Skip to content
Noroxi

By publication date

Exploited and new serious CVEs: August 2015

103 records · 5 KEV. In publication order.

Included: records in CISA KEV, with a weaponized exploit, with EPSS of 10% or more, with a public PoC and published in the last 3 years, and CVSS 7+ records published in the last 90 days. All other records are in search and vendor pages.

Month boundaries are UTC, the same rule as the publication date on each record page.

Page 2 of 2

  • CVE-2015-5949
    31Monitor

    VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a craft

    MediumCVSS 6.8No exploitEPSS 13%

    videolan · vlc media playerAug 25, 2015

  • CVE-2015-3221
    19Monitor

    OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authent

    MediumCVSS 4.0Proof of conceptEPSS 11%

    openstack · neutronAug 26, 2015

  • Stack-based buffer overflow in GSM SIM Utility (aka SIM Card Editor) 6.6 allows remote attackers to execute arbitrary code via a long entry

    CriticalCVSS 10.0WeaponizedEPSS 62%

    gsm · sim card editorAug 28, 2015