İçeriğe atla
Noroxi

Yayın tarihine göre

Ağustos 2015: sömürülen ve yeni ciddi CVE kayıtları

103 kayıt · 5 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 1 / 2

  • CVE-2015-3440
    22İzleyin

    Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web

    OrtaCVSS 4,3Kavram kanıtıEPSS %16

    wordpress · wordpress3 Ağu 2015

  • CVE-2015-4495
    86Hemen

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %68

    mozilla · firefox7 Ağu 2015

  • CVE-2015-3245
    40Planlayın

    Incomplete blacklist vulnerability in the chfn function in libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper progra

    DüşükCVSS 2,1SilahlaştırılmışEPSS %5

    redhat · libuser11 Ağu 2015

  • CVE-2015-3246
    62Bu hafta

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, w

    YüksekCVSS 7,4KEVSilahlaştırılmışEPSS %8

    redhat · enterprise linux11 Ağu 2015

  • CVE-2015-3184
    23İzleyin

    mod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache httpd 2.4.x, does not properly restrict an

    OrtaCVSS 5,0İstismar yokEPSS %10

    apache · subversion12 Ağu 2015

  • CVE-2015-5165
    41Planlayın

    The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to

    KritikCVSS 9,3İstismar yokEPSS %13

    xen · xen12 Ağu 2015

  • CVE-2015-3253
    51Planlayın

    The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code

    KritikCVSS 9,8İstismar yokEPSS %41

    apache · groovy13 Ağu 2015

  • CVE-2015-4666
    25İzleyin

    Directory traversal vulnerability in opm/read_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrar

    OrtaCVSS 5,0Kavram kanıtıEPSS %16

    xceedium · xsuite13 Ağu 2015

  • CVE-2015-5127
    55Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %50

    adobe · flash player13 Ağu 2015

  • CVE-2015-5129
    43Planlayın

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player13 Ağu 2015

  • CVE-2015-5130
    55Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %50

    adobe · flash player13 Ağu 2015

  • CVE-2015-5131
    55Planlayın

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A

    KritikCVSS 10,0Kavram kanıtıEPSS %50

    adobe · flash player13 Ağu 2015

  • CVE-2015-5132
    55Planlayın

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A

    KritikCVSS 10,0Kavram kanıtıEPSS %50

    adobe · flash player13 Ağu 2015

  • CVE-2015-5133
    55Planlayın

    Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A

    KritikCVSS 10,0Kavram kanıtıEPSS %50

    adobe · flash player13 Ağu 2015

  • CVE-2015-5134
    55Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %50

    adobe · flash player13 Ağu 2015

  • CVE-2015-5539
    54Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %45

    adobe · flash player13 Ağu 2015

  • CVE-2015-5540
    54Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %45

    adobe · flash player13 Ağu 2015

  • CVE-2015-5541
    43Planlayın

    Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18

    KritikCVSS 10,0İstismar yokEPSS %10

    adobe · flash player13 Ağu 2015

  • CVE-2015-5544
    51Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %38

    adobe · air13 Ağu 2015

  • CVE-2015-5545
    51Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %38

    adobe · flash player13 Ağu 2015

  • CVE-2015-5546
    51Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %38

    adobe · air13 Ağu 2015

  • CVE-2015-5547
    51Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %38

    adobe · flash player13 Ağu 2015

  • CVE-2015-5548
    51Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %38

    adobe · flash player13 Ağu 2015

  • CVE-2015-5549
    51Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %38

    adobe · flash player13 Ağu 2015

  • CVE-2015-5550
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %44

    adobe · flash player13 Ağu 2015

  • CVE-2015-5551
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %44

    adobe · flash player13 Ağu 2015

  • CVE-2015-5554
    53Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player13 Ağu 2015

  • CVE-2015-5555
    53Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · air13 Ağu 2015

  • CVE-2015-5556
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %44

    adobe · air13 Ağu 2015

  • CVE-2015-5557
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %44

    adobe · flash player13 Ağu 2015

  • CVE-2015-5558
    53Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player13 Ağu 2015

  • CVE-2015-5560
    60Bu hafta

    Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199,

    KritikCVSS 10,0Kavram kanıtıEPSS %65

    adobe · flash player13 Ağu 2015

  • CVE-2015-5561
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %44

    adobe · flash player13 Ağu 2015

  • CVE-2015-5562
    53Planlayın

    Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before

    KritikCVSS 10,0Kavram kanıtıEPSS %44

    adobe · flash player13 Ağu 2015

  • CVE-2015-5563
    54Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before

    KritikCVSS 10,0Kavram kanıtıEPSS %45

    adobe · air13 Ağu 2015

  • CVE-2015-2441
    43Planlayın

    Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · edge14 Ağu 2015

  • CVE-2015-2442
    42Planlayın

    Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer14 Ağu 2015

  • CVE-2015-2443
    44Planlayın

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer14 Ağu 2015

  • CVE-2015-2444
    47Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3Kavram kanıtıEPSS %33

    microsoft · internet explorer14 Ağu 2015

  • CVE-2015-2445
    21İzleyin

    Microsoft Internet Explorer 10 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass."

