Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: август 2015 г.

103 записей · 5 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

Страница 1 из 2

  • CVE-2015-3440
    22Наблюдать

    Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web

    СредняяCVSS 4,3Proof of conceptEPSS 16 %

    wordpress · wordpress3 авг. 2015 г.

  • CVE-2015-4495
    86Срочно

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 68 %

    mozilla · firefox7 авг. 2015 г.

  • CVE-2015-3245
    40В плане

    Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper progra

    НизкаяCVSS 2,1Готовый эксплойтEPSS 5 %

    redhat · libuser11 авг. 2015 г.

  • CVE-2015-3246
    62На этой неделе

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, w

    ВысокаяCVSS 7,4KEVГотовый эксплойтEPSS 8 %

    redhat · enterprise linux11 авг. 2015 г.

  • CVE-2015-3184
    23Наблюдать

    mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict an

    СредняяCVSS 5,0Эксплойта нетEPSS 10 %

    apache · subversion12 авг. 2015 г.

  • CVE-2015-5165
    41В плане

    The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    xen · xen12 авг. 2015 г.

  • CVE-2015-3253
    51В плане

    The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code

    КритическаяCVSS 9,8Эксплойта нетEPSS 41 %

    apache · groovy13 авг. 2015 г.

  • CVE-2015-4666
    25Наблюдать

    Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrar

    СредняяCVSS 5,0Proof of conceptEPSS 16 %

    xceedium · xsuite13 авг. 2015 г.

  • CVE-2015-5127
    55В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 50 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5129
    43В плане

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5130
    55В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 50 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5131
    55В плане

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A

    КритическаяCVSS 10,0Proof of conceptEPSS 50 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5132
    55В плане

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A

    КритическаяCVSS 10,0Proof of conceptEPSS 50 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5133
    55В плане

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A

    КритическаяCVSS 10,0Proof of conceptEPSS 50 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5134
    55В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 50 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5539
    54В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 45 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5540
    54В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 45 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5541
    43В плане

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18

    КритическаяCVSS 10,0Эксплойта нетEPSS 10 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5544
    51В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 38 %

    adobe · air13 авг. 2015 г.

  • CVE-2015-5545
    51В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 38 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5546
    51В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 38 %

    adobe · air13 авг. 2015 г.

  • CVE-2015-5547
    51В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 38 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5548
    51В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 38 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5549
    51В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 38 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5550
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 44 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5551
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 44 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5554
    53В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5555
    53В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · air13 авг. 2015 г.

  • CVE-2015-5556
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 44 %

    adobe · air13 авг. 2015 г.

  • CVE-2015-5557
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 44 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5558
    53В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5560
    60На этой неделе

    Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,

    КритическаяCVSS 10,0Proof of conceptEPSS 65 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5561
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 44 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5562
    53В плане

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    КритическаяCVSS 10,0Proof of conceptEPSS 44 %

    adobe · flash player13 авг. 2015 г.

  • CVE-2015-5563
    54В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    КритическаяCVSS 10,0Proof of conceptEPSS 45 %

    adobe · air13 авг. 2015 г.

  • CVE-2015-2441
    43В плане

    Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · edge14 авг. 2015 г.

  • CVE-2015-2442
    42В плане

    Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    КритическаяCVSS 9,3Эксплойта нетEPSS 15 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2015-2443
    44В плане

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2015-2444
    47В плане

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Proof of conceptEPSS 33 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2015-2445
    21Наблюдать

    Microsoft Internet Explorer 10 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."

    СредняяCVSS 4,3Эксплойта нетEPSS 13 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2015-2446
    42В плане

    Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi

    КритическаяCVSS 9,3Эксплойта нетEPSS 15 %

    microsoft · edge14 авг. 2015 г.

  • CVE-2015-2447
    44В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Эксплойта нетEPSS 23 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2015-2448
    42В плане

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2015-2449
    22Наблюдать

    Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka

    СредняяCVSS 4,3Эксплойта нетEPSS 15 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2015-2450
    42В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2015-2451
    42В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2015-2452
    42В плане

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Эксплойта нетEPSS 15 %

    microsoft · internet explorer14 авг. 2015 г.

