Yayın tarihine göre

Temmuz 2015: sömürülen ve yeni ciddi CVE kayıtları

78 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
27İzleyin	CVE-2015-5354Kavram kanıtı	Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishingnovius-os · novius os · CWE-601 Kimlik doğrulamasız Açık yönlendirme	Orta5,8	—	%12,4	1 Tem 2015
40Planlayın	CVE-2015-3673Silahlaştırılmış	Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obtapple · mac os x · CWE-264 Yerel yetki yükseltme	Yüksek7,2	—	%5,8	2 Tem 2015
68Bu hafta	CVE-2015-5371Silahlaştırılmış	The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecifiedsolarwinds · storage manager Girişsiz RCE	Kritik10,0	—	%93,0	6 Tem 2015
42Planlayın	CVE-2015-4620İstismar yok	name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DNisc · bind · CWE-17 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,8	—	%37,6	8 Tem 2015
99Hemen	CVE-2015-5119Silahlaştırılmış	Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296adobe · flash player · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,8	KEV	%98,6	8 Tem 2015
44Planlayın	CVE-2015-5453Silahlaştırılmış	Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in twatchguard · xcs · CWE-77 RCE Komut enjeksiyonu	Orta6,5	—	%58,4	8 Tem 2015
23İzleyin	CVE-2015-4616Kavram kanıtı	Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers easy2map project · easy2map · CWE-22 Kimlik doğrulamasız Yol geçişi	Orta5,0	—	%10,4	8 Tem 2015
52Planlayın	CVE-2015-3118Kavram kanıtı	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · flash player Girişsiz RCE	Kritik10,0	—	%40,4	9 Tem 2015
50Planlayın	CVE-2015-3124Kavram kanıtı	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · flash player Girişsiz RCE	Kritik10,0	—	%33,4	9 Tem 2015
52Planlayın	CVE-2015-3128Kavram kanıtı	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · air Girişsiz RCE	Kritik10,0	—	%39,2	9 Tem 2015
48Planlayın	CVE-2015-3134Kavram kanıtı	Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIRadobe · flash player · CWE-119 Girişsiz RCE Bellek hatası	Kritik10,0	—	%26,4	9 Tem 2015
50Planlayın	CVE-2015-3137Kavram kanıtı	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · flash player Girişsiz RCE	Kritik10,0	—	%32,7	9 Tem 2015
50Planlayın	CVE-2015-4430Kavram kanıtı	Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before adobe · air Girişsiz RCE	Kritik10,0	—	%32,7	9 Tem 2015
50Planlayın	CVE-2015-4432Kavram kanıtı	Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11adobe · air · CWE-119 Girişsiz RCE Bellek hatası	Kritik10,0	—	%34,1	9 Tem 2015
27İzleyin	CVE-2015-5116Kavram kanıtı	Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIRadobe · flash player · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta5,0	—	%22,4	9 Tem 2015
48Planlayın	CVE-2015-5118Kavram kanıtı	Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11adobe · flash player · CWE-119 Girişsiz RCE Bellek hatası	Kritik10,0	—	%27,7	9 Tem 2015
60Bu hafta	CVE-2015-1793Silahlaştırılmış	The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic openssl · openssl · CWE-254 Kimlik doğrulamasız	Orta6,5	—	%58,4	9 Tem 2015
97Hemen	CVE-2015-5122Silahlaştırılmış	Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0adobe · flash player · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,8	KEV	%93,8	14 Tem 2015
75Bu hafta	CVE-2015-5123Silahlaştırılmış	Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.30adobe · flash player · CWE-416 Girişsiz RCE Bellek hatası	Kritik9,8	KEV	%18,8	14 Tem 2015
21İzleyin	CVE-2015-1729İstismar yok	Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web smicrosoft · internet explorer · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,3	—	%14,9	14 Tem 2015
41Planlayın	CVE-2015-1733İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-1738İstismar yok	Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
43Planlayın	CVE-2015-1767İstismar yok	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%18,4	14 Tem 2015
30İzleyin	CVE-2015-2369İstismar yok	Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server microsoft · windows 2003 server RCE Yerel yetki yükseltme	Orta6,9	—	%10,0	14 Tem 2015
43Planlayın	CVE-2015-2372İstismar yok	vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers microsoft · vbscript · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%20,2	14 Tem 2015
51Planlayın	CVE-2015-2373İstismar yok	The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to emicrosoft · windows 7 · CWE-19 Girişsiz RCE	Kritik10,0	—	%38,1	14 Tem 2015
21İzleyin	CVE-2015-2375İstismar yok	Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel microsoft · excel · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,3	—	%13,8	14 Tem 2015
