Yayın tarihine göre
Mart 2015: sömürülen ve yeni ciddi CVE kayıtları
77 kayıt · 0 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
33İzleyin | CVE-2015-2196Kavram kanıtı | SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the cweb-dorado · spider calendar · CWE-89 | Yüksek7,5 | — | %10,8 | 3 Mar 2015 |
21İzleyin | CVE-2015-1637İstismar yok | Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wimicrosoft · windows 7 · CWE-310 | Orta4,3 | — | %13,1 | 6 Mar 2015 |
40Planlayın | CVE-2015-2177Kavram kanıtı | Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) Tsiemens · simatic s7-300 cpu firmware · CWE-20 | Yüksek7,5 | — | %33,7 | 6 Mar 2015 |
25İzleyin | CVE-2015-0228İstismar yok | The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to capache · http server · CWE-20 | Orta5,0 | — | %16,4 | 7 Mar 2015 |
34İzleyin | CVE-2015-2094Kavram kanıtı | Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary cowebgateinc · winrds · CWE-119 | Yüksek7,5 | — | %14,0 | 9 Mar 2015 |
37İzleyin | CVE-2015-2097Kavram kanıtı | Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified webgate · webgate embedded standard protocol sdk · CWE-119 | Yüksek7,5 | — | %22,8 | 9 Mar 2015 |
43Planlayın | CVE-2014-7888İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
43Planlayın | CVE-2014-7889İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
43Planlayın | CVE-2014-7890İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
43Planlayın | CVE-2014-7891İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
43Planlayın | CVE-2014-7892İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
43Planlayın | CVE-2014-7893İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
43Planlayın | CVE-2014-7894İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
43Planlayın | CVE-2014-7895İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
43Planlayın | CVE-2014-7897İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via vehp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
43Planlayın | CVE-2014-7898İstismar yok | The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via unhp · ole point of sale driver | Kritik10,0 | — | %10,3 | 9 Mar 2015 |
34İzleyin | CVE-2015-0254İstismar yok | Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a crapache · standard taglibs | Yüksek7,5 | — | %12,7 | 9 Mar 2015 |
44Planlayın | CVE-2014-9566Silahlaştırılmış | Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 20solarwinds · orion ip address manager · CWE-89 | Yüksek7,5 | — | %46,7 | 10 Mar 2015 |
23İzleyin | CVE-2015-1067İstismar yok | Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitioapple · mac os x · CWE-310 | Orta4,3 | — | %19,6 | 10 Mar 2015 |
23İzleyin | CVE-2015-0005İstismar yok | The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a Dmicrosoft · windows 2003 server · CWE-254 | Orta4,3 | — | %18,6 | 11 Mar 2015 |
44Planlayın | CVE-2015-0032İstismar yok | vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers microsoft · vbscript · CWE-399 | Kritik9,3 | — | %22,3 | 11 Mar 2015 |
42Planlayın | CVE-2015-0056İstismar yok | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 11 Mar 2015 |
21İzleyin | CVE-2015-0074İstismar yok | Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-119 | Orta4,3 | — | %14,6 | 11 Mar 2015 |
22İzleyin | CVE-2015-0076İstismar yok | The photo-decoder implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, microsoft · windows 7 · CWE-200 | Orta4,3 | — | %15,3 | 11 Mar 2015 |
36İzleyin | CVE-2015-0079İstismar yok | The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allmicrosoft · windows 7 · CWE-399 | Yüksek7,8 | — | %16,1 | 11 Mar 2015 |
22İzleyin | CVE-2015-0080İstismar yok | Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Sermicrosoft · windows 7 · CWE-200 | Orta4,3 | — | %15,3 | 11 Mar 2015 |
44Planlayın | CVE-2015-0081Kavram kanıtı | Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windmicrosoft · windows 7 · CWE-19 | Kritik9,3 | — | %23,7 | 11 Mar 2015 |
41Planlayın | CVE-2015-0086İstismar yok | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibilitmicrosoft · office · CWE-399 | Kritik9,3 | — | %14,9 | 11 Mar 2015 |
