Yayın tarihine göre
Haziran 2015: sömürülen ve yeni ciddi CVE kayıtları
80 kayıt · 3 KEV. Yayın sırasıyla.
Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.
Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
44Planlayın | CVE-2010-5323Kavram kanıtı | Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 bnovell · zenworks configuration management · CWE-22 | Kritik10,0 | — | %14,3 | 7 Haz 2015 |
62Bu hafta | CVE-2010-5324Silahlaştırılmış | Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 bnovell · zenworks configuration management · CWE-22 | Kritik10,0 | — | %71,8 | 7 Haz 2015 |
62Bu hafta | CVE-2015-0779Silahlaştırılmış | Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote anovell · zenworks configuration management · CWE-22 | Kritik10,0 | — | %74,3 | 7 Haz 2015 |
37İzleyin | CVE-2014-0230İstismar yok | Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs beforeapache · tomcat · CWE-399 | Yüksek7,8 | — | %20,1 | 7 Haz 2015 |
24İzleyin | CVE-2014-7810İstismar yok | The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly capache · tomcat · CWE-284 | Orta5,0 | — | %13,8 | 7 Haz 2015 |
47Planlayın | CVE-2015-2993Silahlaştırılmış | SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create adminissysaid · sysaid · CWE-264 | Yüksek7,5 | — | %55,1 | 8 Haz 2015 |
41Planlayın | CVE-2015-2994Silahlaştırılmış | Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary sysaid · sysaid | Orta6,5 | — | %49,7 | 8 Haz 2015 |
40Planlayın | CVE-2015-2995Silahlaştırılmış | The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload ansysaid · sysaid · CWE-22 | Orta6,8 | — | %33,5 | 8 Haz 2015 |
60Bu hafta | CVE-2015-2996Silahlaştırılmış | Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a ..sysaid · sysaid · CWE-22 | Yüksek8,5 | — | %86,5 | 8 Haz 2015 |
40Planlayın | CVE-2015-2997Silahlaştırılmış | SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getAsysaid · sysaid · CWE-200 | Orta5,0 | — | %56,9 | 8 Haz 2015 |
40Planlayın | CVE-2015-2998Silahlaştırılmış | SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, assysaid · sysaid · CWE-200 | Orta5,0 | — | %26,1 | 8 Haz 2015 |
26İzleyin | CVE-2015-2783İstismar yok | ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information frphp · php · CWE-119 | Orta5,8 | — | %10,3 | 9 Haz 2015 |
41Planlayın | CVE-2015-3329İstismar yok | Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.xphp · php · CWE-119 | Yüksek7,5 | — | %38,2 | 9 Haz 2015 |
31İzleyin | CVE-2015-3330İstismar yok | The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the Aphp · php · CWE-20 | Orta6,8 | — | %13,9 | 9 Haz 2015 |
26İzleyin | CVE-2015-4021İstismar yok | The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that thephp · php · CWE-189 | Orta5,0 | — | %21,2 | 9 Haz 2015 |
36İzleyin | CVE-2015-4022İstismar yok | Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remotphp · php · CWE-189 | Yüksek7,5 | — | %20,8 | 9 Haz 2015 |
35İzleyin | CVE-2015-4024İstismar yok | Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, aphp · php · CWE-399 | Orta5,0 | — | %49,8 | 9 Haz 2015 |
36İzleyin | CVE-2015-4025İstismar yok | PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situationsphp · php · CWE-19 | Yüksek7,5 | — | %19,3 | 9 Haz 2015 |
36İzleyin | CVE-2015-4026İstismar yok | The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x0php · php · CWE-19 | Yüksek7,5 | — | %19,5 | 9 Haz 2015 |
34İzleyin | CVE-2015-4147İstismar yok | The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __dephp · php · CWE-19 | Yüksek7,5 | — | %12,1 | 9 Haz 2015 |
26İzleyin | CVE-2015-4148Kavram kanıtı | The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri php · php · CWE-20 | Orta5,0 | — | %19,8 | 9 Haz 2015 |
41Planlayın | CVE-2015-1687İstismar yok | Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vmicrosoft · internet explorer · CWE-19 | Kritik9,3 | — | %12,9 | 9 Haz 2015 |
42Planlayın | CVE-2015-1728İstismar yok | Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "microsoft · windows media player · CWE-17 | Kritik9,3 | — | %17,5 | 9 Haz 2015 |
46Planlayın | CVE-2015-1730Kavram kanıtı | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %29,0 | 9 Haz 2015 |
43Planlayın | CVE-2015-1731İstismar yok | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %21,0 | 9 Haz 2015 |
41Planlayın | CVE-2015-1732İstismar yok | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %12,9 | 9 Haz 2015 |
42Planlayın | CVE-2015-1735İstismar yok | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
