Yayın tarihine göre

Şubat 2015: sömürülen ve yeni ciddi CVE kayıtları

71 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
98Hemen	CVE-2015-0313Silahlaştırılmış	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before adobe · flash player · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,8	KEV	%95,2	2 Şub 2015
37İzleyin	CVE-2014-7864Kavram kanıtı	Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5 zohocorp · manageengine opmanager · CWE-89 Girişsiz RCE SQL enjeksiyonu	Yüksek7,5	—	%22,6	4 Şub 2015
63Bu hafta	CVE-2015-0318Silahlaştırılmış	Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows attadobe · flash player Girişsiz RCE	Kritik10,0	—	%75,1	5 Şub 2015
24İzleyin	CVE-2014-9636İstismar yok	unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompressunzip project · unzip · CWE-119 Kimlik doğrulamasız Bellek hatası Hizmet dışı bırakma	Orta5,0	—	%11,8	6 Şub 2015
40Planlayın	CVE-2015-0072Silahlaştırılmış	Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policmicrosoft · internet explorer · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%71,6	7 Şub 2015
22İzleyin	CVE-2014-6362İstismar yok	Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protecmicrosoft · office Kimlik doğrulamasız	Orta4,3	—	%16,1	10 Şub 2015
42Planlayın	CVE-2015-0008Kavram kanıtı	The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8microsoft · windows 7 · CWE-284 RCE Erişim denetimi (IDOR)	Yüksek8,3	—	%28,5	10 Şub 2015
42Planlayın	CVE-2015-0017İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0018İstismar yok	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
44Planlayın	CVE-2015-0019İstismar yok	Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%22,2	10 Şub 2015
42Planlayın	CVE-2015-0020İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0021İstismar yok	Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0022İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0023İstismar yok	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%16,5	10 Şub 2015
42Planlayın	CVE-2015-0025İstismar yok	Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0026İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0027İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0028İstismar yok	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0029İstismar yok	Microsoft Internet Explorer 6 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
43Planlayın	CVE-2015-0030İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%19,5	10 Şub 2015
42Planlayın	CVE-2015-0031İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0035İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%16,0	10 Şub 2015
42Planlayın	CVE-2015-0036İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%16,0	10 Şub 2015
45Planlayın	CVE-2015-0037İstismar yok	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%26,7	10 Şub 2015
42Planlayın	CVE-2015-0038İstismar yok	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0039İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
46Planlayın	CVE-2015-0040Kavram kanıtı	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%30,0	10 Şub 2015
42Planlayın	CVE-2015-0041İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
43Planlayın	CVE-2015-0042İstismar yok	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%19,1	10 Şub 2015
42Planlayın	CVE-2015-0043İstismar yok	Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%16,1	10 Şub 2015
42Planlayın	CVE-2015-0044İstismar yok	Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0045İstismar yok	Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0046İstismar yok	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0048İstismar yok	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0049İstismar yok	Microsoft Internet Explorer 8 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via microsoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
47Planlayın	CVE-2015-0050Kavram kanıtı	Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%33,4	10 Şub 2015
22İzleyin	CVE-2015-0051İstismar yok	Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorermicrosoft · internet explorer · CWE-264 Kimlik doğrulamasız	Orta4,3	—	%15,4	10 Şub 2015
42Planlayın	CVE-2015-0052İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0053İstismar yok	Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
20İzleyin	CVE-2015-0054İstismar yok	Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevationmicrosoft · internet explorer · CWE-264 Kimlik doğrulamasız	Orta4,3	—	%10,6	10 Şub 2015
20İzleyin	CVE-2015-0055İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation ofmicrosoft · internet explorer · CWE-264 Kimlik doğrulamasız	Orta4,3	—	%10,6	10 Şub 2015
32İzleyin	CVE-2015-0057Kavram kanıtı	win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7microsoft · windows 7 · CWE-264 Yerel yetki yükseltme	Yüksek7,2	—	%12,7	10 Şub 2015
30İzleyin	CVE-2015-0059Kavram kanıtı	win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gomicrosoft · windows 7 · CWE-264 RCE Yerel yetki yükseltme	Orta6,9	—	%11,1	10 Şub 2015