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · internet explorer14 Ağu 2015

  • CVE-2015-2446
    42Planlayın

    Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · edge14 Ağu 2015

  • CVE-2015-2447
    44Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %23

    microsoft · internet explorer14 Ağu 2015

  • CVE-2015-2448
    42Planlayın

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer14 Ağu 2015

  • CVE-2015-2449
    22İzleyin

    Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · internet explorer14 Ağu 2015

  • CVE-2015-2450
    42Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer14 Ağu 2015

  • CVE-2015-2451
    42Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer14 Ağu 2015

  • CVE-2015-2452
    42Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · internet explorer14 Ağu 2015

  • CVE-2014-3576
    34İzleyin

    The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a de

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    apache · activemq14 Ağu 2015

  • CVE-2015-1642
    77Bu hafta

    Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft O

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %53

    microsoft · office14 Ağu 2015

  • CVE-2015-1769
    57Planlayın

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012

    OrtaCVSS 6,6KEVSilahlaştırılmışEPSS %4

    microsoft · windows 1014 Ağu 2015

  • CVE-2015-2431
    46Planlayın

    Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 all

    KritikCVSS 9,3Kavram kanıtıEPSS %29

    microsoft · live meeting14 Ağu 2015

  • CVE-2015-2432
    46Planlayın

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    KritikCVSS 9,3Kavram kanıtıEPSS %30

    microsoft · windows 714 Ağu 2015

  • CVE-2015-2433
    40Planlayın

    The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go

    DüşükCVSS 2,1SilahlaştırılmışEPSS %17

    microsoft · windows 1014 Ağu 2015

  • CVE-2015-2434
    22İzleyin

    Microsoft XML Core Services 3.0 and 5.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protection mech

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · xml core services14 Ağu 2015

  • CVE-2015-2435
    44Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    KritikCVSS 9,3İstismar yokEPSS %21

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2440
    23İzleyin

    Microsoft XML Core Services 3.0, 5.0, and 6.0 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "M

    OrtaCVSS 4,3İstismar yokEPSS %18

    microsoft · xml core services14 Ağu 2015

  • CVE-2015-2455
    48Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    KritikCVSS 9,3Kavram kanıtıEPSS %37

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2456
    48Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    KritikCVSS 9,3Kavram kanıtıEPSS %35

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2458
    47Planlayın

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    KritikCVSS 9,3Kavram kanıtıEPSS %32

    microsoft · windows 1014 Ağu 2015

  • CVE-2015-2459
    47Planlayın

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    KritikCVSS 9,3Kavram kanıtıEPSS %32

    microsoft · windows 1014 Ağu 2015

  • CVE-2015-2460
    46Planlayın

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    KritikCVSS 9,3Kavram kanıtıEPSS %31

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2461
    48Planlayın

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    KritikCVSS 9,3Kavram kanıtıEPSS %36

    microsoft · windows 1014 Ağu 2015

  • CVE-2015-2462
    48Planlayın

    ATMFD.DLL in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo

    KritikCVSS 9,3Kavram kanıtıEPSS %35

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2463
    47Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    KritikCVSS 9,3Kavram kanıtıEPSS %34

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2464
    48Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    KritikCVSS 9,3Kavram kanıtıEPSS %35

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2471
    22İzleyin

    Microsoft XML Core Services 3.0, 5.0, and 6.0 supports SSL 2.0, which makes it easier for remote attackers to defeat cryptographic protectio

    OrtaCVSS 4,3İstismar yokEPSS %15

    microsoft · xml core services14 Ağu 2015

  • CVE-2015-2473
    45Planlayın

    Untrusted search path vulnerability in the client in Remote Desktop Protocol (RDP) through 8.1 in Microsoft Windows 7 SP1 and Windows Server

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · windows 714 Ağu 2015

  • CVE-2015-2474
    45Planlayın

    Microsoft Windows Vista SP2 and Server 2008 SP2 allow remote authenticated users to execute arbitrary code via a crafted string in a Server

    KritikCVSS 9,0İstismar yokEPSS %30

    microsoft · windows server 200814 Ağu 2015

  • CVE-2015-2475
    21İzleyin

    Cross-site scripting (XSS) vulnerability in uddi/search/frames.aspx in the UDDI Services component in Microsoft Windows Server 2008 SP2 and

    OrtaCVSS 4,3İstismar yokEPSS %14

    microsoft · biztalk server14 Ağu 2015

  • CVE-2015-2476
    13İzleyin

    The WebDAV client in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server

    DüşükCVSS 2,6İstismar yokEPSS %11

    microsoft · windows 714 Ağu 2015

  • CVE-2015-2479
    42Planlayın

    The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2480
    41Planlayın

    The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2481
    41Planlayın

    The RyuJIT compiler in Microsoft .NET Framework 4.6 produces incorrect code during an attempt at optimization, which allows remote attackers

