İçeriğe atla
Noroxi

Yayın tarihine göre

Mayıs 2015: sömürülen ve yeni ciddi CVE kayıtları

90 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2014-8361
    99Hemen

    The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploi

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99

    realtek · realtek sdk1 May 2015

  • CVE-2015-3337
    27İzleyin

    Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attacke

    OrtaCVSS 4,3Kavram kanıtıEPSS %33

    elasticsearch · elasticsearch1 May 2015

  • CVE-2015-3435
    43Planlayın

    Samsung Security Manager (SSM) before 1.31 allows remote attackers to execute arbitrary code by uploading a file with an HTTP (1) PUT or (2)

    KritikCVSS 10,0İstismar yokEPSS %10

    samsung · samsung security manager1 May 2015

  • CVE-2015-1155
    40Planlayın

    The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, allows remote attackers

    OrtaCVSS 4,3SilahlaştırılmışEPSS %10

    apple · iphone os7 May 2015

  • CVE-2015-1880
    21İzleyin

    Cross-site scripting (XSS) vulnerability in the sslvpn login page in Fortinet FortiOS 5.2.x before 5.2.3 allows remote attackers to inject a

    OrtaCVSS 4,3Kavram kanıtıEPSS %14

    fortinet · fortios12 May 2015

  • CVE-2015-2219
    40Planlayın

    Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which allows local users to ga

    YüksekCVSS 7,2SilahlaştırılmışEPSS %4

    lenovo · system update12 May 2015

  • CVE-2015-2842
    44Planlayın

    Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoAutoDial GoAdmin CE 3.

    KritikCVSS 10,0Kavram kanıtıEPSS %13

    goautodial · goadmin ce12 May 2015

  • CVE-2015-2843
    41Planlayın

    Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute arbitrary SQL comman

    YüksekCVSS 7,5SilahlaştırılmışEPSS %37

    goautodial · goadmin ce12 May 2015

  • CVE-2015-2844
    44Planlayın

    The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute arbitrary commands via

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    goautodial · goadmin ce12 May 2015

  • CVE-2015-2845
    61Bu hafta

    The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute arbitrary commands via

    KritikCVSS 10,0SilahlaştırılmışEPSS %71

    goautodial · goadmin ce12 May 2015

  • CVE-2015-3622
    27İzleyin

    The _asn1_extract_der_octet function in lib/decoding.c in GNU Libtasn1 before 4.5 allows remote attackers to cause a denial of service (out-

    OrtaCVSS 4,3İstismar yokEPSS %32

    gnu · libtasn112 May 2015

  • CVE-2014-9160
    43Planlayın

    Multiple heap-based buffer overflows in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attac

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · acrobat reader13 May 2015

  • CVE-2015-1658
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1670
    22İzleyin

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, allows remote attackers

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · .net framework13 May 2015

  • CVE-2015-1671
    76Bu hafta

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %48

    microsoft · .net framework13 May 2015

  • CVE-2015-1672
    25İzleyin

    Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allows remote attackers to cause a denial of service (recursion and p

    OrtaCVSS 5,0İstismar yokEPSS %17

    microsoft · .net framework13 May 2015

  • CVE-2015-1673
    42Planlayın

    The Windows Forms (aka WinForms) libraries in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2 allow user-ass

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · .net framework13 May 2015

  • CVE-2015-1675
    41Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · windows 713 May 2015

  • CVE-2015-1682
    43Planlayın

    Microsoft Office 2010 SP2, Excel 2010 SP2, PowerPoint 2010 SP2, Word 2010 SP2, Office 2013 SP1, Excel 2013 SP1, PowerPoint 2013 SP1, Word 20

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · excel13 May 2015

  • CVE-2015-1684
    22İzleyin

    VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other products, allows remote a

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · vbscript13 May 2015

  • CVE-2015-1685
    22İzleyin

    Microsoft Internet Explorer 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explore

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · internet explorer13 May 2015

  • CVE-2015-1686
    22İzleyin

    The Microsoft (1) VBScript 5.6 through 5.8 and (2) JScript 5.6 through 5.8 engines, as used in Internet Explorer 8 through 11 and other prod

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · internet explorer13 May 2015

  • CVE-2015-1688
    30İzleyin

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation

    OrtaCVSS 6,8İstismar yokEPSS %10

    microsoft · internet explorer13 May 2015

  • CVE-2015-1689
    42Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1691
    42Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1692
    28İzleyin

    Microsoft Internet Explorer 7 through 11 allows user-assisted remote attackers to read the clipboard contents via crafted web script, aka "I

    OrtaCVSS 4,3İstismar yokEPSS %35

    microsoft · internet explorer13 May 2015

  • CVE-2015-1694
    42Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1695
    41Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · windows 713 May 2015