43Planlayın | CVE-2015-1736İstismar yok | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %19,3 | 9 Haz 2015 |
42Planlayın | CVE-2015-1737İstismar yok | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
32İzleyin | CVE-2015-1739İstismar yok | Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation ofmicrosoft · internet explorer · CWE-264 | Orta6,8 | — | %15,0 | 9 Haz 2015 |
42Planlayın | CVE-2015-1740İstismar yok | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
42Planlayın | CVE-2015-1741İstismar yok | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
42Planlayın | CVE-2015-1742İstismar yok | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
24İzleyin | CVE-2015-1743İstismar yok | Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevationmicrosoft · internet explorer · CWE-367 | Orta5,1 | — | %13,6 | 9 Haz 2015 |
42Planlayın | CVE-2015-1744İstismar yok | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
44Planlayın | CVE-2015-1745İstismar yok | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %23,6 | 9 Haz 2015 |
44Planlayın | CVE-2015-1747İstismar yok | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %23,6 | 9 Haz 2015 |
32İzleyin | CVE-2015-1748İstismar yok | Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevationmicrosoft · internet explorer · CWE-264 | Orta6,8 | — | %15,0 | 9 Haz 2015 |
44Planlayın | CVE-2015-1750İstismar yok | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %22,4 | 9 Haz 2015 |
42Planlayın | CVE-2015-1751İstismar yok | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %16,5 | 9 Haz 2015 |
42Planlayın | CVE-2015-1752İstismar yok | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
42Planlayın | CVE-2015-1753İstismar yok | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
42Planlayın | CVE-2015-1754İstismar yok | Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
43Planlayın | CVE-2015-1755İstismar yok | Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-399 | Kritik9,3 | — | %19,5 | 9 Haz 2015 |
42Planlayın | CVE-2015-1756İstismar yok | Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,microsoft · windows 7 · CWE-416 | Kritik9,3 | — | %17,4 | 9 Haz 2015 |
20İzleyin | CVE-2015-1757İstismar yok | Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Windows Server 2008 SP2 andmicrosoft · active directory federation services · CWE-79 | Orta4,3 | — | %10,9 | 9 Haz 2015 |
42Planlayın | CVE-2015-1759İstismar yok | Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Offimicrosoft · office compatibility pack · CWE-19 | Kritik9,3 | — | %16,2 | 9 Haz 2015 |
42Planlayın | CVE-2015-1760İstismar yok | Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrarmicrosoft · office · CWE-19 | Kritik9,3 | — | %16,2 | 9 Haz 2015 |
21İzleyin | CVE-2015-1764İstismar yok | The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy amicrosoft · exchange server | Orta4,3 | — | %13,4 | 9 Haz 2015 |
21İzleyin | CVE-2015-1765İstismar yok | Microsoft Internet Explorer 9 through 11 allows remote attackers to read the browser history via a crafted web site.microsoft · internet explorer · CWE-200 | Orta4,3 | — | %14,1 | 9 Haz 2015 |
42Planlayın | CVE-2015-1766İstismar yok | Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-399 | Kritik9,3 | — | %15,5 | 9 Haz 2015 |
75Bu hafta | CVE-2015-1770Silahlaştırılmış | Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Ofmicrosoft · office · CWE-824 | Yüksek8,8 | KEV | %34,9 | 9 Haz 2015 |
20İzleyin | CVE-2015-2359İstismar yok | Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attackemicrosoft · exchange server · CWE-79 | Orta4,3 | — | %11,0 | 9 Haz 2015 |
69Bu hafta | CVE-2015-2360Silahlaştırılmış | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1microsoft · windows 7 · CWE-119 | Yüksek8,8 | KEV | %14,8 | 9 Haz 2015 |
24İzleyin | CVE-2015-3097İstismar yok | Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160, Adobe AIR before 18.0.0.144, Adobe AIR SDK before 18.0.0.144, adobe · air · CWE-200 | Orta5,0 | — | %11,9 | 9 Haz 2015 |
67Bu hafta | CVE-2015-3105Silahlaştırılmış | Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIRadobe · flash player · CWE-119 | Kritik10,0 | — | %90,1 | 9 Haz 2015 |
53Planlayın | CVE-2015-3106Kavram kanıtı | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before adobe · air | Kritik10,0 | — | %43,4 | 9 Haz 2015 |