26İzleyin | CVE-2015-0087İstismar yok | Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-200 | Orta5,0 | — | %21,3 | 11 Mar 2015 |
43Planlayın | CVE-2015-0088İstismar yok | Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 | Kritik9,3 | — | %19,8 | 11 Mar 2015 |
26İzleyin | CVE-2015-0089İstismar yok | Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-200 | Orta5,0 | — | %21,2 | 11 Mar 2015 |
43Planlayın | CVE-2015-0090İstismar yok | Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 | Kritik9,3 | — | %19,8 | 11 Mar 2015 |
43Planlayın | CVE-2015-0091İstismar yok | Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 | Kritik9,3 | — | %19,8 | 11 Mar 2015 |
42Planlayın | CVE-2015-0092İstismar yok | Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 | Kritik9,3 | — | %17,4 | 11 Mar 2015 |
43Planlayın | CVE-2015-0093İstismar yok | Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Winmicrosoft · windows 7 · CWE-94 | Kritik9,3 | — | %20,8 | 11 Mar 2015 |
58Planlayın | CVE-2015-0096Silahlaştırılmış | Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 Smicrosoft · windows 7 · CWE-426 | Kritik9,3 | — | %70,9 | 11 Mar 2015 |
49Planlayın | CVE-2015-0097Kavram kanıtı | Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers microsoft · excel · CWE-19 | Kritik9,3 | — | %40,9 | 11 Mar 2015 |
42Planlayın | CVE-2015-0099İstismar yok | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 11 Mar 2015 |
42Planlayın | CVE-2015-0100İstismar yok | Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 | Kritik9,3 | — | %15,5 | 11 Mar 2015 |
42Planlayın | CVE-2015-1622İstismar yok | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 11 Mar 2015 |
44Planlayın | CVE-2015-1623İstismar yok | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %22,4 | 11 Mar 2015 |
42Planlayın | CVE-2015-1624İstismar yok | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,6 | 11 Mar 2015 |
42Planlayın | CVE-2015-1625İstismar yok | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,6 | 11 Mar 2015 |
42Planlayın | CVE-2015-1626İstismar yok | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,6 | 11 Mar 2015 |
20İzleyin | CVE-2015-1627İstismar yok | Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevationmicrosoft · internet explorer · CWE-264 | Orta4,3 | — | %10,6 | 11 Mar 2015 |
21İzleyin | CVE-2015-1632İstismar yok | Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Updatmicrosoft · exchange server · CWE-79 | Orta4,3 | — | %11,7 | 11 Mar 2015 |
42Planlayın | CVE-2015-1634İstismar yok | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 11 Mar 2015 |
43Planlayın | CVE-2015-0085İstismar yok | Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 Smicrosoft · excel | Kritik9,3 | — | %18,7 | 11 Mar 2015 |
49Planlayın | CVE-2015-2208Silahlaştırılmış | The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters inavinu · phpmoadmin · CWE-77 | Yüksek7,5 | — | %61,9 | 12 Mar 2015 |
58Planlayın | CVE-2015-0336Silahlaştırılmış | Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attadobe · flash player | Kritik9,3 | — | %70,4 | 13 Mar 2015 |
40Planlayın | CVE-2014-7884Kavram kanıtı | Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.hp · arcsight logger | Kritik9,0 | — | %11,7 | 13 Mar 2015 |
33İzleyin | CVE-2015-2281Kavram kanıtı | Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbifortinet · single sign on · CWE-119 | Yüksek7,5 | — | %10,3 | 19 Mar 2015 |
26İzleyin | CVE-2015-0208İstismar yok | The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a allopenssl · openssl | Orta4,3 | — | %29,4 | 19 Mar 2015 |
32İzleyin | CVE-2015-0209İstismar yok | Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 bopenssl · openssl | Orta6,8 | — | %16,3 | 19 Mar 2015 |
26İzleyin | CVE-2015-0286İstismar yok | The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0openssl · openssl · CWE-17 | Orta5,0 | — | %19,6 | 19 Mar 2015 |
43Planlayın | CVE-2015-0292İstismar yok | Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1openssl · openssl · CWE-119 | Yüksek7,5 | — | %44,5 | 19 Mar 2015 |
26İzleyin | CVE-2015-0293İstismar yok | The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attackeropenssl · openssl · CWE-20 | Orta5,0 | — | %21,2 | 19 Mar 2015 |