23İzleyin	CVE-2015-0061İstismar yok	Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Sermicrosoft · windows 7 · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,3	—	%18,8	10 Şub 2015
42Planlayın	CVE-2015-0063İstismar yok	Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Compmicrosoft · office compatibility pack · CWE-399 Girişsiz RCE	Kritik9,3	—	%16,1	10 Şub 2015
46Planlayın	CVE-2015-0064Kavram kanıtı	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Wordmicrosoft · web applications · CWE-399 Girişsiz RCE	Kritik9,3	—	%29,9	10 Şub 2015
46Planlayın	CVE-2015-0065Kavram kanıtı	Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Offmicrosoft · word · CWE-399 Girişsiz RCE	Kritik9,3	—	%30,3	10 Şub 2015
42Planlayın	CVE-2015-0066İstismar yok	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
42Planlayın	CVE-2015-0067İstismar yok	Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vmicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%15,5	10 Şub 2015
44Planlayın	CVE-2015-0068İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 Girişsiz RCE	Kritik9,3	—	%22,3	10 Şub 2015
22İzleyin	CVE-2015-0069İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet microsoft · internet explorer · CWE-264 Kimlik doğrulamasız	Orta4,3	—	%15,4	10 Şub 2015
22İzleyin	CVE-2015-0070İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web smicrosoft · internet explorer · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,3	—	%16,2	10 Şub 2015
66Bu hafta	CVE-2015-0071Silahlaştırılmış	Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internmicrosoft · internet explorer Kimlik doğrulamasız	Orta6,5	KEV	%33,5	10 Şub 2015
47Planlayın	CVE-2015-1172Silahlaştırılmış	Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordPholding pattern project · holding pattern Girişsiz RCE Dosya yükleme	Yüksek7,5	—	%58,2	11 Şub 2015
26İzleyin	CVE-2015-1579Kavram kanıtı	Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a ..elegantthemes · divi · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,0	—	%20,8	11 Şub 2015
23İzleyin	CVE-2015-1545İstismar yok	The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial oopenldap · openldap Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,0	—	%11,0	12 Şub 2015
40Planlayın	CVE-2015-0923Silahlaştırılmış	The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 beforektron · ektron content management system Kimlik doğrulamasız XXE	Orta5,0	—	%22,0	13 Şub 2015
31İzleyin	CVE-2014-7883Kavram kanıtı	HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive infohp · universal configuration management database · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta5,0	—	%37,0	15 Şub 2015
31İzleyin	CVE-2014-0227İstismar yok	java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 doapache · tomcat · CWE-19 Kimlik doğrulamasız	Orta6,4	—	%21,0	16 Şub 2015
62Bu hafta	CVE-2015-1497Silahlaştırılmış	radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commandpersistent systems · radia client automation · CWE-94 Girişsiz RCE	Kritik10,0	—	%74,4	16 Şub 2015
99Hemen	CVE-2015-1427Silahlaştırılmış	The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection meelastic · elasticsearch Girişsiz RCE	Kritik9,8	KEV	%99,9	17 Şub 2015
28İzleyin	CVE-2015-1349İstismar yok	named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are eisc · bind · CWE-399 Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,4	—	%22,1	18 Şub 2015
43Planlayın	CVE-2015-1587Silahlaştırılmış	Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote atmaarch · gec\/ged Girişsiz RCE Dosya yükleme	Yüksek7,5	—	%43,1	19 Şub 2015
52Planlayın	CVE-2015-1592Silahlaştırılmış	Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::tdebian · debian linux · CWE-74 Girişsiz RCE	Yüksek7,5	—	%74,7	19 Şub 2015
56Planlayın	CVE-2015-2049Silahlaştırılmış	Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitrdlink · dcs-931l firmware RCE Dosya yükleme	Kritik9,0	—	%66,6	23 Şub 2015
94Hemen	CVE-2015-2051Silahlaştırılmış	The D-Link DIR-645 Wired/Wireless Router Rev.dlink · dir-645 firmware · CWE-77 Girişsiz RCE Komut enjeksiyonu	Yüksek8,8	KEV	%97,1	23 Şub 2015
66Bu hafta	CVE-2015-0240Silahlaştırılmış	The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x beforsamba · samba · CWE-17 Girişsiz RCE	Kritik10,0	—	%87,5	23 Şub 2015
35İzleyin	CVE-2015-1605İstismar yok	Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attackedell · asset manager · CWE-89 Girişsiz RCE SQL enjeksiyonu	Yüksek7,5	—	%17,5	24 Şub 2015
42Planlayın	CVE-2015-2065Silahlaştırılmış	SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPrapptha · wordpress video gallery · CWE-89 Girişsiz RCE SQL enjeksiyonu	Yüksek7,5	—	%40,0	24 Şub 2015
32İzleyin	CVE-2015-2067Kavram kanıtı	Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remotmagmi project · magmi · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,0	—	%38,4	24 Şub 2015
21İzleyin	CVE-2015-2068Kavram kanıtı	Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attackermagmi project · magmi · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%14,0	24 Şub 2015

CVE-2015-0313
98Hemen
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %95
- Girişsiz RCE