50Planlayın | CVE-2015-3107Kavram kanıtı | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before adobe · air · CWE-416 | Kritik10,0 | — | %32,4 | 9 Haz 2015 |
24İzleyin | CVE-2015-4153Kavram kanıtı | Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and ezanematthew · zm ajax login \& register · CWE-22 | Orta5,0 | — | %13,3 | 10 Haz 2015 |
35İzleyin | CVE-2014-8176İstismar yok | The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structureopenssl · openssl · CWE-119 | Yüksek7,5 | — | %16,5 | 12 Haz 2015 |
24İzleyin | CVE-2015-1788Kavram kanıtı | The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0openssl · openssl · CWE-399 | Orta4,3 | — | %24,2 | 12 Haz 2015 |
53Planlayın | CVE-2015-1789İstismar yok | The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1openssl · openssl · CWE-119 | Yüksek7,5 | — | %75,6 | 12 Haz 2015 |
27İzleyin | CVE-2015-1790Kavram kanıtı | The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 beforopenssl · openssl | Orta5,0 | — | %22,7 | 12 Haz 2015 |
32İzleyin | CVE-2015-1791Kavram kanıtı | Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0openssl · openssl · CWE-362 | Orta6,8 | — | %16,7 | 12 Haz 2015 |
27İzleyin | CVE-2015-1792Kavram kanıtı | The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.openssl · openssl · CWE-399 | Orta5,0 | — | %22,3 | 12 Haz 2015 |
33İzleyin | CVE-2015-3205Kavram kanıtı | libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" fulibmimedir project · libmimedir · CWE-74 | Yüksek7,5 | — | %10,5 | 16 Haz 2015 |
26İzleyin | CVE-2015-4414Kavram kanıtı | Directory traversal vulnerability in download_audio.php in the SE HTML5 Album Audio Player (se-html5-album-audio-player) plugin 1.1.0 and ease html5 album audio player project · se html5 album audio player · CWE-22 | Orta5,0 | — | %18,8 | 17 Haz 2015 |
25İzleyin | CVE-2015-3897Kavram kanıtı | Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a ..bonitasoft · bonita bpm portal · CWE-22 | Orta5,0 | — | %17,5 | 18 Haz 2015 |
63Bu hafta | CVE-2015-2797Silahlaştırılmış | Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with fiairties · air firmware · CWE-119 | Kritik10,0 | — | %77,7 | 19 Haz 2015 |
99Hemen | CVE-2015-3113Silahlaştırılmış | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11adobe · flash player · CWE-787 | Kritik9,8 | KEV | %99,8 | 23 Haz 2015 |
45Planlayın | CVE-2015-3110Kavram kanıtı | Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary codeadobe · photoshop cc · CWE-189 | Kritik10,0 | — | %16,5 | 24 Haz 2015 |
46Planlayın | CVE-2015-3111Kavram kanıtı | Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbiadobe · bridge · CWE-119 | Kritik10,0 | — | %19,4 | 24 Haz 2015 |
44Planlayın | CVE-2015-3112Kavram kanıtı | Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code or cause a denial ofadobe · bridge · CWE-119 | Kritik10,0 | — | %14,2 | 24 Haz 2015 |
25İzleyin | CVE-2015-5065Kavram kanıtı | Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plugintelligent-it · paypal currency converter basic for woocommerce · CWE-22 | Orta5,0 | — | %16,2 | 24 Haz 2015 |
49Planlayın | CVE-2015-1158Kavram kanıtı | The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-cups · cups · CWE-254 | Kritik10,0 | — | %29,7 | 26 Haz 2015 |
26İzleyin | CVE-2014-9734Kavram kanıtı | Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote attackers to read arbitthemepunch · slider revolution · CWE-22 | Orta5,0 | — | %20,4 | 30 Haz 2015 |
53Planlayın | CVE-2014-9735Silahlaştırılmış | The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does themepunch · showbiz pro · CWE-264 | Yüksek7,5 | — | %75,5 | 30 Haz 2015 |
25İzleyin | CVE-2015-5149Kavram kanıtı | Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary fileszohocorp · manageengine supportcenter plus · CWE-22 | Orta5,5 | — | %10,3 | 30 Haz 2015 |
37İzleyin | CVE-2015-1923İstismar yok | Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service ibm · tivoli storage manager fastback · CWE-119 | Yüksek7,8 | — | %19,0 | 30 Haz 2015 |
40Planlayın | CVE-2015-1930Silahlaştırılmış | Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denialibm · tivoli storage manager fastback · CWE-119 | Yüksek7,8 | — | %9,9 | 30 Haz 2015 |
- CVE-2010-532344Planlayın
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 b
KritikCVSS 10,0Kavram kanıtıEPSS %14novell · zenworks configuration management7 Haz 2015
- CVE-2010-532462Bu hafta
Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 b
KritikCVSS 10,0SilahlaştırılmışEPSS %71novell · zenworks configuration management7 Haz 2015