42Planlayın	CVE-2015-2376İstismar yok	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibilitmicrosoft · excel · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%15,7	14 Tem 2015
41Planlayın	CVE-2015-2377İstismar yok	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to exemicrosoft · excel · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,6	14 Tem 2015
41Planlayın	CVE-2015-2379İstismar yok	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote microsoft · office · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,7	14 Tem 2015
41Planlayın	CVE-2015-2380İstismar yok	Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to execute arbitrary codmicrosoft · office · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,7	14 Tem 2015
41Planlayın	CVE-2015-2383İstismar yok	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-2384İstismar yok	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-2385İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-2388İstismar yok	Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via amicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-2389İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-2390İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-2391İstismar yok	Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-2397İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
21İzleyin	CVE-2015-2398İstismar yok	Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML dmicrosoft · internet explorer · CWE-79 Kimlik doğrulamasız XSS	Orta4,3	—	%12,0	14 Tem 2015
41Planlayın	CVE-2015-2401İstismar yok	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
21İzleyin	CVE-2015-2402İstismar yok	Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevationmicrosoft · internet explorer · CWE-264 Kimlik doğrulamasız	Orta4,3	—	%12,4	14 Tem 2015
41Planlayın	CVE-2015-2403İstismar yok	Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craftmicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-2404İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
41Planlayın	CVE-2015-2406İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
43Planlayın	CVE-2015-2408İstismar yok	Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%20,8	14 Tem 2015
22İzleyin	CVE-2015-2410İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted stylesheet, aka "Inmicrosoft · internet explorer · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,3	—	%15,5	14 Tem 2015
41Planlayın	CVE-2015-2411İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) viamicrosoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
22İzleyin	CVE-2015-2412İstismar yok	Microsoft Internet Explorer 10 and 11 allows remote attackers to read arbitrary local files via a crafted pathname, aka "Internet Explorer Imicrosoft · internet explorer · CWE-20 Kimlik doğrulamasız	Orta4,3	—	%17,8	14 Tem 2015
22İzleyin	CVE-2015-2413İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted module-resource reqmicrosoft · internet explorer · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,3	—	%15,5	14 Tem 2015
22İzleyin	CVE-2015-2414İstismar yok	Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to imamicrosoft · internet explorer · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,3	—	%15,5	14 Tem 2015
41Planlayın	CVE-2015-2415İstismar yok	Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to exemicrosoft · excel · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,6	14 Tem 2015
81Hemen	CVE-2015-2419Silahlaştırılmış	JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory comicrosoft · internet explorer · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	KEV	%53,1	14 Tem 2015
21İzleyin	CVE-2015-2421İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internmicrosoft · internet explorer · CWE-200 Kimlik doğrulamasız Bilgi sızıntısı	Orta4,3	—	%13,3	14 Tem 2015
41Planlayın	CVE-2015-2422İstismar yok	Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) microsoft · internet explorer · CWE-119 Girişsiz RCE Bellek hatası	Kritik9,3	—	%13,0	14 Tem 2015
77Bu hafta	CVE-2015-2424Silahlaştırılmış	Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RTmicrosoft · excel viewer · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	KEV	%40,3	14 Tem 2015
78Bu hafta	CVE-2015-2425Silahlaştırılmış	Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafmicrosoft · internet explorer · CWE-787 Girişsiz RCE Bellek hatası	Yüksek8,8	KEV	%44,7	14 Tem 2015
71Bu hafta	CVE-2015-2387Silahlaştırılmış	ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,microsoft · windows 7 · CWE-787 Yerel yetki yükseltme Bellek hatası	Yüksek7,8	KEV	%34,8	14 Tem 2015
23İzleyin	CVE-2015-2416İstismar yok	OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windmicrosoft · windows 2003 server · CWE-20 Kimlik doğrulamasız	Orta5,0	—	%10,1	14 Tem 2015
