Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2015

103 records · 5 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 1 of 2

  • CVE-2015-3440
    22Monitor

    Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web

    MediumCVSS 4.3Proof of conceptEPSS 16%

    wordpress · wordpressAug 3, 2015

  • CVE-2015-4495
    86Now

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass

    HighCVSS 8.8KEVWeaponizedEPSS 68%

    mozilla · firefoxAug 7, 2015

  • CVE-2015-3245
    40Plan

    Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper progra

    LowCVSS 2.1WeaponizedEPSS 5%

    redhat · libuserAug 11, 2015

  • CVE-2015-3246
    62This week

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, w

    HighCVSS 7.4KEVWeaponizedEPSS 8%

    redhat · enterprise linuxAug 11, 2015

  • CVE-2015-3184
    23Monitor

    mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict an

    MediumCVSS 5.0No exploitEPSS 10%

    apache · subversionAug 12, 2015

  • CVE-2015-5165
    41Plan

    The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to

    CriticalCVSS 9.3No exploitEPSS 13%

    xen · xenAug 12, 2015

  • CVE-2015-3253
    51Plan

    The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code

    CriticalCVSS 9.8No exploitEPSS 41%

    apache · groovyAug 13, 2015

  • CVE-2015-4666
    25Monitor

    Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrar

    MediumCVSS 5.0Proof of conceptEPSS 16%

    xceedium · xsuiteAug 13, 2015

  • CVE-2015-5127
    55Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 50%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5129
    43Plan

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18

    CriticalCVSS 10.0No exploitEPSS 10%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5130
    55Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 50%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5131
    55Plan

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A

    CriticalCVSS 10.0Proof of conceptEPSS 50%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5132
    55Plan

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A

    CriticalCVSS 10.0Proof of conceptEPSS 50%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5133
    55Plan

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A

    CriticalCVSS 10.0Proof of conceptEPSS 50%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5134
    55Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 50%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5539
    54Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 45%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5540
    54Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 45%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5541
    43Plan

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18

    CriticalCVSS 10.0No exploitEPSS 10%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5544
    51Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    adobe · airAug 13, 2015

  • CVE-2015-5545
    51Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5546
    51Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    adobe · airAug 13, 2015

  • CVE-2015-5547
    51Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5548
    51Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5549
    51Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 38%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5550
    53Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 44%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5551
    53Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 44%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5554
    53Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 43%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5555
    53Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 43%

    adobe · airAug 13, 2015

  • CVE-2015-5556
    53Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 44%

    adobe · airAug 13, 2015

  • CVE-2015-5557
    53Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 44%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5558
    53Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 43%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5560
    60This week

    Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,

    CriticalCVSS 10.0Proof of conceptEPSS 65%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5561
    53Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 44%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5562
    53Plan

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    CriticalCVSS 10.0Proof of conceptEPSS 44%

    adobe · flash playerAug 13, 2015

  • CVE-2015-5563
    54Plan

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    CriticalCVSS 10.0Proof of conceptEPSS 45%

    adobe · airAug 13, 2015

  • CVE-2015-2441
    43Plan

    Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · edgeAug 14, 2015

  • CVE-2015-2442
    42Plan

    Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    CriticalCVSS 9.3No exploitEPSS 15%

    microsoft · internet explorerAug 14, 2015

  • CVE-2015-2443
    44Plan

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    CriticalCVSS 9.3No exploitEPSS 23%

    microsoft · internet explorerAug 14, 2015

  • CVE-2015-2444
    47Plan

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    CriticalCVSS 9.3Proof of conceptEPSS 33%

    microsoft · internet explorerAug 14, 2015

  • CVE-2015-2445
    21Monitor

    Microsoft Internet Explorer 10 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."