- CVE-2015-077962Bu hafta
Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote a
KritikCVSS 10,0SilahlaştırılmışEPSS %74novell · zenworks configuration management7 Haz 2015
- CVE-2014-023037İzleyin
Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before
YüksekCVSS 7,8İstismar yokEPSS %20apache · tomcat7 Haz 2015
- CVE-2014-781024İzleyin
The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly c
OrtaCVSS 5,0İstismar yokEPSS %13apache · tomcat7 Haz 2015
- CVE-2015-299347Planlayın
SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create adminis
YüksekCVSS 7,5SilahlaştırılmışEPSS %55sysaid · sysaid8 Haz 2015
- CVE-2015-299441Planlayın
Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary
OrtaCVSS 6,5SilahlaştırılmışEPSS %49sysaid · sysaid8 Haz 2015
- CVE-2015-299540Planlayın
The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload an
OrtaCVSS 6,8SilahlaştırılmışEPSS %33sysaid · sysaid8 Haz 2015
- CVE-2015-299660Bu hafta
Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a ..
YüksekCVSS 8,5SilahlaştırılmışEPSS %86sysaid · sysaid8 Haz 2015
- CVE-2015-299740Planlayın
SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getA
OrtaCVSS 5,0SilahlaştırılmışEPSS %56sysaid · sysaid8 Haz 2015
- CVE-2015-299840Planlayın
SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as
OrtaCVSS 5,0SilahlaştırılmışEPSS %26sysaid · sysaid8 Haz 2015
- CVE-2015-278326İzleyin
ext/phar/phar.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allows remote attackers to obtain sensitive information fr
OrtaCVSS 5,8İstismar yokEPSS %10php · php9 Haz 2015
- CVE-2015-332941Planlayın
Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x
YüksekCVSS 7,5İstismar yokEPSS %38php · php9 Haz 2015
- CVE-2015-333031İzleyin
The php_handler function in sapi/apache2handler/sapi_apache2.c in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8, when the A
OrtaCVSS 6,8İstismar yokEPSS %13php · php9 Haz 2015
- CVE-2015-402126İzleyin
The phar_parse_tarfile function in ext/phar/tar.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 does not verify that the
OrtaCVSS 5,0İstismar yokEPSS %21php · php9 Haz 2015
- CVE-2015-402236İzleyin
Integer overflow in the ftp_genlist function in ext/ftp/ftp.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remot
YüksekCVSS 7,5İstismar yokEPSS %20php · php9 Haz 2015
- CVE-2015-402435İzleyin
Algorithmic complexity vulnerability in the multipart_buffer_headers function in main/rfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, a
OrtaCVSS 5,0İstismar yokEPSS %49php · php9 Haz 2015
- CVE-2015-402536İzleyin
PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x00 character in certain situations
YüksekCVSS 7,5İstismar yokEPSS %19php · php9 Haz 2015
- CVE-2015-402636İzleyin
The pcntl_exec implementation in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 truncates a pathname upon encountering a \x0
YüksekCVSS 7,5İstismar yokEPSS %19php · php9 Haz 2015
- CVE-2015-414734İzleyin
The SoapClient::__call method in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that __de
YüksekCVSS 7,5İstismar yokEPSS %12php · php9 Haz 2015
- CVE-2015-414826İzleyin
The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not verify that the uri
OrtaCVSS 5,0Kavram kanıtıEPSS %19php · php9 Haz 2015
- CVE-2015-168741Planlayın
Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v
KritikCVSS 9,3İstismar yokEPSS %12microsoft · internet explorer9 Haz 2015
- CVE-2015-172842Planlayın
Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka "
KritikCVSS 9,3İstismar yokEPSS %17microsoft · windows media player9 Haz 2015
- CVE-2015-173046Planlayın
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
KritikCVSS 9,3Kavram kanıtıEPSS %29microsoft · internet explorer9 Haz 2015
- CVE-2015-173143Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %21microsoft · internet explorer9 Haz 2015
- CVE-2015-173241Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %12microsoft · internet explorer9 Haz 2015
- CVE-2015-173542Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-173643Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %19microsoft · internet explorer9 Haz 2015
- CVE-2015-173742Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-173932İzleyin
Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of
OrtaCVSS 6,8İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-174042Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-174142Planlayın