42Planlayın | CVE-2015-2562Silahlaştırılmış | Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers tweb-dorado · ecommerce wd · CWE-89 | Yüksek7,5 | — | %38,7 | 20 Mar 2015 |
30İzleyin | CVE-2015-0250İstismar yok | XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote atapache · batik | Orta6,4 | — | %16,5 | 24 Mar 2015 |
32İzleyin | CVE-2015-0252Kavram kanıtı | internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) vapache · xerces-c\+\+ · CWE-20 | Orta5,0 | — | %39,6 | 24 Mar 2015 |
26İzleyin | CVE-2015-2153Kavram kanıtı | The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of tcpdump · tcpdump · CWE-119 | Orta5,0 | — | %19,0 | 24 Mar 2015 |
62Bu hafta | CVE-2015-2284Silahlaştırılmış | userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbisolarwinds · firewall security manager · CWE-264 | Kritik10,0 | — | %73,4 | 24 Mar 2015 |
23İzleyin | CVE-2015-2682Kavram kanıtı | Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to citrix · command center · CWE-17 | Orta5,0 | — | %10,7 | 26 Mar 2015 |
34İzleyin | CVE-2015-2746Kavram kanıtı | The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series websense · triton · CWE-77 | Orta6,5 | — | %25,4 | 26 Mar 2015 |
36İzleyin | CVE-2014-9705İstismar yok | Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, aphp · php · CWE-119 | Yüksek7,5 | — | %19,2 | 30 Mar 2015 |
25İzleyin | CVE-2014-9709İstismar yok | The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers tphp · php · CWE-119 | Orta5,0 | — | %15,4 | 30 Mar 2015 |
43Planlayın | CVE-2015-0273Kavram kanıtı | Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remotphp · php | Yüksek7,5 | — | %43,8 | 30 Mar 2015 |
34İzleyin | CVE-2015-2301İstismar yok | Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote php · php · CWE-416 | Yüksek7,5 | — | %14,6 | 30 Mar 2015 |
38İzleyin | CVE-2015-2331İstismar yok | Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.php · php · CWE-189 | Yüksek7,5 | — | %27,3 | 30 Mar 2015 |
34İzleyin | CVE-2015-2787İstismar yok | Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.php · php | Yüksek7,5 | — | %12,2 | 30 Mar 2015 |
45Planlayın | CVE-2015-1815Kavram kanıtı | The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commselinux · setroubleshoot · CWE-77 | Kritik10,0 | — | %16,4 | 30 Mar 2015 |
24İzleyin | CVE-2015-2790Kavram kanıtı | Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash)foxitsoftware · enterprise reader · CWE-20 | Orta4,3 | — | %24,5 | 30 Mar 2015 |
29İzleyin | CVE-2015-2791Kavram kanıtı | The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus vwpml · wpml · CWE-264 | Orta6,4 | — | %13,2 | 30 Mar 2015 |
44Planlayın | CVE-2014-7876İstismar yok | Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmwarhp · integrated lights-out 2 firmware | Kritik10,0 | — | %12,7 | 31 Mar 2015 |
40Planlayın | CVE-2014-9707Silahlaştırılmış | EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a .embedthis · goahead · CWE-17 | Yüksek7,5 | — | %28,2 | 31 Mar 2015 |
37İzleyin | CVE-2014-9708İstismar yok | Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Ranembedthis · appweb · CWE-476 | Orta5,0 | — | %56,1 | 31 Mar 2015 |
36İzleyin | CVE-2015-2808İstismar yok | The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initializatiooracle · communications application session controller · CWE-327 | Düşük3,7 | — | %73,8 | 31 Mar 2015 |
- CVE-2015-219633İzleyin
SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the c
YüksekCVSS 7,5Kavram kanıtıEPSS %10web-dorado · spider calendar3 Mar 2015
- CVE-2015-163721İzleyin
Schannel (aka Secure Channel) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi
OrtaCVSS 4,3İstismar yokEPSS %13microsoft · windows 76 Mar 2015
- CVE-2015-217740Planlayın
Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via crafted packets on (1) T
YüksekCVSS 7,5Kavram kanıtıEPSS %33siemens · simatic s7-300 cpu firmware6 Mar 2015
- CVE-2015-022825İzleyin
The lua_websocket_read function in lua_request.c in the mod_lua module in the Apache HTTP Server through 2.4.12 allows remote attackers to c
OrtaCVSS 5,0İstismar yokEPSS %16apache · http server7 Mar 2015
- CVE-2015-209434İzleyin