- Bellek hatası
adobe · flash player2 Şub 2015
CVE-2014-7864
37İzleyin
Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpManager 8 through 11.5
YüksekCVSS 7,5Kavram kanıtıEPSS %22
- Girişsiz RCE
- SQL enjeksiyonu
zohocorp · manageengine opmanager4 Şub 2015
CVE-2015-0318
63Bu hafta
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att
KritikCVSS 10,0SilahlaştırılmışEPSS %75
- Girişsiz RCE
adobe · flash player5 Şub 2015
CVE-2014-9636
24İzleyin
unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompress
OrtaCVSS 5,0İstismar yokEPSS %11
- Kimlik doğrulamasız
- Bellek hatası
- Hizmet dışı bırakma
unzip project · unzip6 Şub 2015
CVE-2015-0072
40Planlayın
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Polic
OrtaCVSS 4,3SilahlaştırılmışEPSS %71
- Kimlik doğrulamasız
- XSS
microsoft · internet explorer7 Şub 2015
CVE-2014-6362
22İzleyin
Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protec
OrtaCVSS 4,3İstismar yokEPSS %16
- Kimlik doğrulamasız
microsoft · office10 Şub 2015
CVE-2015-0008
42Planlayın
The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8
YüksekCVSS 8,3Kavram kanıtıEPSS %28
- RCE
- Erişim denetimi (IDOR)
microsoft · windows 710 Şub 2015
CVE-2015-0017
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0018
42Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0019
44Planlayın
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %22
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0020
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0021
42Planlayın
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0022
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0023
42Planlayın
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %16
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0025
42Planlayın
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0026
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0027
42Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0028
42Planlayın
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0029
42Planlayın
Microsoft Internet Explorer 6 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0030
43Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %19
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0031
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0035
42Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %16
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0036
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %16
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0037
45Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %26
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0038
42Planlayın
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0039
42Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0040
46Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3Kavram kanıtıEPSS %30
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0041
42Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0042
43Planlayın
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %19
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0043
42Planlayın
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %16
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0044
42Planlayın
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0045
42Planlayın
Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0046
42Planlayın
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0048
42Planlayın
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0049
42Planlayın
Microsoft Internet Explorer 8 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0050
47Planlayın
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
KritikCVSS 9,3Kavram kanıtıEPSS %33
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0051
22İzleyin
Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer
OrtaCVSS 4,3İstismar yokEPSS %15
- Kimlik doğrulamasız
microsoft · internet explorer10 Şub 2015
CVE-2015-0052
42Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0053
42Planlayın
Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0054
20İzleyin
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation
OrtaCVSS 4,3İstismar yokEPSS %10
- Kimlik doğrulamasız
microsoft · internet explorer10 Şub 2015
CVE-2015-0055
20İzleyin
Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of
OrtaCVSS 4,3İstismar yokEPSS %10
- Kimlik doğrulamasız
microsoft · internet explorer10 Şub 2015
CVE-2015-0057
32İzleyin
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7
YüksekCVSS 7,2Kavram kanıtıEPSS %12
- Yerel yetki yükseltme
microsoft · windows 710 Şub 2015
CVE-2015-0059
30İzleyin
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go
OrtaCVSS 6,9Kavram kanıtıEPSS %11
- RCE
- Yerel yetki yükseltme
microsoft · windows 710 Şub 2015
CVE-2015-0061
23İzleyin
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Ser
OrtaCVSS 4,3İstismar yokEPSS %18
- Kimlik doğrulamasız
- Bilgi sızıntısı
microsoft · windows 710 Şub 2015
CVE-2015-0063
42Planlayın
Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Comp
KritikCVSS 9,3İstismar yokEPSS %16