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-174242Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-174324İzleyin
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation
OrtaCVSS 5,1İstismar yokEPSS %13microsoft · internet explorer9 Haz 2015
- CVE-2015-174442Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-174544Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %23microsoft · internet explorer9 Haz 2015
- CVE-2015-174744Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %23microsoft · internet explorer9 Haz 2015
- CVE-2015-174832İzleyin
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation
OrtaCVSS 6,8İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-175044Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %22microsoft · internet explorer9 Haz 2015
- CVE-2015-175142Planlayın
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %16microsoft · internet explorer9 Haz 2015
- CVE-2015-175242Planlayın
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-175342Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-175442Planlayın
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-175543Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %19microsoft · internet explorer9 Haz 2015
- CVE-2015-175642Planlayın
Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,
KritikCVSS 9,3İstismar yokEPSS %17microsoft · windows 79 Haz 2015
- CVE-2015-175720İzleyin
Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Windows Server 2008 SP2 and
OrtaCVSS 4,3İstismar yokEPSS %10microsoft · active directory federation services9 Haz 2015
- CVE-2015-175942Planlayın
Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Offi
KritikCVSS 9,3İstismar yokEPSS %16microsoft · office compatibility pack9 Haz 2015
- CVE-2015-176042Planlayın
Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrar
KritikCVSS 9,3İstismar yokEPSS %16microsoft · office9 Haz 2015
- CVE-2015-176421İzleyin
The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy a
OrtaCVSS 4,3İstismar yokEPSS %13microsoft · exchange server9 Haz 2015
- CVE-2015-176521İzleyin
Microsoft Internet Explorer 9 through 11 allows remote attackers to read the browser history via a crafted web site.
OrtaCVSS 4,3İstismar yokEPSS %14microsoft · internet explorer9 Haz 2015
- CVE-2015-176642Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %15microsoft · internet explorer9 Haz 2015
- CVE-2015-177075Bu hafta
Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Of
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %34microsoft · office9 Haz 2015
- CVE-2015-235920İzleyin
Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attacke
OrtaCVSS 4,3İstismar yokEPSS %11microsoft · exchange server9 Haz 2015
- CVE-2015-236069Bu hafta
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %14microsoft · windows 79 Haz 2015
- CVE-2015-309724İzleyin
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160, Adobe AIR before 18.0.0.144, Adobe AIR SDK before 18.0.0.144,
OrtaCVSS 5,0İstismar yokEPSS %11adobe · air9 Haz 2015
- CVE-2015-310567Bu hafta
Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR
KritikCVSS 10,0SilahlaştırılmışEPSS %90adobe · flash player9 Haz 2015
- CVE-2015-310653Planlayın
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before
KritikCVSS 10,0Kavram kanıtıEPSS %43adobe · air9 Haz 2015
- CVE-2015-310750Planlayın
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before
KritikCVSS 10,0Kavram kanıtıEPSS %32adobe · air9 Haz 2015
- CVE-2015-415324İzleyin
Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and e
OrtaCVSS 5,0Kavram kanıtıEPSS %13zanematthew · zm ajax login \& register10 Haz 2015
- CVE-2014-817635İzleyin
The dtls1_clear_queues function in ssl/d1_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structure
YüksekCVSS 7,5İstismar yokEPSS %16openssl · openssl12 Haz 2015
- CVE-2015-178824İzleyin
The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0
OrtaCVSS 4,3Kavram kanıtıEPSS %24openssl · openssl12 Haz 2015
- CVE-2015-178953Planlayın
The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1
YüksekCVSS 7,5İstismar yokEPSS %75openssl · openssl12 Haz 2015
- CVE-2015-179027İzleyin
The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 befor
OrtaCVSS 5,0Kavram kanıtıEPSS %22openssl · openssl12 Haz 2015
- CVE-2015-179132İzleyin
Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0
OrtaCVSS 6,8Kavram kanıtıEPSS %16openssl · openssl12 Haz 2015
- CVE-2015-179227İzleyin
The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1.