Stack-based buffer overflow in the WESPPlayback.WESPPlaybackCtrl.1 control in WebGate WinRDS allows remote attackers to execute arbitrary co
YüksekCVSS 7,5Kavram kanıtıEPSS %14webgateinc · winrds9 Mar 2015
- CVE-2015-209737İzleyin
Multiple buffer overflows in WebGate Embedded Standard Protocol (WESP) SDK allow remote attackers to execute arbitrary code via unspecified
YüksekCVSS 7,5Kavram kanıtıEPSS %22webgate · webgate embedded standard protocol sdk9 Mar 2015
- CVE-2014-788843Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2014-788943Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2014-789043Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2014-789143Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2014-789243Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2014-789343Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2014-789443Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2014-789543Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2014-789743Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via ve
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2014-789843Planlayın
The OLE Point of Sale (OPOS) drivers before 1.13.003 on HP Point of Sale Windows PCs allow remote attackers to execute arbitrary code via un
KritikCVSS 10,0İstismar yokEPSS %10hp · ole point of sale driver9 Mar 2015
- CVE-2015-025434İzleyin
Apache Standard Taglibs before 1.2.3 allows remote attackers to execute arbitrary code or conduct external XML entity (XXE) attacks via a cr
YüksekCVSS 7,5İstismar yokEPSS %12apache · standard taglibs9 Mar 2015
- CVE-2014-956644Planlayın
Multiple SQL injection vulnerabilities in the Manage Accounts page in the AccountManagement.asmx service in the Solarwinds Orion Platform 20
YüksekCVSS 7,5SilahlaştırılmışEPSS %46solarwinds · orion ip address manager10 Mar 2015
- CVE-2015-106723İzleyin
Secure Transport in Apple iOS before 8.2, Apple OS X through 10.10.2, and Apple TV before 7.1 does not properly restrict TLS state transitio
OrtaCVSS 4,3İstismar yokEPSS %19apple · mac os x10 Mar 2015
- CVE-2015-000523İzleyin
The NETLOGON service in Microsoft Windows Server 2003 SP2, Windows Server 2008 SP2 and R2 SP1, and Windows Server 2012 Gold and R2, when a D
OrtaCVSS 4,3İstismar yokEPSS %18microsoft · windows 2003 server11 Mar 2015
- CVE-2015-003244Planlayın
vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 8 through 11 and other products, allows remote attackers
KritikCVSS 9,3İstismar yokEPSS %22microsoft · vbscript11 Mar 2015
- CVE-2015-005642Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer11 Mar 2015
- CVE-2015-007421İzleyin
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
OrtaCVSS 4,3İstismar yokEPSS %14microsoft · windows 711 Mar 2015
- CVE-2015-007622İzleyin
The photo-decoder implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,
OrtaCVSS 4,3İstismar yokEPSS %15microsoft · windows 711 Mar 2015
- CVE-2015-007936İzleyin
The Remote Desktop Protocol (RDP) implementation in Microsoft Windows 7 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 all
YüksekCVSS 7,8İstismar yokEPSS %16microsoft · windows 711 Mar 2015
- CVE-2015-008022İzleyin
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Ser
OrtaCVSS 4,3İstismar yokEPSS %15microsoft · windows 711 Mar 2015
- CVE-2015-008144Planlayın
Windows Text Services (WTS) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wind
KritikCVSS 9,3Kavram kanıtıEPSS %23microsoft · windows 711 Mar 2015
- CVE-2015-008641Planlayın
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 Gold and SP1, Word 2013 RT Gold and SP1, Word Viewer, Office Compatibilit
KritikCVSS 9,3İstismar yokEPSS %14microsoft · office11 Mar 2015
- CVE-2015-008726İzleyin
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
OrtaCVSS 5,0İstismar yokEPSS %21microsoft · windows 711 Mar 2015
- CVE-2015-008843Planlayın
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
KritikCVSS 9,3İstismar yokEPSS %19microsoft · windows 711 Mar 2015
- CVE-2015-008926İzleyin
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
OrtaCVSS 5,0İstismar yokEPSS %21microsoft · windows 711 Mar 2015
- CVE-2015-009043Planlayın
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