  • CVE-2014-3576
    34Наблюдать

    The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a de

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    apache · activemq14 авг. 2015 г.

  • CVE-2015-1642
    77На этой неделе

    Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft O

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 53 %

    microsoft · office14 авг. 2015 г.

  • CVE-2015-1769
    57В плане

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012

    СредняяCVSS 6,6KEVГотовый эксплойтEPSS 4 %

    microsoft · windows 1014 авг. 2015 г.

  • CVE-2015-2431
    46В плане

    Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 all

    КритическаяCVSS 9,3Proof of conceptEPSS 29 %

    microsoft · live meeting14 авг. 2015 г.

  • CVE-2015-2432
    46В плане

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    КритическаяCVSS 9,3Proof of conceptEPSS 30 %

    microsoft · windows 714 авг. 2015 г.

  • CVE-2015-2433
    40В плане

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go

    НизкаяCVSS 2,1Готовый эксплойтEPSS 17 %

    microsoft · windows 1014 авг. 2015 г.

  • CVE-2015-2434
    22Наблюдать

    Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mech

    СредняяCVSS 4,3Эксплойта нетEPSS 15 %

    microsoft · xml core services14 авг. 2015 г.

  • CVE-2015-2435
    44В плане

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    КритическаяCVSS 9,3Эксплойта нетEPSS 21 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2440
    23Наблюдать

    Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "M

    СредняяCVSS 4,3Эксплойта нетEPSS 18 %

    microsoft · xml core services14 авг. 2015 г.

  • CVE-2015-2455
    48В плане

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    КритическаяCVSS 9,3Proof of conceptEPSS 37 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2456
    48В плане

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    КритическаяCVSS 9,3Proof of conceptEPSS 35 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2458
    47В плане

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    КритическаяCVSS 9,3Proof of conceptEPSS 32 %

    microsoft · windows 1014 авг. 2015 г.

  • CVE-2015-2459
    47В плане

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    КритическаяCVSS 9,3Proof of conceptEPSS 32 %

    microsoft · windows 1014 авг. 2015 г.

  • CVE-2015-2460
    46В плане

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    КритическаяCVSS 9,3Proof of conceptEPSS 31 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2461
    48В плане

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    КритическаяCVSS 9,3Proof of conceptEPSS 36 %

    microsoft · windows 1014 авг. 2015 г.

  • CVE-2015-2462
    48В плане

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    КритическаяCVSS 9,3Proof of conceptEPSS 35 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2463
    47В плане

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    КритическаяCVSS 9,3Proof of conceptEPSS 34 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2464
    48В плане

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    КритическаяCVSS 9,3Proof of conceptEPSS 35 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2471
    22Наблюдать

    Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protectio

    СредняяCVSS 4,3Эксплойта нетEPSS 15 %

    microsoft · xml core services14 авг. 2015 г.

  • CVE-2015-2473
    45В плане

    Untrusted search path vulnerability in the client in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows 7 SP1 and Windows Server

    КритическаяCVSS 9,3Эксплойта нетEPSS 25 %

    microsoft · windows 714 авг. 2015 г.

  • CVE-2015-2474
    45В плане

    Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server

    КритическаяCVSS 9,0Эксплойта нетEPSS 30 %

    microsoft · windows server 200814 авг. 2015 г.

  • CVE-2015-2475
    21Наблюдать

    Cross-site scripting (XSS) vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and

    СредняяCVSS 4,3Эксплойта нетEPSS 14 %

    microsoft · biztalk server14 авг. 2015 г.

  • CVE-2015-2476
    13Наблюдать

    The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server

    НизкаяCVSS 2,6Эксплойта нетEPSS 11 %

    microsoft · windows 714 авг. 2015 г.

  • CVE-2015-2479
    42В плане

    The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers

    КритическаяCVSS 9,3Эксплойта нетEPSS 16 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2480
    41В плане

    The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers

    КритическаяCVSS 9,3Эксплойта нетEPSS 14 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2481
    41В плане

    The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers

    КритическаяCVSS 9,3Эксплойта нетEPSS 14 %

    microsoft · .net framework14 авг. 2015 г.