- Girişsiz RCE
microsoft · office compatibility pack10 Şub 2015
CVE-2015-0064
46Planlayın
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word
KritikCVSS 9,3Kavram kanıtıEPSS %29
- Girişsiz RCE
microsoft · web applications10 Şub 2015
CVE-2015-0065
46Planlayın
Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Off
KritikCVSS 9,3Kavram kanıtıEPSS %30
- Girişsiz RCE
microsoft · word10 Şub 2015
CVE-2015-0066
42Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0067
42Planlayın
Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0068
44Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %22
- Girişsiz RCE
microsoft · internet explorer10 Şub 2015
CVE-2015-0069
22İzleyin
Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet
OrtaCVSS 4,3İstismar yokEPSS %15
- Kimlik doğrulamasız
microsoft · internet explorer10 Şub 2015
CVE-2015-0070
22İzleyin
Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web s
OrtaCVSS 4,3İstismar yokEPSS %16
- Kimlik doğrulamasız
- Bilgi sızıntısı
microsoft · internet explorer10 Şub 2015
CVE-2015-0071
66Bu hafta
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Intern
OrtaCVSS 6,5KEVSilahlaştırılmışEPSS %33
- Kimlik doğrulamasız
microsoft · internet explorer10 Şub 2015
CVE-2015-1172
47Planlayın
Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 and earlier for WordP
YüksekCVSS 7,5SilahlaştırılmışEPSS %58
- Girişsiz RCE
- Dosya yükleme
holding pattern project · holding pattern11 Şub 2015
CVE-2015-1579
26İzleyin
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %20
- Kimlik doğrulamasız
- Yol geçişi
elegantthemes · divi11 Şub 2015
CVE-2015-1545
23İzleyin
The deref_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial o
OrtaCVSS 5,0İstismar yokEPSS %11
- Kimlik doğrulamasız
- Hizmet dışı bırakma
openldap · openldap12 Şub 2015
CVE-2015-0923
40Planlayın
The ContentBlockEx method in Workarea/ServerControlWS.asmx in Ektron Content Management System (CMS) 8.5 and 8.7 before 8.7sp2 and 9.0 befor
OrtaCVSS 5,0SilahlaştırılmışEPSS %22
- Kimlik doğrulamasız
- XXE
ektron · ektron content management system13 Şub 2015
CVE-2014-7883
31İzleyin
HP Universal CMDB (UCMDB) Probe 9.05, 10.01, and 10.11 enables the HTTP TRACE method, which allows remote attackers to obtain sensitive info
OrtaCVSS 5,0Kavram kanıtıEPSS %37
- Kimlik doğrulamasız
- Bilgi sızıntısı
hp · universal configuration management database15 Şub 2015
CVE-2014-0227
31İzleyin
java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 do
OrtaCVSS 6,4İstismar yokEPSS %21
- Kimlik doğrulamasız
apache · tomcat16 Şub 2015
CVE-2015-1497
62Bu hafta
radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary command
KritikCVSS 10,0SilahlaştırılmışEPSS %74
- Girişsiz RCE
persistent systems · radia client automation16 Şub 2015
CVE-2015-1427
99Hemen
The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection me
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99
- Girişsiz RCE
elastic · elasticsearch17 Şub 2015
CVE-2015-1349
28İzleyin
named in ISC BIND 9.7.0 through 9.9.6 before 9.9.6-P2 and 9.10.x before 9.10.1-P2, when DNSSEC validation and the managed-keys feature are e
OrtaCVSS 5,4İstismar yokEPSS %22
- Kimlik doğrulamasız
- Hizmet dışı bırakma
isc · bind18 Şub 2015
CVE-2015-1587
43Planlayın
Unrestricted file upload vulnerability in file_to_index.php in Maarch LetterBox 2.8 and earlier and GEC/GED 1.4 and earlier allows remote at
YüksekCVSS 7,5SilahlaştırılmışEPSS %43
- Girişsiz RCE
- Dosya yükleme
maarch · gec\/ged19 Şub 2015
CVE-2015-1592
52Planlayın
Movable Type Pro, Open Source, and Advanced before 5.2.12 and Pro and Advanced 6.0.x before 6.0.7 does not properly use the Perl Storable::t
YüksekCVSS 7,5SilahlaştırılmışEPSS %74
- Girişsiz RCE
debian · debian linux19 Şub 2015
CVE-2015-2049
56Planlayın
Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitr
KritikCVSS 9,0SilahlaştırılmışEPSS %66
- RCE
- Dosya yükleme
dlink · dcs-931l firmware23 Şub 2015
CVE-2015-2051
94Hemen
The D-Link DIR-645 Wired/Wireless Router Rev.
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %97
- Girişsiz RCE
- Komut enjeksiyonu
dlink · dir-645 firmware23 Şub 2015
CVE-2015-0240
66Bu hafta
The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x befor
KritikCVSS 10,0SilahlaştırılmışEPSS %87
- Girişsiz RCE
samba · samba23 Şub 2015
CVE-2015-1605
35İzleyin
Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attacke
YüksekCVSS 7,5İstismar yokEPSS %17
- Girişsiz RCE
- SQL enjeksiyonu
dell · asset manager24 Şub 2015
CVE-2015-2065
42Planlayın
SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPr
YüksekCVSS 7,5SilahlaştırılmışEPSS %40
- Girişsiz RCE
- SQL enjeksiyonu
apptha · wordpress video gallery24 Şub 2015
CVE-2015-2067
32İzleyin
Directory traversal vulnerability in web/ajax_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remot
OrtaCVSS 5,0Kavram kanıtıEPSS %38
- Kimlik doğrulamasız
- Yol geçişi
magmi project · magmi24 Şub 2015
CVE-2015-2068
21İzleyin
Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attacker
OrtaCVSS 4,3Kavram kanıtıEPSS %14
- Kimlik doğrulamasız
- XSS
magmi project · magmi24 Şub 2015