Mar 6, 2015
25Monitor	CVE-2015-0228No exploit	The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to capache · http server · CWE-20 Pre-auth Denial of service	Medium5.0	—	16.4%	Mar 7, 2015
34Monitor	CVE-2015-2094Proof of concept	Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary cowebgateinc · winrds · CWE-119 pre-auth RCE Memory safety	High7.5	—	14.0%	Mar 9, 2015
37Monitor	CVE-2015-2097Proof of concept	Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified webgate · webgate embedded standard protocol sdk · CWE-119 pre-auth RCE Memory safety	High7.5	—	22.8%	Mar 9, 2015
43Plan	CVE-2014-7888No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
43Plan	CVE-2014-7889No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
43Plan	CVE-2014-7890No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
43Plan	CVE-2014-7891No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
43Plan	CVE-2014-7892No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
43Plan	CVE-2014-7893No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
43Plan	CVE-2014-7894No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
43Plan	CVE-2014-7895No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
43Plan	CVE-2014-7897No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
43Plan	CVE-2014-7898No exploit	The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via unhp · ole point of sale driver pre-auth RCE	Critical10.0	—	10.3%	Mar 9, 2015
34Monitor	CVE-2015-0254No exploit	Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crapache · standard taglibs pre-auth RCE XXE	High7.5	—	12.7%	Mar 9, 2015
44Plan	CVE-2014-9566Weaponized	Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 20solarwinds · orion ip address manager · CWE-89 pre-auth RCE SQL injection	High7.5	—	46.7%	Mar 10, 2015
23Monitor	CVE-2015-1067No exploit	Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitioapple · mac os x · CWE-310 Pre-auth	Medium4.3	—	19.6%	Mar 10, 2015
23Monitor	CVE-2015-0005No exploit	The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a Dmicrosoft · windows 2003 server · CWE-254	Medium4.3	—	18.6%	Mar 11, 2015
44Plan	CVE-2015-0032No exploit	vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers microsoft · vbscript · CWE-399 pre-auth RCE	Critical9.3	—	22.3%	Mar 11, 2015
42Plan	CVE-2015-0056No exploit	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 pre-auth RCE	Critical9.3	—	15.5%	Mar 11, 2015
21Monitor	CVE-2015-0074No exploit	Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-119 Pre-auth Memory safety Denial of service	Medium4.3	—	14.6%	Mar 11, 2015
22Monitor	CVE-2015-0076No exploit	The photo-decoder implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, microsoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	15.3%	Mar 11, 2015
36Monitor	CVE-2015-0079No exploit	The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allmicrosoft · windows 7 · CWE-399 Pre-auth Denial of service	High7.8	—	16.1%	Mar 11, 2015
22Monitor	CVE-2015-0080No exploit	Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Sermicrosoft · windows 7 · CWE-200 Pre-auth Info leak	Medium4.3	—	15.3%	Mar 11, 2015
44Plan	CVE-2015-0081Proof of concept	Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windmicrosoft · windows 7 · CWE-19 pre-auth RCE	Critical9.3	—	23.7%	Mar 11, 2015
41Plan	CVE-2015-0086No exploit	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibilitmicrosoft · office · CWE-399 pre-auth RCE	Critical9.3	—	14.9%	Mar 11, 2015
26Monitor	CVE-2015-0087No exploit	Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-200 Pre-auth Info leak	Medium5.0	—	21.3%	Mar 11, 2015
43Plan	CVE-2015-0088No exploit	Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 pre-auth RCE	Critical9.3	—	19.8%	Mar 11, 2015