  • CVE-2015-2423
    23Наблюдать

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    СредняяCVSS 4,3Эксплойта нетEPSS 19 %

    microsoft · excel15 авг. 2015 г.

  • CVE-2015-2466
    42В плане

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka

    КритическаяCVSS 9,3Эксплойта нетEPSS 17 %

    microsoft · office15 авг. 2015 г.

  • CVE-2015-2467
    45В плане

    Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption

    КритическаяCVSS 9,3Proof of conceptEPSS 27 %

    microsoft · office15 авг. 2015 г.

  • CVE-2015-2468
    46В плане

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office C

    КритическаяCVSS 9,3Proof of conceptEPSS 29 %

    microsoft · office15 авг. 2015 г.

  • CVE-2015-2469
    45В плане

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 26 %

    microsoft · office15 авг. 2015 г.

  • CVE-2015-2470
    45В плане

    Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer a

    КритическаяCVSS 9,3Proof of conceptEPSS 26 %

    microsoft · office15 авг. 2015 г.

  • CVE-2015-2477
    41В плане

    Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · office15 авг. 2015 г.

  • CVE-2015-3760
    40В плане

    dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via u

    ВысокаяCVSS 7,2Готовый эксплойтEPSS 1 %

    apple · mac os x16 авг. 2015 г.

  • CVE-2015-3783
    41В плане

    SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and

    ВысокаяCVSS 7,5Proof of conceptEPSS 35 %

    apple · mac os x16 авг. 2015 г.

  • CVE-2015-3796
    34Наблюдать

    The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or ca

    ВысокаяCVSS 7,5Proof of conceptEPSS 12 %

    apple · iphone os16 авг. 2015 г.

  • CVE-2015-3798
    34Наблюдать

    The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or ca

    ВысокаяCVSS 7,5Proof of conceptEPSS 13 %

    apple · iphone os16 авг. 2015 г.

  • CVE-2015-5531
    48В плане

    Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors rela

    СредняяCVSS 5,0Готовый эксплойтEPSS 94 %

    elasticsearch · elasticsearch17 авг. 2015 г.

  • CVE-2015-4029
    23Наблюдать

    Cross-site scripting (XSS) vulnerability in the WebGUI in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTM

    СредняяCVSS 4,3Эксплойта нетEPSS 20 %

    netgate · pfsense18 авг. 2015 г.

  • CVE-2015-2502
    80Срочно

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 51 %

    microsoft · internet explorer19 авг. 2015 г.

  • CVE-2015-1830
    45В плане

    Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for

    СредняяCVSS 5,0Готовый эксплойтEPSS 84 %

    apache · activemq19 авг. 2015 г.

  • CVE-2015-5621
    42В плане

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item

    ВысокаяCVSS 7,5Proof of conceptEPSS 40 %

    net-snmp · net-snmp19 авг. 2015 г.

  • CVE-2015-6522
    52В плане

    SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands v

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 74 %

    wpsymposium · wp symposium19 авг. 2015 г.

  • CVE-2015-6251
    26Наблюдать

    Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long Dis

    СредняяCVSS 5,0Эксплойта нетEPSS 19 %

    gnu · gnutls24 авг. 2015 г.

  • CVE-2015-5416
    33Наблюдать

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 11 %

    hp · keyview24 авг. 2015 г.

  • CVE-2015-5417
    33Наблюдать

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · keyview24 авг. 2015 г.

  • CVE-2015-5418
    33Наблюдать

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · keyview24 авг. 2015 г.

  • CVE-2015-5419
    33Наблюдать

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · keyview24 авг. 2015 г.

  • CVE-2015-5420
    33Наблюдать

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · keyview24 авг. 2015 г.

  • CVE-2015-5421
    33Наблюдать

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · keyview24 авг. 2015 г.

  • CVE-2015-5422
    33Наблюдать

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · keyview24 авг. 2015 г.

  • CVE-2015-5423
    33Наблюдать

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · keyview24 авг. 2015 г.

  • CVE-2015-5424
    33Наблюдать

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    hp · keyview24 авг. 2015 г.