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · .net framework14 Ağu 2015

  • CVE-2015-2423
    23İzleyin

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    OrtaCVSS 4,3İstismar yokEPSS %19

    microsoft · excel15 Ağu 2015

  • CVE-2015-2466
    42Planlayın

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted template, aka

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · office15 Ağu 2015

  • CVE-2015-2467
    45Planlayın

    Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption

    KritikCVSS 9,3Kavram kanıtıEPSS %27

    microsoft · office15 Ağu 2015

  • CVE-2015-2468
    46Planlayın

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Office for Mac 2011, Office for Mac 2016, Office C

    KritikCVSS 9,3Kavram kanıtıEPSS %29

    microsoft · office15 Ağu 2015

  • CVE-2015-2469
    45Planlayın

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, and Office for Mac 2011 allow remote attackers to execute arbitrary code via a craf

    KritikCVSS 9,3Kavram kanıtıEPSS %26

    microsoft · office15 Ağu 2015

  • CVE-2015-2470
    45Planlayın

    Integer underflow in Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office for Mac 2011, and Word Viewer a

    KritikCVSS 9,3Kavram kanıtıEPSS %26

    microsoft · office15 Ağu 2015

  • CVE-2015-2477
    41Planlayın

    Microsoft Office 2007 SP3, Office for Mac 2011, Office for Mac 2016, and Word Viewer allow remote attackers to execute arbitrary code via a

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · office15 Ağu 2015

  • CVE-2015-3760
    40Planlayın

    dyld in Apple OS X before 10.10.5 does not properly validate pathnames in the environment, which allows local users to gain privileges via u

    YüksekCVSS 7,2SilahlaştırılmışEPSS %1

    apple · mac os x16 Ağu 2015

  • CVE-2015-3783
    41Planlayın

    SceneKit in Apple OS X before 10.10.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and

    YüksekCVSS 7,5Kavram kanıtıEPSS %35

    apple · mac os x16 Ağu 2015

  • CVE-2015-3796
    34İzleyin

    The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or ca

    YüksekCVSS 7,5Kavram kanıtıEPSS %12

    apple · iphone os16 Ağu 2015

  • CVE-2015-3798
    34İzleyin

    The TRE library in Libc in Apple iOS before 8.4.1 and OS X before 10.10.5 allows context-dependent attackers to execute arbitrary code or ca

    YüksekCVSS 7,5Kavram kanıtıEPSS %13

    apple · iphone os16 Ağu 2015

  • CVE-2015-5531
    48Planlayın

    Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors rela

    OrtaCVSS 5,0SilahlaştırılmışEPSS %94

    elasticsearch · elasticsearch17 Ağu 2015

  • CVE-2015-4029
    23İzleyin

    Cross-site scripting (XSS) vulnerability in the WebGUI in pfSense before 2.2.3 allows remote attackers to inject arbitrary web script or HTM

    OrtaCVSS 4,3İstismar yokEPSS %20

    netgate · pfsense18 Ağu 2015

  • CVE-2015-2502
    80Hemen

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %51

    microsoft · internet explorer19 Ağu 2015

  • CVE-2015-1830
    45Planlayın

    Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for

    OrtaCVSS 5,0SilahlaştırılmışEPSS %84

    apache · activemq19 Ağu 2015

  • CVE-2015-5621
    42Planlayın

    The snmp_pdu_parse function in snmp_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp_variable_list item

    YüksekCVSS 7,5Kavram kanıtıEPSS %40

    net-snmp · net-snmp19 Ağu 2015

  • CVE-2015-6522
    52Planlayın

    SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands v

    YüksekCVSS 7,5SilahlaştırılmışEPSS %74

    wpsymposium · wp symposium19 Ağu 2015

  • CVE-2015-6251
    26İzleyin

    Double free vulnerability in GnuTLS before 3.3.17 and 3.4.x before 3.4.4 allows remote attackers to cause a denial of service via a long Dis

    OrtaCVSS 5,0İstismar yokEPSS %19

    gnu · gnutls24 Ağu 2015

  • CVE-2015-5416
    33İzleyin

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %11

    hp · keyview24 Ağu 2015

  • CVE-2015-5417
    33İzleyin

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · keyview24 Ağu 2015

  • CVE-2015-5418
    33İzleyin

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · keyview24 Ağu 2015

  • CVE-2015-5419
    33İzleyin

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · keyview24 Ağu 2015

  • CVE-2015-5420
    33İzleyin

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · keyview24 Ağu 2015

  • CVE-2015-5421
    33İzleyin

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · keyview24 Ağu 2015

  • CVE-2015-5422
    33İzleyin

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · keyview24 Ağu 2015

  • CVE-2015-5423
    33İzleyin

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · keyview24 Ağu 2015

  • CVE-2015-5424
    33İzleyin

    Unspecified vulnerability in HP KeyView before 10.23.0.1 and 10.24.x before 10.24.0.1 allows remote attackers to execute arbitrary code via

    YüksekCVSS 7,5İstismar yokEPSS %10

    hp · keyview24 Ağu 2015