23İzleyin	CVE-2015-2417İstismar yok	OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windmicrosoft · windows 2003 server · CWE-20 Kimlik doğrulamasız	Orta5,0	—	%10,1	14 Tem 2015
32İzleyin	CVE-2015-1761İstismar yok	Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified pmicrosoft · sql server · CWE-284 Erişim denetimi (IDOR)	Orta6,5	—	%18,5	14 Tem 2015
31İzleyin	CVE-2015-1762İstismar yok	Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does nmicrosoft · sql server · CWE-74 RCE	Yüksek7,1	—	%10,3	14 Tem 2015
38İzleyin	CVE-2015-1763İstismar yok	Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not prevent use of uninitialized memory in certamicrosoft · sql server · CWE-284 RCE Erişim denetimi (IDOR)	Yüksek8,5	—	%11,9	14 Tem 2015
46Planlayın	CVE-2015-5097İstismar yok	Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.adobe · acrobat · CWE-190 Girişsiz RCE Bellek hatası	Kritik10,0	—	%18,8	15 Tem 2015
77Bu hafta	CVE-2015-2590Silahlaştırılmış	Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confioracle · jdk Kimlik doğrulamasız	Kritik9,8	KEV	%25,4	16 Tem 2015
43Planlayın	CVE-2015-4748İstismar yok	Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remoteoracle · jrockit Kimlik doğrulamasız	Yüksek7,6	—	%44,8	16 Tem 2015
53Planlayın	CVE-2015-5374Silahlaştırılmış	A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Mosiemens · siprotec firmware · CWE-19 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,8	—	%74,4	18 Tem 2015
91Hemen	CVE-2015-2426Silahlaştırılmış	Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, microsoft · windows 10 · CWE-119 Girişsiz RCE Bellek hatası	Yüksek8,8	KEV	%86,5	20 Tem 2015
24İzleyin	CVE-2015-0253İstismar yok	The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, whicapache · http server Kimlik doğrulamasız Hizmet dışı bırakma	Orta5,0	—	%12,9	20 Tem 2015
20İzleyin	CVE-2015-2863Kavram kanıtı	Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and kaseya · virtual system administrator Kimlik doğrulamasız Açık yönlendirme	Orta4,3	—	%10,3	20 Tem 2015
42Planlayın	CVE-2015-3183İstismar yok	The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remotapache · http server · CWE-17 Kimlik doğrulamasız	Orta5,0	—	%73,3	20 Tem 2015
22İzleyin	CVE-2015-3185İstismar yok	The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require directapache · http server · CWE-264 Kimlik doğrulamasız	Orta4,3	—	%16,3	20 Tem 2015
33İzleyin	CVE-2015-1283İstismar yok	Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other prodgoogle · chrome · CWE-190 Kimlik doğrulamasız Bellek hatası	Orta6,8	—	%18,4	22 Tem 2015
40Planlayın	CVE-2015-3224Silahlaştırılmış	request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For headerrubyonrails · web console · CWE-284 Kimlik doğrulamasız Erişim denetimi (IDOR)	Orta4,3	—	%44,7	26 Tem 2015
90Hemen	CVE-2015-5477Silahlaştırılmış	named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion faisc · bind · CWE-19 Kimlik doğrulamasız Hizmet dışı bırakma	Yüksek7,5	KEV	%99,4	29 Tem 2015
51Planlayın	CVE-2015-1486Silahlaştırılmış	The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authenticatsymantec · endpoint protection manager · CWE-287 Kimlik doğrulamasız Kimlik doğrulama atlatma	Yüksek7,5	—	%68,3	31 Tem 2015
40Planlayın	CVE-2015-1487Silahlaştırılmış	The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write tosymantec · endpoint protection manager · CWE-20	Orta5,5	—	%51,9	31 Tem 2015
42Planlayın	CVE-2015-1489Silahlaştırılmış	The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain prisymantec · endpoint protection manager · CWE-264	Yüksek8,5	—	%25,3	31 Tem 2015

CVE-2015-5354
27İzleyin
Open redirect vulnerability in Novius OS 5.0.1 (Elche) allows remote attackers to redirect users to arbitrary web sites and conduct phishing
OrtaCVSS 5,8Kavram kanıtıEPSS %12
- Kimlik doğrulamasız
- Açık yönlendirme
novius-os · novius os1 Tem 2015
CVE-2015-3673
40Planlayın
Admin Framework in Apple OS X before 10.10.4 does not properly restrict the location of writeconfig clients, which allows local users to obt
YüksekCVSS 7,2SilahlaştırılmışEPSS %5
- Yerel yetki yükseltme
apple · mac os x2 Tem 2015
CVE-2015-5371
68Bu hafta
The AuthenticationFilter class in SolarWinds Storage Manager allows remote attackers to upload and execute arbitrary scripts via unspecified
KritikCVSS 10,0SilahlaştırılmışEPSS %93
- Girişsiz RCE
solarwinds · storage manager6 Tem 2015
CVE-2015-4620
42Planlayın
name.c in named in ISC BIND 9.7.x through 9.9.x before 9.9.7-P1 and 9.10.x before 9.10.2-P2, when configured as a recursive resolver with DN
YüksekCVSS 7,8İstismar yokEPSS %37
- Kimlik doğrulamasız
- Hizmet dışı bırakma
isc · bind8 Tem 2015