26Monitor	CVE-2015-0089No exploit	Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-200 Pre-auth Info leak	Medium5.0	—	21.2%	Mar 11, 2015
43Plan	CVE-2015-0090No exploit	Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 pre-auth RCE	Critical9.3	—	19.8%	Mar 11, 2015
43Plan	CVE-2015-0091No exploit	Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 pre-auth RCE	Critical9.3	—	19.8%	Mar 11, 2015
42Plan	CVE-2015-0092No exploit	Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 pre-auth RCE	Critical9.3	—	17.4%	Mar 11, 2015
43Plan	CVE-2015-0093No exploit	Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 pre-auth RCE	Critical9.3	—	20.8%	Mar 11, 2015
58Plan	CVE-2015-0096Weaponized	Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 Smicrosoft · windows 7 · CWE-426 pre-auth RCE	Critical9.3	—	70.9%	Mar 11, 2015
49Plan	CVE-2015-0097Proof of concept	Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers microsoft · excel · CWE-19 pre-auth RCE	Critical9.3	—	40.9%	Mar 11, 2015
42Plan	CVE-2015-0099No exploit	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 pre-auth RCE	Critical9.3	—	15.5%	Mar 11, 2015
42Plan	CVE-2015-0100No exploit	Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 pre-auth RCE Memory safety	Critical9.3	—	15.5%	Mar 11, 2015
42Plan	CVE-2015-1622No exploit	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 pre-auth RCE	Critical9.3	—	15.5%	Mar 11, 2015
44Plan	CVE-2015-1623No exploit	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 pre-auth RCE	Critical9.3	—	22.4%	Mar 11, 2015
42Plan	CVE-2015-1624No exploit	Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 pre-auth RCE	Critical9.3	—	15.6%	Mar 11, 2015
42Plan	CVE-2015-1625No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 pre-auth RCE	Critical9.3	—	15.6%	Mar 11, 2015
42Plan	CVE-2015-1626No exploit	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 pre-auth RCE	Critical9.3	—	15.6%	Mar 11, 2015
20Monitor	CVE-2015-1627No exploit	Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevationmicrosoft · internet explorer · CWE-264 Pre-auth	Medium4.3	—	10.6%	Mar 11, 2015
21Monitor	CVE-2015-1632No exploit	Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Updatmicrosoft · exchange server · CWE-79 Pre-auth XSS	Medium4.3	—	11.7%	Mar 11, 2015
42Plan	CVE-2015-1634No exploit	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 pre-auth RCE	Critical9.3	—	15.5%	Mar 11, 2015
43Plan	CVE-2015-0085No exploit	Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 Smicrosoft · excel Pre-auth	Critical9.3	—	18.7%	Mar 11, 2015
49Plan	CVE-2015-2208Weaponized	The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters inavinu · phpmoadmin · CWE-77 pre-auth RCE Command injection	High7.5	—	61.9%	Mar 12, 2015
58Plan	CVE-2015-0336Weaponized	Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attadobe · flash player pre-auth RCE	Critical9.3	—	70.4%	Mar 13, 2015
40Plan	CVE-2014-7884Proof of concept	Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.hp · arcsight logger	Critical9.0	—	11.7%	Mar 13, 2015
33Monitor	CVE-2015-2281Proof of concept	Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbifortinet · single sign on · CWE-119 pre-auth RCE Memory safety	High7.5	—	10.3%	Mar 19, 2015
26Monitor	CVE-2015-0208No exploit	The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allopenssl · openssl Pre-auth Denial of service	Medium4.3	—	29.4%	Mar 19, 2015
32Monitor	CVE-2015-0209No exploit	Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 bopenssl · openssl Pre-auth	Medium6.8	—	16.3%	Mar 19, 2015
26Monitor	CVE-2015-0286No exploit	The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0openssl · openssl · CWE-17 Pre-auth Denial of service	Medium5.0	—	19.6%	Mar 19, 2015