KritikCVSS 9,3İstismar yokEPSS %19microsoft · windows 711 Mar 2015
- CVE-2015-009143Planlayın
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
KritikCVSS 9,3İstismar yokEPSS %19microsoft · windows 711 Mar 2015
- CVE-2015-009242Planlayın
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
KritikCVSS 9,3İstismar yokEPSS %17microsoft · windows 711 Mar 2015
- CVE-2015-009343Planlayın
Adobe Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win
KritikCVSS 9,3İstismar yokEPSS %20microsoft · windows 711 Mar 2015
- CVE-2015-009658Planlayın
Untrusted search path vulnerability in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 S
KritikCVSS 9,3SilahlaştırılmışEPSS %70microsoft · windows 711 Mar 2015
- CVE-2015-009749Planlayın
Microsoft Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Excel 2010 SP2, PowerPoint 2010 SP2, and Word 2010 SP2 allow remote attackers
KritikCVSS 9,3Kavram kanıtıEPSS %40microsoft · excel11 Mar 2015
- CVE-2015-009942Planlayın
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer11 Mar 2015
- CVE-2015-010042Planlayın
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer11 Mar 2015
- CVE-2015-162242Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer11 Mar 2015
- CVE-2015-162344Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %22microsoft · internet explorer11 Mar 2015
- CVE-2015-162442Planlayın
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer11 Mar 2015
- CVE-2015-162542Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer11 Mar 2015
- CVE-2015-162642Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer11 Mar 2015
- CVE-2015-162720İzleyin
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation
OrtaCVSS 4,3İstismar yokEPSS %10microsoft · internet explorer11 Mar 2015
- CVE-2015-163221İzleyin
Cross-site scripting (XSS) vulnerability in errorfe.aspx in Outlook Web App (OWA) in Microsoft Exchange Server 2013 SP1 and Cumulative Updat
OrtaCVSS 4,3İstismar yokEPSS %11microsoft · exchange server11 Mar 2015
- CVE-2015-163442Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer11 Mar 2015
- CVE-2015-008543Planlayın
Use-after-free vulnerability in Microsoft Office 2007 SP3, Excel 2007 SP3, PowerPoint 2007 SP3, Word 2007 SP3, Office 2010 SP2, Excel 2010 S
KritikCVSS 9,3İstismar yokEPSS %18microsoft · excel11 Mar 2015
- CVE-2015-220849Planlayın
The saveObject function in moadmin.php in phpMoAdmin 1.1.2 allows remote attackers to execute arbitrary commands via shell metacharacters in
YüksekCVSS 7,5SilahlaştırılmışEPSS %61avinu · phpmoadmin12 Mar 2015
- CVE-2015-033658Planlayın
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows att
KritikCVSS 9,3SilahlaştırılmışEPSS %70adobe · flash player13 Mar 2015
- CVE-2014-788440Planlayın
Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.
KritikCVSS 9,0Kavram kanıtıEPSS %11hp · arcsight logger13 Mar 2015
- CVE-2015-228133İzleyin
Stack-based buffer overflow in collectoragent.exe in Fortinet Single Sign On (FSSO) before build 164 allows remote attackers to execute arbi
YüksekCVSS 7,5Kavram kanıtıEPSS %10fortinet · single sign on19 Mar 2015
- CVE-2015-020826İzleyin
The ASN.1 signature-verification implementation in the rsa_item_verify function in crypto/rsa/rsa_ameth.c in OpenSSL 1.0.2 before 1.0.2a all
OrtaCVSS 4,3İstismar yokEPSS %29openssl · openssl19 Mar 2015
- CVE-2015-020932İzleyin
Use-after-free vulnerability in the d2i_ECPrivateKey function in crypto/ec/ec_asn1.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 b
OrtaCVSS 6,8İstismar yokEPSS %16openssl · openssl19 Mar 2015
- CVE-2015-028626İzleyin
The ASN1_TYPE_cmp function in crypto/asn1/a_type.c in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0
OrtaCVSS 5,0İstismar yokEPSS %19openssl · openssl19 Mar 2015
- CVE-2015-029243Planlayın
Integer underflow in the EVP_DecodeUpdate function in crypto/evp/encode.c in the base64-decoding implementation in OpenSSL before 0.9.8za, 1
YüksekCVSS 7,5İstismar yokEPSS %44openssl · openssl19 Mar 2015
- CVE-2015-029326İzleyin
The SSLv2 implementation in OpenSSL before 0.9.8zf, 1.0.0 before 1.0.0r, 1.0.1 before 1.0.1m, and 1.0.2 before 1.0.2a allows remote attacker
OrtaCVSS 5,0İstismar yokEPSS %21openssl · openssl19 Mar 2015