    MediumCVSS 4.3No exploitEPSS 13%

    microsoft · internet explorerAug 14, 2015

  • CVE-2015-2446
    42Plan

    Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi

    CriticalCVSS 9.3No exploitEPSS 15%

    microsoft · edgeAug 14, 2015

  • CVE-2015-2447
    44Plan

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    CriticalCVSS 9.3No exploitEPSS 23%

    microsoft · internet explorerAug 14, 2015

  • CVE-2015-2448
    42Plan

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · internet explorerAug 14, 2015

  • CVE-2015-2449
    22Monitor

    Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka

    MediumCVSS 4.3No exploitEPSS 15%

    microsoft · internet explorerAug 14, 2015

  • CVE-2015-2450
    42Plan

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · internet explorerAug 14, 2015

  • CVE-2015-2451
    42Plan

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    CriticalCVSS 9.3No exploitEPSS 18%

    microsoft · internet explorerAug 14, 2015

  • CVE-2015-2452
    42Plan

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    CriticalCVSS 9.3No exploitEPSS 15%

    microsoft · internet explorerAug 14, 2015

  • CVE-2014-3576
    34Monitor

    The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a de

    HighCVSS 7.5Proof of conceptEPSS 12%

    apache · activemqAug 14, 2015

  • CVE-2015-1642
    77This week

    Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft O

    HighCVSS 7.8KEVWeaponizedEPSS 53%

    microsoft · officeAug 14, 2015

  • CVE-2015-1769
    57Plan

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012

    MediumCVSS 6.6KEVWeaponizedEPSS 4%

    microsoft · windows 10Aug 14, 2015

  • CVE-2015-2431
    46Plan

    Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 all

    CriticalCVSS 9.3Proof of conceptEPSS 29%

    microsoft · live meetingAug 14, 2015

  • CVE-2015-2432
    46Plan

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    CriticalCVSS 9.3Proof of conceptEPSS 30%

    microsoft · windows 7Aug 14, 2015

  • CVE-2015-2433
    40Plan

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go

    LowCVSS 2.1WeaponizedEPSS 17%

    microsoft · windows 10Aug 14, 2015

  • CVE-2015-2434
    22Monitor

    Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mech

    MediumCVSS 4.3No exploitEPSS 15%

    microsoft · xml core servicesAug 14, 2015

  • CVE-2015-2435
    44Plan

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    CriticalCVSS 9.3No exploitEPSS 21%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2440
    23Monitor

    Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "M

    MediumCVSS 4.3No exploitEPSS 18%

    microsoft · xml core servicesAug 14, 2015

  • CVE-2015-2455
    48Plan

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    CriticalCVSS 9.3Proof of conceptEPSS 37%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2456
    48Plan

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    CriticalCVSS 9.3Proof of conceptEPSS 35%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2458
    47Plan

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    CriticalCVSS 9.3Proof of conceptEPSS 32%

    microsoft · windows 10Aug 14, 2015

  • CVE-2015-2459
    47Plan

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    CriticalCVSS 9.3Proof of conceptEPSS 32%

    microsoft · windows 10Aug 14, 2015

  • CVE-2015-2460
    46Plan

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    CriticalCVSS 9.3Proof of conceptEPSS 31%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2461
    48Plan

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    CriticalCVSS 9.3Proof of conceptEPSS 36%

    microsoft · windows 10Aug 14, 2015

  • CVE-2015-2462
    48Plan

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    CriticalCVSS 9.3Proof of conceptEPSS 35%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2463
    47Plan

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    CriticalCVSS 9.3Proof of conceptEPSS 34%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2464
    48Plan

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    CriticalCVSS 9.3Proof of conceptEPSS 35%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2471
    22Monitor

    Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protectio

    MediumCVSS 4.3No exploitEPSS 15%

    microsoft · xml core servicesAug 14, 2015

  • CVE-2015-2473
    45Plan

    Untrusted search path vulnerability in the client in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows 7 SP1 and Windows Server

    CriticalCVSS 9.3No exploitEPSS 25%

    microsoft · windows 7Aug 14, 2015

  • CVE-2015-2474
    45Plan

    Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server

    CriticalCVSS 9.0No exploitEPSS 30%

    microsoft · windows server 2008Aug 14, 2015

  • CVE-2015-2475
    21Monitor

    Cross-site scripting (XSS) vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and

    MediumCVSS 4.3No exploitEPSS 14%

    microsoft · biztalk serverAug 14, 2015

  • CVE-2015-2476
    13Monitor

    The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server

    LowCVSS 2.6No exploitEPSS 11%

    microsoft · windows 7Aug 14, 2015

  • CVE-2015-2479
    42Plan

    The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers

    CriticalCVSS 9.3No exploitEPSS 16%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2480
    41Plan

    The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers

    CriticalCVSS 9.3No exploitEPSS 14%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2481
    41Plan