CVE-2015-5119
99Hemen
Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %98
- Girişsiz RCE
- Bellek hatası
adobe · flash player8 Tem 2015
CVE-2015-5453
44Planlayın
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in t
OrtaCVSS 6,5SilahlaştırılmışEPSS %58
- RCE
- Komut enjeksiyonu
watchguard · xcs8 Tem 2015
CVE-2015-4616
23İzleyin
Directory traversal vulnerability in includes/MapPinImageSave.php in the Easy2Map plugin before 1.2.5 for WordPress allows remote attackers
OrtaCVSS 5,0Kavram kanıtıEPSS %10
- Kimlik doğrulamasız
- Yol geçişi
easy2map project · easy2map8 Tem 2015
CVE-2015-3118
52Planlayın
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
KritikCVSS 10,0Kavram kanıtıEPSS %40
- Girişsiz RCE
adobe · flash player9 Tem 2015
CVE-2015-3124
50Planlayın
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
KritikCVSS 10,0Kavram kanıtıEPSS %33
- Girişsiz RCE
adobe · flash player9 Tem 2015
CVE-2015-3128
52Planlayın
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
KritikCVSS 10,0Kavram kanıtıEPSS %39
- Girişsiz RCE
adobe · air9 Tem 2015
CVE-2015-3134
48Planlayın
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR
KritikCVSS 10,0Kavram kanıtıEPSS %26
- Girişsiz RCE
- Bellek hatası
adobe · flash player9 Tem 2015
CVE-2015-3137
50Planlayın
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
KritikCVSS 10,0Kavram kanıtıEPSS %32
- Girişsiz RCE
adobe · flash player9 Tem 2015
CVE-2015-4430
50Planlayın
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before
KritikCVSS 10,0Kavram kanıtıEPSS %32
- Girişsiz RCE
adobe · air9 Tem 2015
CVE-2015-4432
50Planlayın
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11
KritikCVSS 10,0Kavram kanıtıEPSS %34
- Girişsiz RCE
- Bellek hatası
adobe · air9 Tem 2015
CVE-2015-5116
27İzleyin
Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR
OrtaCVSS 5,0Kavram kanıtıEPSS %22
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
adobe · flash player9 Tem 2015
CVE-2015-5118
48Planlayın
Heap-based buffer overflow in Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11
KritikCVSS 10,0Kavram kanıtıEPSS %27
- Girişsiz RCE
- Bellek hatası
adobe · flash player9 Tem 2015
CVE-2015-1793
60Bu hafta
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic
OrtaCVSS 6,5SilahlaştırılmışEPSS %58
- Kimlik doğrulamasız
openssl · openssl9 Tem 2015
CVE-2015-5122
97Hemen
Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %93
- Girişsiz RCE
- Bellek hatası
adobe · flash player14 Tem 2015
CVE-2015-5123
75Bu hafta
Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.30
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %18
- Girişsiz RCE
- Bellek hatası
adobe · flash player14 Tem 2015
CVE-2015-1729
21İzleyin
Microsoft Internet Explorer 9 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web s
OrtaCVSS 4,3İstismar yokEPSS %14
- Kimlik doğrulamasız
- Bilgi sızıntısı
microsoft · internet explorer14 Tem 2015
CVE-2015-1733
41Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-1738
41Planlayın
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-1767
43Planlayın
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %18
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2369
30İzleyin
Untrusted search path vulnerability in Windows Media Device Manager in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server
OrtaCVSS 6,9İstismar yokEPSS %10
- RCE
- Yerel yetki yükseltme
microsoft · windows 2003 server14 Tem 2015
CVE-2015-2372
43Planlayın
vbscript.dll in Microsoft VBScript 5.6 through 5.8, as used with Internet Explorer 6 through 11 and other products, allows remote attackers
KritikCVSS 9,3İstismar yokEPSS %20
- Girişsiz RCE
- Bellek hatası
microsoft · vbscript14 Tem 2015
CVE-2015-2373
51Planlayın
The Remote Desktop Protocol (RDP) server service in Microsoft Windows 7 SP1, Windows 8, and Windows Server 2012 allows remote attackers to e
KritikCVSS 10,0İstismar yokEPSS %38
- Girişsiz RCE
microsoft · windows 714 Tem 2015
CVE-2015-2375
21İzleyin
Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel Viewer 2007 SP3, Excel Services on SharePoint Server 2010 SP2, and Excel
OrtaCVSS 4,3İstismar yokEPSS %13
- Kimlik doğrulamasız
- Bilgi sızıntısı
microsoft · excel14 Tem 2015
CVE-2015-2376
42Planlayın
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Office for Mac 2011, Excel Viewer 2007 SP3, Office Compatibilit
KritikCVSS 9,3İstismar yokEPSS %15
- Girişsiz RCE
- Bellek hatası
microsoft · excel14 Tem 2015
CVE-2015-2377
41Planlayın
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to exe
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · excel14 Tem 2015
CVE-2015-2379
41Planlayın
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, and Word Viewer allow remote
