Перейти к содержимому
Noroxi

По дате публикации

Эксплуатируемые и новые серьёзные CVE: декабрь 2015 г.

96 записей · 4 KEV. В порядке публикации.

В списке: записи из каталога CISA KEV, с боевым эксплойтом, с EPSS от 10%, с публичным PoC и датой публикации в последние 3 года, а также записи с CVSS от 7, опубликованные за последние 90 дней. Остальные записи доступны через поиск и страницы производителей.

Границы месяца считаются по UTC, как и дата публикации на странице записи.

  • CVE-2015-3193
    38Наблюдать

    The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by th

    ВысокаяCVSS 7,5Эксплойта нетEPSS 25 %

    openssl · openssl6 дек. 2015 г.

  • CVE-2015-3194
    43В плане

    crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL poi

    ВысокаяCVSS 7,5Proof of conceptEPSS 44 %

    openssl · openssl6 дек. 2015 г.

  • CVE-2015-3195
    33Наблюдать

    The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.

    СредняяCVSS 5,3Proof of conceptEPSS 38 %

    openssl · openssl6 дек. 2015 г.

  • CVE-2015-3196
    21Наблюдать

    ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes th

    СредняяCVSS 4,3Эксплойта нетEPSS 13 %

    openssl · openssl6 дек. 2015 г.

  • CVE-2015-5287
    63На этой неделе

    The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain priv

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 5 %

    redhat · automatic bug reporting tool7 дек. 2015 г.

  • CVE-2015-3628
    57В плане

    The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6,

    КритическаяCVSS 9,0Готовый эксплойтEPSS 69 %

    f5 · big-iq security7 дек. 2015 г.

  • CVE-2015-6040
    41В плане

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remo

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · excel9 дек. 2015 г.

  • CVE-2015-6083
    43В плане

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6106
    42В плане

    The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for B

    КритическаяCVSS 9,3Эксплойта нетEPSS 17 %

    microsoft · live meeting9 дек. 2015 г.

  • CVE-2015-6107
    42В плане

    The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · live meeting9 дек. 2015 г.

  • CVE-2015-6108
    45В плане

    The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows

    КритическаяCVSS 9,3Эксплойта нетEPSS 25 %

    microsoft · live meeting9 дек. 2015 г.

  • CVE-2015-6114
    23Наблюдать

    Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Mic

    СредняяCVSS 4,3Эксплойта нетEPSS 19 %

    microsoft · silverlight9 дек. 2015 г.

  • CVE-2015-6118
    41В плане

    Microsoft Office 2007 SP3 and Office 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · office9 дек. 2015 г.

  • CVE-2015-6122
    41В плане

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to exec

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · excel9 дек. 2015 г.

  • CVE-2015-6124
    41В плане

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote att

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · office9 дек. 2015 г.

  • CVE-2015-6125
    46В плане

    Use-after-free vulnerability in the DNS server in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote att

    КритическаяCVSS 9,3Эксплойта нетEPSS 29 %

    microsoft · windows server 20089 дек. 2015 г.

  • CVE-2015-6127
    40В плане

    Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary fil

    СредняяCVSS 4,3Готовый эксплойтEPSS 46 %

    microsoft · windows 79 дек. 2015 г.

  • CVE-2015-6128
    53В плане

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to ga

    ВысокаяCVSS 7,2Готовый эксплойтEPSS 81 %

    microsoft · windows 79 дек. 2015 г.

  • CVE-2015-6130
    43В плане

    Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code v

    КритическаяCVSS 9,3Эксплойта нетEPSS 20 %

    microsoft · windows 79 дек. 2015 г.

  • CVE-2015-6131
    46В плане

    Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to execute arbitrary

    КритическаяCVSS 9,3Proof of conceptEPSS 30 %

    microsoft · windows 79 дек. 2015 г.

  • CVE-2015-6132
    53В плане

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    ВысокаяCVSS 7,2Готовый эксплойтEPSS 84 %

    microsoft · windows 109 дек. 2015 г.

  • CVE-2015-6133
    48В плане

    Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library l

    ВысокаяCVSS 7,2Готовый эксплойтEPSS 66 %

    microsoft · windows 109 дек. 2015 г.