43Plan	CVE-2015-0292No exploit	Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1openssl · openssl · CWE-119 Pre-auth Memory safety	High7.5	—	44.5%	Mar 19, 2015
26Monitor	CVE-2015-0293No exploit	The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackeropenssl · openssl · CWE-20 Pre-auth Denial of service	Medium5.0	—	21.2%	Mar 19, 2015
42Plan	CVE-2015-2562Weaponized	Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers tweb-dorado · ecommerce wd · CWE-89 pre-auth RCE SQL injection	High7.5	—	38.7%	Mar 20, 2015
30Monitor	CVE-2015-0250No exploit	XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote atapache · batik Pre-auth XXE	Medium6.4	—	16.5%	Mar 24, 2015
32Monitor	CVE-2015-0252Proof of concept	internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) vapache · xerces-c\+\+ · CWE-20 Pre-auth Denial of service	Medium5.0	—	39.6%	Mar 24, 2015
26Monitor	CVE-2015-2153Proof of concept	The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of tcpdump · tcpdump · CWE-119 Pre-auth Memory safety Denial of service	Medium5.0	—	19.0%	Mar 24, 2015
62This week	CVE-2015-2284Weaponized	userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbisolarwinds · firewall security manager · CWE-264 pre-auth RCE	Critical10.0	—	73.4%	Mar 24, 2015
23Monitor	CVE-2015-2682Proof of concept	Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to citrix · command center · CWE-17 Pre-auth	Medium5.0	—	10.7%	Mar 26, 2015
34Monitor	CVE-2015-2746Proof of concept	The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series websense · triton · CWE-77 RCE Command injection	Medium6.5	—	25.4%	Mar 26, 2015
36Monitor	CVE-2014-9705No exploit	Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, aphp · php · CWE-119 pre-auth RCE Memory safety	High7.5	—	19.2%	Mar 30, 2015
25Monitor	CVE-2014-9709No exploit	The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers tphp · php · CWE-119 Pre-auth Memory safety Denial of service	Medium5.0	—	15.4%	Mar 30, 2015
43Plan	CVE-2015-0273Proof of concept	Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remotphp · php pre-auth RCE	High7.5	—	43.8%	Mar 30, 2015
34Monitor	CVE-2015-2301No exploit	Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote php · php · CWE-416 Pre-auth Memory safety	High7.5	—	14.6%	Mar 30, 2015
38Monitor	CVE-2015-2331No exploit	Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.php · php · CWE-189 pre-auth RCE	High7.5	—	27.3%	Mar 30, 2015
34Monitor	CVE-2015-2787No exploit	Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.php · php pre-auth RCE	High7.5	—	12.2%	Mar 30, 2015
45Plan	CVE-2015-1815Proof of concept	The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commselinux · setroubleshoot · CWE-77 pre-auth RCE Command injection	Critical10.0	—	16.4%	Mar 30, 2015
24Monitor	CVE-2015-2790Proof of concept	Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash)foxitsoftware · enterprise reader · CWE-20 Pre-auth Denial of service	Medium4.3	—	24.5%	Mar 30, 2015
29Monitor	CVE-2015-2791Proof of concept	The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus vwpml · wpml · CWE-264 Pre-auth	Medium6.4	—	13.2%	Mar 30, 2015
44Plan	CVE-2014-7876No exploit	Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmwarhp · integrated lights-out 2 firmware pre-auth RCE	Critical10.0	—	12.7%	Mar 31, 2015
40Plan	CVE-2014-9707Weaponized	EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a .embedthis · goahead · CWE-17 pre-auth RCE Path traversal	High7.5	—	28.2%	Mar 31, 2015
37Monitor	CVE-2014-9708No exploit	Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Ranembedthis · appweb · CWE-476 Pre-auth Memory safety Denial of service	Medium5.0	—	56.1%	Mar 31, 2015
36Monitor	CVE-2015-2808No exploit	The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initializatiooracle · communications application session controller · CWE-327 Pre-auth Weak crypto	Low3.7	—	73.8%	Mar 31, 2015