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · office14 Tem 2015
CVE-2015-2380
41Planlayın
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, and Word 2013 RT SP1 allow remote attackers to execute arbitrary cod
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · office14 Tem 2015
CVE-2015-2383
41Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2384
41Planlayın
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2385
41Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2388
41Planlayın
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2389
41Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2390
41Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2391
41Planlayın
Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2397
41Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2398
21İzleyin
Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML d
OrtaCVSS 4,3İstismar yokEPSS %12
- Kimlik doğrulamasız
- XSS
microsoft · internet explorer14 Tem 2015
CVE-2015-2401
41Planlayın
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2402
21İzleyin
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation
OrtaCVSS 4,3İstismar yokEPSS %12
- Kimlik doğrulamasız
microsoft · internet explorer14 Tem 2015
CVE-2015-2403
41Planlayın
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2404
41Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2406
41Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2408
43Planlayın
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %20
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2410
22İzleyin
Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted stylesheet, aka "In
OrtaCVSS 4,3İstismar yokEPSS %15
- Kimlik doğrulamasız
- Bilgi sızıntısı
microsoft · internet explorer14 Tem 2015
CVE-2015-2411
41Planlayın
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2412
22İzleyin
Microsoft Internet Explorer 10 and 11 allows remote attackers to read arbitrary local files via a crafted pathname, aka "Internet Explorer I
OrtaCVSS 4,3İstismar yokEPSS %17
- Kimlik doğrulamasız
microsoft · internet explorer14 Tem 2015
CVE-2015-2413
22İzleyin
Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted module-resource req
OrtaCVSS 4,3İstismar yokEPSS %15
- Kimlik doğrulamasız
- Bilgi sızıntısı
microsoft · internet explorer14 Tem 2015
CVE-2015-2414
22İzleyin
Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to ima
OrtaCVSS 4,3İstismar yokEPSS %15
- Kimlik doğrulamasız
- Bilgi sızıntısı
microsoft · internet explorer14 Tem 2015
CVE-2015-2415
41Planlayın
Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to exe
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · excel14 Tem 2015
CVE-2015-2419
81Hemen
JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory co
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %53
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2421
21İzleyin
Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Intern
OrtaCVSS 4,3İstismar yokEPSS %13
- Kimlik doğrulamasız
- Bilgi sızıntısı
microsoft · internet explorer14 Tem 2015
CVE-2015-2422
41Planlayın
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)
KritikCVSS 9,3İstismar yokEPSS %13
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2424
77Bu hafta
Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %40
- Girişsiz RCE
- Bellek hatası
microsoft · excel viewer14 Tem 2015
CVE-2015-2425
78Bu hafta
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %44
- Girişsiz RCE
- Bellek hatası
microsoft · internet explorer14 Tem 2015
CVE-2015-2387
71Bu hafta
ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %34
- Yerel yetki yükseltme
- Bellek hatası
microsoft · windows 714 Tem 2015
CVE-2015-2416
23İzleyin
OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wind
OrtaCVSS 5,0İstismar yokEPSS %10
- Kimlik doğrulamasız
microsoft · windows 2003 server14 Tem 2015
CVE-2015-2417
23İzleyin
OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Wind
OrtaCVSS 5,0İstismar yokEPSS %10
- Kimlik doğrulamasız
microsoft · windows 2003 server14 Tem 2015
CVE-2015-1761
32İzleyin
Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified p
OrtaCVSS 6,5İstismar yokEPSS %18
- Erişim denetimi (IDOR)
microsoft · sql server14 Tem 2015
CVE-2015-1762
31İzleyin
Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does n
YüksekCVSS 7,1İstismar yokEPSS %10
- RCE
microsoft · sql server14 Tem 2015
CVE-2015-1763
38İzleyin
Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not prevent use of uninitialized memory in certa
YüksekCVSS 8,5İstismar yokEPSS %11
- RCE
- Erişim denetimi (IDOR)
microsoft · sql server14 Tem 2015
CVE-2015-5097
46Planlayın
Integer overflow in Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2015.