- CVE-2015-256242Planlayın
Multiple SQL injection vulnerabilities in the Web-Dorado ECommerce WD (com_ecommercewd) component 1.2.5 for Joomla! allow remote attackers t
YüksekCVSS 7,5SilahlaştırılmışEPSS %38web-dorado · ecommerce wd20 Mar 2015
- CVE-2015-025030İzleyin
XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote at
OrtaCVSS 6,4İstismar yokEPSS %16apache · batik24 Mar 2015
- CVE-2015-025232İzleyin
internal/XMLReader.cpp in Apache Xerces-C before 3.1.2 allows remote attackers to cause a denial of service (segmentation fault and crash) v
OrtaCVSS 5,0Kavram kanıtıEPSS %39apache · xerces-c\+\+24 Mar 2015
- CVE-2015-215326İzleyin
The rpki_rtr_pdu_print function in print-rpki-rtr.c in the TCP printer in tcpdump before 4.7.2 allows remote attackers to cause a denial of
OrtaCVSS 5,0Kavram kanıtıEPSS %19tcpdump · tcpdump24 Mar 2015
- CVE-2015-228462Bu hafta
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbi
KritikCVSS 10,0SilahlaştırılmışEPSS %73solarwinds · firewall security manager24 Mar 2015
- CVE-2015-268223İzleyin
Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to
OrtaCVSS 5,0Kavram kanıtıEPSS %10citrix · command center26 Mar 2015
- CVE-2015-274634İzleyin
The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series
OrtaCVSS 6,5Kavram kanıtıEPSS %25websense · triton26 Mar 2015
- CVE-2014-970536İzleyin
Heap-based buffer overflow in the enchant_broker_request_dict function in ext/enchant/enchant.c in PHP before 5.4.38, 5.5.x before 5.5.22, a
YüksekCVSS 7,5İstismar yokEPSS %19php · php30 Mar 2015
- CVE-2014-970925İzleyin
The GetCode_ function in gd_gif_in.c in GD 2.1.1 and earlier, as used in PHP before 5.5.21 and 5.6.x before 5.6.5, allows remote attackers t
OrtaCVSS 5,0İstismar yokEPSS %15php · php30 Mar 2015
- CVE-2015-027343Planlayın
Multiple use-after-free vulnerabilities in ext/date/php_date.c in PHP before 5.4.38, 5.5.x before 5.5.22, and 5.6.x before 5.6.6 allow remot
YüksekCVSS 7,5Kavram kanıtıEPSS %43php · php30 Mar 2015
- CVE-2015-230134İzleyin
Use-after-free vulnerability in the phar_rename_archive function in phar_object.c in PHP before 5.5.22 and 5.6.x before 5.6.6 allows remote
YüksekCVSS 7,5İstismar yokEPSS %14php · php30 Mar 2015
- CVE-2015-233138İzleyin
Integer overflow in the _zip_cdir_new function in zip_dirent.c in libzip 0.11.2 and earlier, as used in the ZIP extension in PHP before 5.4.
YüksekCVSS 7,5İstismar yokEPSS %27php · php30 Mar 2015
- CVE-2015-278734İzleyin
Use-after-free vulnerability in the process_nested_data function in ext/standard/var_unserializer.re in PHP before 5.4.39, 5.5.x before 5.5.
YüksekCVSS 7,5İstismar yokEPSS %12php · php30 Mar 2015
- CVE-2015-181545Planlayın
The get_rpm_nvr_by_file_path_temporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary comm
KritikCVSS 10,0Kavram kanıtıEPSS %16selinux · setroubleshoot30 Mar 2015
- CVE-2015-279024İzleyin
Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1 allow remote attackers to cause a denial of service (memory corruption and crash)
OrtaCVSS 4,3Kavram kanıtıEPSS %24foxitsoftware · enterprise reader30 Mar 2015
- CVE-2015-279129İzleyin
The "menu sync" function in the WPML plugin before 3.1.9 for WordPress allows remote attackers to delete arbitrary posts, pages, and menus v
OrtaCVSS 6,4Kavram kanıtıEPSS %13wpml · wpml30 Mar 2015
- CVE-2014-787644Planlayın
Unspecified vulnerability in HP Integrated Lights-Out (iLO) firmware 2 before 2.27 and 4 before 2.03 and iLO Chassis Management (CM) firmwar
KritikCVSS 10,0İstismar yokEPSS %12hp · integrated lights-out 2 firmware31 Mar 2015
- CVE-2014-970740Planlayın
EmbedThis GoAhead 3.0.0 through 3.4.1 does not properly handle path segments starting with a .
YüksekCVSS 7,5SilahlaştırılmışEPSS %28embedthis · goahead31 Mar 2015
- CVE-2014-970837İzleyin
Embedthis Appweb before 4.6.6 and 5.x before 5.2.1 allows remote attackers to cause a denial of service (NULL pointer dereference) via a Ran
OrtaCVSS 5,0İstismar yokEPSS %56embedthis · appweb31 Mar 2015
- CVE-2015-280836İzleyin
The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initializatio
DüşükCVSS 3,7İstismar yokEPSS %73oracle · communications application session controller31 Mar 2015