CVE-2015-2196
33Monitor
SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the c
HighCVSS 7.5Proof of conceptEPSS 10%
- pre-auth RCE
- SQL injection
web-dorado · spider calendarMar 3, 2015
CVE-2015-1637
21Monitor
Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi
MediumCVSS 4.3No exploitEPSS 13%
- Pre-auth
microsoft · windows 7Mar 6, 2015
CVE-2015-2177
40Plan
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) T
HighCVSS 7.5Proof of conceptEPSS 33%
- Pre-auth
- Denial of service
siemens · simatic s7-300 cpu firmwareMar 6, 2015
CVE-2015-0228
25Monitor
The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to c
MediumCVSS 5.0No exploitEPSS 16%
- Pre-auth
- Denial of service
apache · http serverMar 7, 2015
CVE-2015-2094
34Monitor
Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary co
HighCVSS 7.5Proof of conceptEPSS 14%
- pre-auth RCE
- Memory safety
webgateinc · winrdsMar 9, 2015
CVE-2015-2097
37Monitor
Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified
HighCVSS 7.5Proof of conceptEPSS 22%
- pre-auth RCE
- Memory safety
webgate · webgate embedded standard protocol sdkMar 9, 2015
CVE-2014-7888
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2014-7889
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2014-7890
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2014-7891
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2014-7892
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2014-7893
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2014-7894
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2014-7895
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2014-7897
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2014-7898
43Plan
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via un
CriticalCVSS 10.0No exploitEPSS 10%
- pre-auth RCE
hp · ole point of sale driverMar 9, 2015
CVE-2015-0254
34Monitor
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a cr
HighCVSS 7.5No exploitEPSS 12%
- pre-auth RCE
- XXE
apache · standard taglibsMar 9, 2015
CVE-2014-9566
44Plan
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 20
HighCVSS 7.5WeaponizedEPSS 46%
- pre-auth RCE
- SQL injection
solarwinds · orion ip address managerMar 10, 2015
CVE-2015-1067
23Monitor
Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitio
MediumCVSS 4.3No exploitEPSS 19%
- Pre-auth
apple · mac os xMar 10, 2015
CVE-2015-0005
23Monitor
The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a D
MediumCVSS 4.3No exploitEPSS 18%
microsoft · windows 2003 serverMar 11, 2015
CVE-2015-0032
44Plan
vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers
CriticalCVSS 9.3No exploitEPSS 22%
- pre-auth RCE
microsoft · vbscriptMar 11, 2015
CVE-2015-0056
42Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3No exploitEPSS 15%
- pre-auth RCE
microsoft · internet explorerMar 11, 2015
CVE-2015-0074
21Monitor
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
MediumCVSS 4.3No exploitEPSS 14%
- Pre-auth
- Memory safety
- Denial of service
microsoft · windows 7Mar 11, 2015
CVE-2015-0076
22Monitor
The photo-decoder implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,
MediumCVSS 4.3No exploitEPSS 15%
- Pre-auth
- Info leak
microsoft · windows 7Mar 11, 2015
CVE-2015-0079
36Monitor
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 all
HighCVSS 7.8No exploitEPSS 16%
- Pre-auth
- Denial of service
microsoft · windows 7Mar 11, 2015
CVE-2015-0080
22Monitor
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Ser
MediumCVSS 4.3No exploitEPSS 15%
- Pre-auth
- Info leak
microsoft · windows 7Mar 11, 2015
CVE-2015-0081
44Plan
Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wind