  • CVE-2015-1696
    42Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · windows 713 May 2015

  • CVE-2015-1697
    42Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · windows 713 May 2015

  • CVE-2015-1698
    42Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · windows 713 May 2015

  • CVE-2015-1699
    41Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · windows 713 May 2015

  • CVE-2015-1700
    28İzleyin

    Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Foundation 2013 SP1 allow r

    OrtaCVSS 6,0İstismar yokEPSS %12

    microsoft · sharepoint foundation13 May 2015

  • CVE-2015-1703
    30İzleyin

    Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation

    OrtaCVSS 6,8İstismar yokEPSS %10

    microsoft · internet explorer13 May 2015

  • CVE-2015-1704
    30İzleyin

    Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation

    OrtaCVSS 6,8İstismar yokEPSS %10

    microsoft · internet explorer13 May 2015

  • CVE-2015-1705
    42Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1706
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1708
    42Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1709
    42Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1710
    42Planlayın

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1711
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1712
    45Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · internet explorer13 May 2015

  • CVE-2015-1713
    30İzleyin

    Microsoft Internet Explorer 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privil

    OrtaCVSS 6,8İstismar yokEPSS %10

    microsoft · internet explorer13 May 2015

  • CVE-2015-1714
    45Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %26

    microsoft · internet explorer13 May 2015

  • CVE-2015-1715
    41Planlayın

    Microsoft Silverlight 5 before 5.1.40416.00 allows remote attackers to bypass intended integrity-level restrictions via a crafted Silverligh

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · silverlight13 May 2015

  • CVE-2015-1716
    26İzleyin

    Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,

    OrtaCVSS 5,0İstismar yokEPSS %20

    microsoft · windows 713 May 2015

  • CVE-2015-1717
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-1718
    42Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer13 May 2015

  • CVE-2015-3046
    44Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat13 May 2015

  • CVE-2015-3048
    44Planlayın

    Buffer overflow in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to execute arbi

    KritikCVSS 10,0İstismar yokEPSS %13

    adobe · acrobat13 May 2015

  • CVE-2015-3049
    44Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat reader13 May 2015

  • CVE-2015-3050
    44Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat reader13 May 2015

  • CVE-2015-3051
    44Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat13 May 2015

  • CVE-2015-3052
    44Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat13 May 2015

  • CVE-2015-3053
    43Planlayın

    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to

    KritikCVSS 10,0İstismar yokEPSS %11

    adobe · acrobat13 May 2015

  • CVE-2015-3054
    43Planlayın

    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · acrobat13 May 2015

  • CVE-2015-3056
    44Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat13 May 2015

  • CVE-2015-3057
    44Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat13 May 2015

  • CVE-2015-3059
    43Planlayın

    Use-after-free vulnerability in Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allows attackers to

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · acrobat13 May 2015

  • CVE-2015-3070
    44Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat reader13 May 2015

  • CVE-2015-3073
    48Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass intended restrictions on

    KritikCVSS 10,0Kavram kanıtıEPSS %25

    adobe · acrobat13 May 2015

  • CVE-2015-3076
    44Planlayın

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to execute arbitrary code or cause

    KritikCVSS 10,0İstismar yokEPSS %12

    adobe · acrobat reader13 May 2015

  • CVE-2015-3077
    44Planlayın

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR

    KritikCVSS 10,0İstismar yokEPSS %14

    adobe · flash player13 May 2015

  • CVE-2015-3080
    57Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before

    KritikCVSS 10,0Kavram kanıtıEPSS %56

    adobe · flash player13 May 2015

  • CVE-2015-3081
    20İzleyin

    Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 o

    OrtaCVSS 4,3Kavram kanıtıEPSS %11

    adobe · flash player13 May 2015

  • CVE-2015-3082
    38İzleyin

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR

    OrtaCVSS 6,4Kavram kanıtıEPSS %42

    adobe · air13 May 2015

  • CVE-2015-3083
    37İzleyin

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR

    OrtaCVSS 6,4Kavram kanıtıEPSS %41

    adobe · flash player13 May 2015

  • CVE-2015-3087
    62Bu hafta

    Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460

    KritikCVSS 10,0Kavram kanıtıEPSS %74

    adobe · air13 May 2015

  • CVE-2015-3088
    59Planlayın

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11

    KritikCVSS 10,0Kavram kanıtıEPSS %61

    adobe · flash player13 May 2015

  • CVE-2015-3089
    54Planlayın

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR

    KritikCVSS 10,0Kavram kanıtıEPSS %47

    adobe · air13 May 2015

  • CVE-2015-3090
    65Bu hafta

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR

    KritikCVSS 10,0SilahlaştırılmışEPSS %83

    adobe · flash player13 May 2015

  • CVE-2015-3093
    54Planlayın

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.460 on Linux, Adobe AIR

    KritikCVSS 10,0Kavram kanıtıEPSS %47

    adobe · air13 May 2015

  • CVE-2015-1683
    41Planlayın

    Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · office13 May 2015

  • CVE-2015-3456
    35İzleyin

    The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a denial of service (o

    YüksekCVSS 7,7Kavram kanıtıEPSS %15

    qemu · qemu13 May 2015

  • CVE-2015-1868
    56Planlayın

    The label decompression functionality in PowerDNS Recursor 3.5.x, 3.6.x before 3.6.3, and 3.7.x before 3.7.2 and Authoritative (Auth) Server