KritikCVSS 10,0İstismar yokEPSS %18
- Girişsiz RCE
- Bellek hatası
adobe · acrobat15 Tem 2015
CVE-2015-2590
77Bu hafta
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confi
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %25
- Kimlik doğrulamasız
oracle · jdk16 Tem 2015
CVE-2015-4748
43Planlayın
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote
YüksekCVSS 7,6İstismar yokEPSS %44
- Kimlik doğrulamasız
oracle · jrockit16 Tem 2015
CVE-2015-5374
53Planlayın
A vulnerability has been identified in Firmware variant PROFINET IO for EN100 Ethernet module : All versions < V1.04.01; Firmware variant Mo
YüksekCVSS 7,8SilahlaştırılmışEPSS %74
- Kimlik doğrulamasız
- Hizmet dışı bırakma
siemens · siprotec firmware18 Tem 2015
CVE-2015-2426
91Hemen
Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %86
- Girişsiz RCE
- Bellek hatası
microsoft · windows 1020 Tem 2015
CVE-2015-0253
24İzleyin
The read_request_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, whic
OrtaCVSS 5,0İstismar yokEPSS %12
- Kimlik doğrulamasız
- Hizmet dışı bırakma
apache · http server20 Tem 2015
CVE-2015-2863
20İzleyin
Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and
OrtaCVSS 4,3Kavram kanıtıEPSS %10
- Kimlik doğrulamasız
- Açık yönlendirme
kaseya · virtual system administrator20 Tem 2015
CVE-2015-3183
42Planlayın
The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remot
OrtaCVSS 5,0İstismar yokEPSS %73
- Kimlik doğrulamasız
apache · http server20 Tem 2015
CVE-2015-3185
22İzleyin
The ap_some_auth_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require direct
OrtaCVSS 4,3İstismar yokEPSS %16
- Kimlik doğrulamasız
apache · http server20 Tem 2015
CVE-2015-1283
33İzleyin
Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other prod
OrtaCVSS 6,8İstismar yokEPSS %18
- Kimlik doğrulamasız
- Bellek hatası
google · chrome22 Tem 2015
CVE-2015-3224
40Planlayın
request.rb in Web Console before 2.1.3, as used with Ruby on Rails 3.x and 4.x, does not properly restrict the use of X-Forwarded-For header
OrtaCVSS 4,3SilahlaştırılmışEPSS %44
- Kimlik doğrulamasız
- Erişim denetimi (IDOR)
rubyonrails · web console26 Tem 2015
CVE-2015-5477
90Hemen
named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion fa
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %99
- Kimlik doğrulamasız
- Hizmet dışı bırakma
isc · bind29 Tem 2015
CVE-2015-1486
51Planlayın
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote attackers to bypass authenticat
YüksekCVSS 7,5SilahlaştırılmışEPSS %68
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
symantec · endpoint protection manager31 Tem 2015
CVE-2015-1487
40Planlayın
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to write to
OrtaCVSS 5,5SilahlaştırılmışEPSS %51
symantec · endpoint protection manager31 Tem 2015
CVE-2015-1489
42Planlayın
The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain pri
YüksekCVSS 8,5SilahlaştırılmışEPSS %25
symantec · endpoint protection manager31 Tem 2015