OrtaCVSS 5,0Kavram kanıtıEPSS %22openssl · openssl12 Haz 2015
- CVE-2015-320533İzleyin
libmimedir allows remote attackers to execute arbitrary code via a VCF file with two NULL bytes at the end of the file, related to "free" fu
YüksekCVSS 7,5Kavram kanıtıEPSS %10libmimedir project · libmimedir16 Haz 2015
- CVE-2015-441426İzleyin
Directory traversal vulnerability in download_audio.php in the SE HTML5 Album Audio Player (se-html5-album-audio-player) plugin 1.1.0 and ea
OrtaCVSS 5,0Kavram kanıtıEPSS %18se html5 album audio player project · se html5 album audio player17 Haz 2015
- CVE-2015-389725İzleyin
Directory traversal vulnerability in Bonita BPM Portal before 6.5.3 allows remote attackers to read arbitrary files via a ..
OrtaCVSS 5,0Kavram kanıtıEPSS %17bonitasoft · bonita bpm portal18 Haz 2015
- CVE-2015-279763Bu hafta
Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with fi
KritikCVSS 10,0SilahlaştırılmışEPSS %77airties · air firmware19 Haz 2015
- CVE-2015-311399Hemen
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %99adobe · flash player23 Haz 2015
- CVE-2015-311045Planlayın
Integer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbitrary code
KritikCVSS 10,0Kavram kanıtıEPSS %16adobe · photoshop cc24 Haz 2015
- CVE-2015-311146Planlayın
Heap-based buffer overflow in Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allows attackers to execute arbi
KritikCVSS 10,0Kavram kanıtıEPSS %19adobe · bridge24 Haz 2015
- CVE-2015-311244Planlayın
Adobe Photoshop CC before 16.0 (aka 2015.0.0) and Adobe Bridge CC before 6.11 allow attackers to execute arbitrary code or cause a denial of
KritikCVSS 10,0Kavram kanıtıEPSS %14adobe · bridge24 Haz 2015
- CVE-2015-506525İzleyin
Absolute path traversal vulnerability in proxy.php in the google currency lookup in the Paypal Currency Converter Basic For WooCommerce plug
OrtaCVSS 5,0Kavram kanıtıEPSS %16intelligent-it · paypal currency converter basic for woocommerce24 Haz 2015
- CVE-2015-115849Planlayın
The add_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating-
KritikCVSS 10,0Kavram kanıtıEPSS %29cups · cups26 Haz 2015
- CVE-2014-973426İzleyin
Directory traversal vulnerability in the Slider Revolution (revslider) plugin before 4.2 for WordPress allows remote attackers to read arbit
OrtaCVSS 5,0Kavram kanıtıEPSS %20themepunch · slider revolution30 Haz 2015
- CVE-2014-973553Planlayın
The ThemePunch Slider Revolution (revslider) plugin before 3.0.96 for WordPress and Showbiz Pro plugin 1.7.1 and earlier for Wordpress does
YüksekCVSS 7,5SilahlaştırılmışEPSS %75themepunch · showbiz pro30 Haz 2015
- CVE-2015-514925İzleyin
Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files
OrtaCVSS 5,5Kavram kanıtıEPSS %10zohocorp · manageengine supportcenter plus30 Haz 2015
- CVE-2015-192337İzleyin
Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service
YüksekCVSS 7,8İstismar yokEPSS %19ibm · tivoli storage manager fastback30 Haz 2015
- CVE-2015-193040Planlayın
Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial
YüksekCVSS 7,8SilahlaştırılmışEPSS %9ibm · tivoli storage manager fastback30 Haz 2015