CriticalCVSS 9.3Proof of conceptEPSS 23%
- pre-auth RCE
microsoft · windows 7Mar 11, 2015
CVE-2015-0086
41Plan
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibilit
CriticalCVSS 9.3No exploitEPSS 14%
- pre-auth RCE
microsoft · officeMar 11, 2015
CVE-2015-0087
26Monitor
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
MediumCVSS 5.0No exploitEPSS 21%
- Pre-auth
- Info leak
microsoft · windows 7Mar 11, 2015
CVE-2015-0088
43Plan
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
microsoft · windows 7Mar 11, 2015
CVE-2015-0089
26Monitor
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
MediumCVSS 5.0No exploitEPSS 21%
- Pre-auth
- Info leak
microsoft · windows 7Mar 11, 2015
CVE-2015-0090
43Plan
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
microsoft · windows 7Mar 11, 2015
CVE-2015-0091
43Plan
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
CriticalCVSS 9.3No exploitEPSS 19%
- pre-auth RCE
microsoft · windows 7Mar 11, 2015
CVE-2015-0092
42Plan
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
CriticalCVSS 9.3No exploitEPSS 17%
- pre-auth RCE
microsoft · windows 7Mar 11, 2015
CVE-2015-0093
43Plan
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
CriticalCVSS 9.3No exploitEPSS 20%
- pre-auth RCE
microsoft · windows 7Mar 11, 2015
CVE-2015-0096
58Plan
Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 S
CriticalCVSS 9.3WeaponizedEPSS 70%
- pre-auth RCE
microsoft · windows 7Mar 11, 2015
CVE-2015-0097
49Plan
Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers
CriticalCVSS 9.3Proof of conceptEPSS 40%
- pre-auth RCE
microsoft · excelMar 11, 2015
CVE-2015-0099
42Plan
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3No exploitEPSS 15%
- pre-auth RCE
microsoft · internet explorerMar 11, 2015
CVE-2015-0100
42Plan
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
CriticalCVSS 9.3No exploitEPSS 15%
- pre-auth RCE
- Memory safety
microsoft · internet explorerMar 11, 2015
CVE-2015-1622
42Plan
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
CriticalCVSS 9.3No exploitEPSS 15%
- pre-auth RCE
microsoft · internet explorerMar 11, 2015
CVE-2015-1623
44Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3No exploitEPSS 22%
- pre-auth RCE
microsoft · internet explorerMar 11, 2015
CVE-2015-1624
42Plan
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 15%
- pre-auth RCE
microsoft · internet explorerMar 11, 2015
CVE-2015-1625
42Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 15%
- pre-auth RCE
microsoft · internet explorerMar 11, 2015
CVE-2015-1626
42Plan
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
CriticalCVSS 9.3No exploitEPSS 15%
- pre-auth RCE
microsoft · internet explorerMar 11, 2015
CVE-2015-1627
20Monitor
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation
MediumCVSS 4.3No exploitEPSS 10%
- Pre-auth
microsoft · internet explorerMar 11, 2015
CVE-2015-1632
21Monitor
Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Updat
MediumCVSS 4.3No exploitEPSS 11%
- Pre-auth
- XSS
microsoft · exchange serverMar 11, 2015
CVE-2015-1634
42Plan
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
CriticalCVSS 9.3No exploitEPSS 15%
- pre-auth RCE
microsoft · internet explorerMar 11, 2015
CVE-2015-0085
43Plan
Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 S
CriticalCVSS 9.3No exploitEPSS 18%
- Pre-auth
microsoft · excelMar 11, 2015
CVE-2015-2208
49Plan
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in
HighCVSS 7.5WeaponizedEPSS 61%
- pre-auth RCE
- Command injection
avinu · phpmoadminMar 12, 2015
CVE-2015-0336
58Plan
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows att
CriticalCVSS 9.3WeaponizedEPSS 70%
- pre-auth RCE
adobe · flash playerMar 13, 2015
CVE-2014-7884
40Plan
Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.