    The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers

    CriticalCVSS 9.3No exploitEPSS 14%

    microsoft · .net frameworkAug 14, 2015

  • CVE-2015-2423
    23Monitor

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    MediumCVSS 4.3No exploitEPSS 19%

    microsoft · excelAug 15, 2015

  • CVE-2015-2466
    42Plan

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka

    CriticalCVSS 9.3No exploitEPSS 17%

    microsoft · officeAug 15, 2015

  • CVE-2015-2467
    45Plan

    Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption

    CriticalCVSS 9.3Proof of conceptEPSS 27%

    microsoft · officeAug 15, 2015

  • CVE-2015-2468
    46Plan

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office C

    CriticalCVSS 9.3Proof of conceptEPSS 29%

    microsoft · officeAug 15, 2015

  • CVE-2015-2469
    45Plan

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a craf

    CriticalCVSS 9.3Proof of conceptEPSS 26%

    microsoft · officeAug 15, 2015

  • CVE-2015-2470
    45Plan

    Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer a

    CriticalCVSS 9.3Proof of conceptEPSS 26%

    microsoft · officeAug 15, 2015

  • CVE-2015-2477
    41Plan

    Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a

    CriticalCVSS 9.3No exploitEPSS 13%

    microsoft · officeAug 15, 2015

  • CVE-2015-3760
    40Plan

    dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via u

    HighCVSS 7.2WeaponizedEPSS 1%

    apple · mac os xAug 16, 2015

  • CVE-2015-3783
    41Plan

    SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and

    HighCVSS 7.5Proof of conceptEPSS 35%

    apple · mac os xAug 16, 2015

  • CVE-2015-3796
    34Monitor

    The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or ca

    HighCVSS 7.5Proof of conceptEPSS 12%

    apple · iphone osAug 16, 2015

  • CVE-2015-3798
    34Monitor

    The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or ca

    HighCVSS 7.5Proof of conceptEPSS 13%

    apple · iphone osAug 16, 2015

  • CVE-2015-5531
    48Plan

    Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors rela

    MediumCVSS 5.0WeaponizedEPSS 94%

    elasticsearch · elasticsearchAug 17, 2015

  • CVE-2015-4029
    23Monitor

    Cross-site scripting (XSS) vulnerability in the WebGUI in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTM

    MediumCVSS 4.3No exploitEPSS 20%

    netgate · pfsenseAug 18, 2015

  • CVE-2015-2502
    80Now

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    HighCVSS 8.8KEVWeaponizedEPSS 51%

    microsoft · internet explorerAug 19, 2015

  • CVE-2015-1830
    45Plan

    Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for

    MediumCVSS 5.0WeaponizedEPSS 84%

    apache · activemqAug 19, 2015

  • CVE-2015-5621
    42Plan

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item

    HighCVSS 7.5Proof of conceptEPSS 40%

    net-snmp · net-snmpAug 19, 2015

  • CVE-2015-6522
    52Plan

    SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands v

    HighCVSS 7.5WeaponizedEPSS 74%

    wpsymposium · wp symposiumAug 19, 2015

  • CVE-2015-6251
    26Monitor

    Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long Dis

    MediumCVSS 5.0No exploitEPSS 19%

    gnu · gnutlsAug 24, 2015

  • CVE-2015-5416
    33Monitor

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 11%

    hp · keyviewAug 24, 2015

  • CVE-2015-5417
    33Monitor

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 10%

    hp · keyviewAug 24, 2015

  • CVE-2015-5418
    33Monitor

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 10%

    hp · keyviewAug 24, 2015

  • CVE-2015-5419
    33Monitor

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 10%

    hp · keyviewAug 24, 2015

  • CVE-2015-5420
    33Monitor

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 10%

    hp · keyviewAug 24, 2015

  • CVE-2015-5421
    33Monitor

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 10%

    hp · keyviewAug 24, 2015

  • CVE-2015-5422
    33Monitor

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 10%

    hp · keyviewAug 24, 2015

  • CVE-2015-5423
    33Monitor

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 10%

    hp · keyviewAug 24, 2015

  • CVE-2015-5424
    33Monitor

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    HighCVSS 7.5No exploitEPSS 10%

    hp · keyviewAug 24, 2015