  • CVE-2015-6134
    43В плане

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6135
    27Наблюдать

    The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al

    СредняяCVSS 5,0Эксплойта нетEPSS 23 %

    microsoft · jscript9 дек. 2015 г.

  • CVE-2015-6136
    44В плане

    The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al

    КритическаяCVSS 9,3Эксплойта нетEPSS 24 %

    microsoft · jscript9 дек. 2015 г.

  • CVE-2015-6138
    21Наблюдать

    Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site

    СредняяCVSS 4,3Эксплойта нетEPSS 12 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6139
    42В плане

    Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attackers to execute arbitrary web script in

    КритическаяCVSS 9,3Эксплойта нетEPSS 15 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6140
    42В плане

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    КритическаяCVSS 9,3Эксплойта нетEPSS 16 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6141
    43В плане

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6142
    43В плане

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6143
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6144
    21Наблюдать

    Microsoft Internet Explorer 8 through 11 and Microsoft Edge mishandle HTML attributes in HTTP responses, which allows remote attackers to by

    СредняяCVSS 4,3Эксплойта нетEPSS 13 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6145
    41В плане

    Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6146
    41В плане

    Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6147
    43В плане

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6148
    43В плане

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6149
    43В плане

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6150
    43В плане

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6151
    43В плане

    Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6152
    47В плане

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Proof of conceptEPSS 34 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6153
    42В плане

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    КритическаяCVSS 9,3Эксплойта нетEPSS 16 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6154
    42В плане

    Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    КритическаяCVSS 9,3Эксплойта нетEPSS 16 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6155
    42В плане

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memo

    КритическаяCVSS 9,3Эксплойта нетEPSS 16 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6156
    41В плане

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6157
    22Наблюдать

    Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Inte

    СредняяCVSS 4,3Эксплойта нетEPSS 16 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6158
    42В плане

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    КритическаяCVSS 9,3Эксплойта нетEPSS 16 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6159
    43В плане

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    КритическаяCVSS 9,3Эксплойта нетEPSS 19 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6160
    43В плане

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Эксплойта нетEPSS 18 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6161
    23Наблюдать

    Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web

    СредняяCVSS 4,3Эксплойта нетEPSS 19 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6162
    41В плане

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6164
    31Наблюдать

    Microsoft Internet Explorer 9 through 11 improperly implements a cross-site scripting (XSS) protection mechanism, which allows remote attack

    СредняяCVSS 6,8Эксплойта нетEPSS 11 %

    microsoft · internet explorer9 дек. 2015 г.

  • CVE-2015-6165
    22Наблюдать

    Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Mic

    СредняяCVSS 4,3Эксплойта нетEPSS 16 %

    microsoft · silverlight9 дек. 2015 г.

  • CVE-2015-6166
    41В плане

    Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds re

    КритическаяCVSS 9,3Эксплойта нетEPSS 14 %

    microsoft · silverlight9 дек. 2015 г.

  • CVE-2015-6168
    46В плане

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    КритическаяCVSS 9,3Proof of conceptEPSS 30 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6172
    53В плане

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow

    КритическаяCVSS 9,3Эксплойта нетEPSS 53 %

    microsoft · office9 дек. 2015 г.

  • CVE-2015-6175
    63На этой неделе

    The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevatio

    ВысокаяCVSS 7,8KEVГотовый эксплойтEPSS 5 %

    microsoft · windows 10 15079 дек. 2015 г.

  • CVE-2015-6176
    21Наблюдать

    Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection

    СредняяCVSS 4,3Proof of conceptEPSS 14 %

    microsoft · edge9 дек. 2015 г.

  • CVE-2015-6177
    41В плане

    Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Off

    КритическаяCVSS 9,3Эксплойта нетEPSS 13 %

    microsoft · excel9 дек. 2015 г.

  • CVE-2015-8048
    49В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 31 %

    adobe · air sdk10 дек. 2015 г.

  • CVE-2015-8410
    49В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 31 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8411
    49В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 31 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8412
    49В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 31 %

    adobe · air10 дек. 2015 г.

  • CVE-2015-8413
    49В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 31 %

    adobe · air10 дек. 2015 г.