    YüksekCVSS 7,8İstismar yokEPSS %81

    powerdns · authoritative18 May 2015

  • CVE-2015-3455
    13İzleyin

    Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before 3.4.13, and 3.5.x before 3.5.4, when configured with client-first SSL-bump, do

    DüşükCVSS 2,6İstismar yokEPSS %11

    oracle · linux18 May 2015

  • CVE-2015-3306
    100Hemen

    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

    KritikCVSS 10,0KEVSilahlaştırılmışEPSS %99

    proftpd · proftpd18 May 2015

  • CVE-2015-4000
    60Bu hafta

    The TLS protocol 1.2 and earlier, when a DHE_EXPORT ciphersuite is enabled on a server but not on a client, does not properly convey a DHE_E

    DüşükCVSS 3,7SilahlaştırılmışEPSS %99

    openssl · openssl20 May 2015

  • CVE-2015-3036
    48Planlayın

    Stack-based buffer overflow in the run_init_sbus function in the KCodes NetUSB module for the Linux kernel, as used in certain NETGEAR produ

    KritikCVSS 10,0Kavram kanıtıEPSS %27

    kcodes · netusb20 May 2015

  • CVE-2015-1896
    49Planlayın

    Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %31

    ibm · tivoli storage manager fastback24 May 2015

  • CVE-2015-2110
    43Planlayın

    Buffer overflow in HP LoadRunner 11.52 allows remote attackers to execute arbitrary code via unspecified vectors.

    KritikCVSS 10,0İstismar yokEPSS %10

    hp · loadrunner25 May 2015

  • CVE-2015-0935
    34İzleyin

    Bomgar Remote Support before 15.1.1 allows remote attackers to execute arbitrary PHP code via crafted serialized data to unspecified PHP scr

    YüksekCVSS 7,5Kavram kanıtıEPSS %11

    bomgar · remote support25 May 2015

  • CVE-2014-8146
    37İzleyin

    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Compone

    YüksekCVSS 7,5Kavram kanıtıEPSS %24

    apple · itunes25 May 2015

  • CVE-2014-8147
    37İzleyin

    The resolveImplicitLevels function in common/ubidi.c in the Unicode Bidirectional Algorithm implementation in ICU4C in International Compone

    YüksekCVSS 7,5Kavram kanıtıEPSS %23

    apple · mac os x25 May 2015

  • CVE-2015-3331
    40Planlayın

    The __driver_rfc4106_decrypt function in arch/x86/crypto/aesni-intel_glue.c in the Linux kernel before 3.19.3 does not properly determine th

    KritikCVSS 9,3İstismar yokEPSS %10

    linux · linux kernel27 May 2015

  • CVE-2015-4133
    49Planlayın

    Unrestricted file upload vulnerability in admin/scripts/FileUploader/php.php in the ReFlex Gallery plugin before 3.1.4 for WordPress allows

    YüksekCVSS 7,5SilahlaştırılmışEPSS %61

    reflex gallery project · reflex gallery28 May 2015

  • CVE-2014-9727
    62Bu hafta

    AVM Fritz!Box allows remote attackers to execute arbitrary commands via shell metacharacters in the var:lang parameter to cgi-bin/webcm.

    KritikCVSS 10,0SilahlaştırılmışEPSS %72

    avm · fritz\!box29 May 2015

  • CVE-2015-1833
    42Planlayın

    XML external entity (XXE) vulnerability in Apache Jackrabbit before 2.0.6, 2.2.x before 2.2.14, 2.4.x before 2.4.6, 2.6.x before 2.6.6, 2.8.

    OrtaCVSS 6,4Kavram kanıtıEPSS %55

    apache · jackrabbit29 May 2015

  • CVE-2015-4068
    85Hemen

    Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a den

    KritikCVSS 9,1KEVSilahlaştırılmışEPSS %63

    arcserve · udp29 May 2015

  • CVE-2015-3292
    44Planlayın

    The installer in NetApp OnCommand Workflow Automation before 2.2.1P1 and 3.x before 3.0P1 sets up the Java Debugging Wire Protocol (JDWP) se

    KritikCVSS 10,0Kavram kanıtıEPSS %12

    netapp · oncommand workflow automation31 May 2015