CriticalCVSS 9.0Proof of conceptEPSS 11%
hp · arcsight loggerMar 13, 2015
CVE-2015-2281
33Monitor
Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbi
HighCVSS 7.5Proof of conceptEPSS 10%
- pre-auth RCE
- Memory safety
fortinet · single sign onMar 19, 2015
CVE-2015-0208
26Monitor
The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a all
MediumCVSS 4.3No exploitEPSS 29%
- Pre-auth
- Denial of service
openssl · opensslMar 19, 2015
CVE-2015-0209
32Monitor
Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 b
MediumCVSS 6.8No exploitEPSS 16%
- Pre-auth
openssl · opensslMar 19, 2015
CVE-2015-0286
26Monitor
The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0
MediumCVSS 5.0No exploitEPSS 19%
- Pre-auth
- Denial of service
openssl · opensslMar 19, 2015
CVE-2015-0292
43Plan
Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1
HighCVSS 7.5No exploitEPSS 44%
- Pre-auth
- Memory safety
openssl · opensslMar 19, 2015
CVE-2015-0293
26Monitor
The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attacker
MediumCVSS 5.0No exploitEPSS 21%
- Pre-auth
- Denial of service
openssl · opensslMar 19, 2015
CVE-2015-2562
42Plan
Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers t
HighCVSS 7.5WeaponizedEPSS 38%
- pre-auth RCE
- SQL injection
web-dorado · ecommerce wdMar 20, 2015
CVE-2015-0250
30Monitor
XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote at
MediumCVSS 6.4No exploitEPSS 16%
- Pre-auth
- XXE
apache · batikMar 24, 2015
CVE-2015-0252
32Monitor
internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) v
MediumCVSS 5.0Proof of conceptEPSS 39%
- Pre-auth
- Denial of service
apache · xerces-c\+\+Mar 24, 2015
CVE-2015-2153
26Monitor
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of
MediumCVSS 5.0Proof of conceptEPSS 19%
- Pre-auth
- Memory safety
- Denial of service
tcpdump · tcpdumpMar 24, 2015
CVE-2015-2284
62This week
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbi
CriticalCVSS 10.0WeaponizedEPSS 73%
- pre-auth RCE
solarwinds · firewall security managerMar 24, 2015
CVE-2015-2682
23Monitor
Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to
MediumCVSS 5.0Proof of conceptEPSS 10%
- Pre-auth
citrix · command centerMar 26, 2015
CVE-2015-2746
34Monitor
The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series
MediumCVSS 6.5Proof of conceptEPSS 25%
- RCE
- Command injection
websense · tritonMar 26, 2015
CVE-2014-9705
36Monitor
Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, a
HighCVSS 7.5No exploitEPSS 19%
- pre-auth RCE
- Memory safety
php · phpMar 30, 2015
CVE-2014-9709
25Monitor
The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers t
MediumCVSS 5.0No exploitEPSS 15%
- Pre-auth
- Memory safety
- Denial of service
php · phpMar 30, 2015
CVE-2015-0273
43Plan
Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remot
HighCVSS 7.5Proof of conceptEPSS 43%
- pre-auth RCE
php · phpMar 30, 2015
CVE-2015-2301
34Monitor
Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote
HighCVSS 7.5No exploitEPSS 14%
- Pre-auth
- Memory safety
php · phpMar 30, 2015
CVE-2015-2331
38Monitor
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.
HighCVSS 7.5No exploitEPSS 27%
- pre-auth RCE
php · phpMar 30, 2015
CVE-2015-2787
34Monitor
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.
HighCVSS 7.5No exploitEPSS 12%
- pre-auth RCE
php · phpMar 30, 2015
CVE-2015-1815
45Plan
The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary comm
CriticalCVSS 10.0Proof of conceptEPSS 16%
- pre-auth RCE
- Command injection
selinux · setroubleshootMar 30, 2015
CVE-2015-2790
24Monitor
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash)
MediumCVSS 4.3Proof of conceptEPSS 24%
- Pre-auth
- Denial of service
foxitsoftware · enterprise readerMar 30, 2015
CVE-2015-2791
29Monitor
The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus v
MediumCVSS 6.4Proof of conceptEPSS 13%
- Pre-auth
wpml · wpmlMar 30, 2015
CVE-2014-7876
44Plan
Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmwar
CriticalCVSS 10.0No exploitEPSS 12%
- pre-auth RCE
hp · integrated lights-out 2 firmwareMar 31, 2015
CVE-2014-9707
40Plan
EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a .
HighCVSS 7.5WeaponizedEPSS 28%
- pre-auth RCE
- Path traversal
embedthis · goaheadMar 31, 2015
CVE-2014-9708
37Monitor
Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Ran
MediumCVSS 5.0No exploitEPSS 56%
- Pre-auth
- Memory safety
- Denial of service
embedthis · appwebMar 31, 2015
CVE-2015-2808
36Monitor
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initializatio
LowCVSS 3.7No exploitEPSS 73%
- Pre-auth
- Weak crypto
oracle · communications application session controllerMar 31, 2015