  • CVE-2015-8420
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8421
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8422
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8423
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · air sdk10 дек. 2015 г.

  • CVE-2015-8424
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8425
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · air10 дек. 2015 г.

  • CVE-2015-8426
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8427
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8428
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8429
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8430
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · air10 дек. 2015 г.

  • CVE-2015-8431
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-8434
    53В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    КритическаяCVSS 10,0Proof of conceptEPSS 43 %

    adobe · flash player10 дек. 2015 г.

  • CVE-2015-7039
    30Наблюдать

    Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to exe

    СредняяCVSS 6,8Proof of conceptEPSS 11 %

    apple · tvos11 дек. 2015 г.

  • CVE-2015-7803
    30Наблюдать

    The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial o

    СредняяCVSS 6,8Эксплойта нетEPSS 10 %

    php · php11 дек. 2015 г.

  • CVE-2015-6420
    45В плане

    Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Ser

    КритическаяCVSS 9,8Proof of conceptEPSS 18 %

    apache · commons collections15 дек. 2015 г.

  • CVE-2015-8000
    36Наблюдать

    db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE asse

    СредняяCVSS 5,0Эксплойта нетEPSS 54 %

    isc · bind16 дек. 2015 г.

  • CVE-2015-8562
    59В плане

    Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via t

    ВысокаяCVSS 7,5Готовый эксплойтEPSS 98 %

    joomla · joomla\!16 дек. 2015 г.

  • CVE-2015-8327
    33Наблюдать

    Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x a

    ВысокаяCVSS 7,5Эксплойта нетEPSS 10 %

    redhat · enterprise linux desktop17 дек. 2015 г.

  • CVE-2015-7755
    87Срочно

    Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before

    КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 61 %

    juniper · screenos19 дек. 2015 г.

  • CVE-2015-7919
    47В плане

    SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of service (application cra

    КритическаяCVSS 10,0Эксплойта нетEPSS 21 %

    searchblox · searchblox21 дек. 2015 г.

  • CVE-2015-8660
    40В плане

    The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allo

    СредняяCVSS 6,7Готовый эксплойтEPSS 22 %

    linux · linux kernel28 дек. 2015 г.

  • CVE-2015-8634
    43В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2

    ВысокаяCVSS 8,8Proof of conceptEPSS 25 %

    adobe · flash player28 дек. 2015 г.

  • CVE-2015-8635
    43В плане

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2

    ВысокаяCVSS 8,8Proof of conceptEPSS 25 %

    adobe · flash player28 дек. 2015 г.

  • CVE-2015-8636
    41В плане

    Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR bef

    ВысокаяCVSS 8,8Proof of conceptEPSS 21 %

    adobe · air28 дек. 2015 г.

  • CVE-2015-8644
    43В плане

    Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR bef

    ВысокаяCVSS 8,8Proof of conceptEPSS 26 %

    adobe · flash player28 дек. 2015 г.

  • CVE-2015-8651
    85Срочно

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on

    ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 67 %

    adobe · air sdk28 дек. 2015 г.

  • CVE-2015-5252
    32Наблюдать

    vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relati

    ВысокаяCVSS 7,2Эксплойта нетEPSS 13 %

    samba · samba29 дек. 2015 г.

  • CVE-2015-5299
    25Наблюдать

    The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3

    СредняяCVSS 5,3Эксплойта нетEPSS 13 %

    samba · samba29 дек. 2015 г.

  • CVE-2015-7250
    35Наблюдать

    Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attack

    ВысокаяCVSS 7,5Proof of conceptEPSS 15 %

    zte · zxhn h108n r1a firmware30 дек. 2015 г.

  • CVE-2015-7251
    42В плане

    ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote atta

    КритическаяCVSS 9,8Proof of conceptEPSS 10 %

    zte · zxhn h108n r1a firmware30 дек. 2015 г.

  • CVE-2015-5995
    45В плане

    Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain adminis

    КритическаяCVSS 9,8Proof of conceptEPSS 19 %

    tenda · n3 wireless n15031 дек. 2015 г.

  • CVE-2015-6018
    45В плане

    The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbi

    КритическаяCVSS 9,8Proof of conceptEPSS 20 %

    zyxel · pmg5318-b20a firmware31 дек. 2015 г.