İçeriğe atla
Noroxi

Yayın tarihine göre

Aralık 2015: sömürülen ve yeni ciddi CVE kayıtları

96 kayıt · 4 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

  • CVE-2015-3193
    38İzleyin

    The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by th

    YüksekCVSS 7,5İstismar yokEPSS %25

    openssl · openssl6 Ara 2015

  • CVE-2015-3194
    43Planlayın

    crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL poi

    YüksekCVSS 7,5Kavram kanıtıEPSS %44

    openssl · openssl6 Ara 2015

  • CVE-2015-3195
    33İzleyin

    The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1q, and 1.0.

    OrtaCVSS 5,3Kavram kanıtıEPSS %38

    openssl · openssl6 Ara 2015

  • CVE-2015-3196
    21İzleyin

    ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-threaded client, writes th

    OrtaCVSS 4,3İstismar yokEPSS %13

    openssl · openssl6 Ara 2015

  • CVE-2015-5287
    63Bu hafta

    The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain priv

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %5

    redhat · automatic bug reporting tool7 Ara 2015

  • CVE-2015-3628
    57Planlayın

    The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.0 before 11.6.0 HF6,

    KritikCVSS 9,0SilahlaştırılmışEPSS %69

    f5 · big-iq security7 Ara 2015

  • CVE-2015-6040
    41Planlayın

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility Pack SP3, and Excel Viewer allow remo

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · excel9 Ara 2015

  • CVE-2015-6083
    43Planlayın

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6106
    42Planlayın

    The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, Office 2010 SP2, Word Viewer, Skype for B

    KritikCVSS 9,3İstismar yokEPSS %17

    microsoft · live meeting9 Ara 2015

  • CVE-2015-6107
    42Planlayın

    The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · live meeting9 Ara 2015

  • CVE-2015-6108
    45Planlayın

    The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8; Windows 8.1; Windows

    KritikCVSS 9,3İstismar yokEPSS %25

    microsoft · live meeting9 Ara 2015

  • CVE-2015-6114
    23İzleyin

    Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Mic

    OrtaCVSS 4,3İstismar yokEPSS %19

    microsoft · silverlight9 Ara 2015

  • CVE-2015-6118
    41Planlayın

    Microsoft Office 2007 SP3 and Office 2010 SP2 allow remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · office9 Ara 2015

  • CVE-2015-6122
    41Planlayın

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to exec

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · excel9 Ara 2015

  • CVE-2015-6124
    41Planlayın

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow remote att

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · office9 Ara 2015

  • CVE-2015-6125
    46Planlayın

    Use-after-free vulnerability in the DNS server in Microsoft Windows Server 2008 SP2 and R2 SP1 and Server 2012 Gold and R2 allows remote att

    KritikCVSS 9,3İstismar yokEPSS %29

    microsoft · windows server 20089 Ara 2015

  • CVE-2015-6127
    40Planlayın

    Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to read arbitrary fil

    OrtaCVSS 4,3SilahlaştırılmışEPSS %46

    microsoft · windows 79 Ara 2015

  • CVE-2015-6128
    53Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 mishandle library loading, which allows local users to ga

    YüksekCVSS 7,2SilahlaştırılmışEPSS %81

    microsoft · windows 79 Ara 2015

  • CVE-2015-6130
    43Planlayın

    Integer underflow in Uniscribe in Microsoft Windows 7 SP1 and Windows Server 2008 R2 SP1 allows remote attackers to execute arbitrary code v

    KritikCVSS 9,3İstismar yokEPSS %20

    microsoft · windows 79 Ara 2015

  • CVE-2015-6131
    46Planlayın

    Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows remote attackers to execute arbitrary

    KritikCVSS 9,3Kavram kanıtıEPSS %30

    microsoft · windows 79 Ara 2015

  • CVE-2015-6132
    53Planlayın

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Win

    YüksekCVSS 7,2SilahlaştırılmışEPSS %84

    microsoft · windows 109 Ara 2015

  • CVE-2015-6133
    48Planlayın

    Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 Gold and 1511 mishandle library l

    YüksekCVSS 7,2SilahlaştırılmışEPSS %66

    microsoft · windows 109 Ara 2015

  • CVE-2015-6134
    43Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6135
    27İzleyin

    The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al

    OrtaCVSS 5,0İstismar yokEPSS %23

    microsoft · jscript9 Ara 2015

  • CVE-2015-6136
    44Planlayın

    The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Explorer 8 through 11 and other products, al

    KritikCVSS 9,3İstismar yokEPSS %24

    microsoft · jscript9 Ara 2015

  • CVE-2015-6138
    21İzleyin

    Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site

    OrtaCVSS 4,3İstismar yokEPSS %12

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6139
    42Planlayın

    Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attackers to execute arbitrary web script in

    KritikCVSS 9,3İstismar yokEPSS %15

    microsoft · edge9 Ara 2015

  • CVE-2015-6140
    42Planlayın

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · edge9 Ara 2015

  • CVE-2015-6141
    43Planlayın

    Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6142
    43Planlayın

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · edge9 Ara 2015

  • CVE-2015-6143
    43Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6144
    21İzleyin

    Microsoft Internet Explorer 8 through 11 and Microsoft Edge mishandle HTML attributes in HTTP responses, which allows remote attackers to by

    OrtaCVSS 4,3İstismar yokEPSS %13

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6145
    41Planlayın

    Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6146
    41Planlayın

    Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6147
    43Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6148
    43Planlayın

    Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6149
    43Planlayın

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6150
    43Planlayın

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6151
    43Planlayın

    Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · edge9 Ara 2015

  • CVE-2015-6152
    47Planlayın

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3Kavram kanıtıEPSS %34

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6153
    42Planlayın

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · edge9 Ara 2015

  • CVE-2015-6154
    42Planlayın

    Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (m

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · edge9 Ara 2015

  • CVE-2015-6155
    42Planlayın

    Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memo

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · edge9 Ara 2015

  • CVE-2015-6156
    41Planlayın

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption)

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6157
    22İzleyin

    Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Inte

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6158
    42Planlayın

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    KritikCVSS 9,3İstismar yokEPSS %16

    microsoft · edge9 Ara 2015

  • CVE-2015-6159
    43Planlayın

    Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr

    KritikCVSS 9,3İstismar yokEPSS %19

    microsoft · edge9 Ara 2015

  • CVE-2015-6160
    43Planlayın

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %18

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6161
    23İzleyin

    Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web

    OrtaCVSS 4,3İstismar yokEPSS %19

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6162
    41Planlayın

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6164
    31İzleyin

    Microsoft Internet Explorer 9 through 11 improperly implements a cross-site scripting (XSS) protection mechanism, which allows remote attack

    OrtaCVSS 6,8İstismar yokEPSS %11

    microsoft · internet explorer9 Ara 2015

  • CVE-2015-6165
    22İzleyin

    Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Mic

    OrtaCVSS 4,3İstismar yokEPSS %16

    microsoft · silverlight9 Ara 2015

  • CVE-2015-6166
    41Planlayın

    Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds re

    KritikCVSS 9,3İstismar yokEPSS %14

    microsoft · silverlight9 Ara 2015

  • CVE-2015-6168
    46Planlayın

    Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, ak

    KritikCVSS 9,3Kavram kanıtıEPSS %30

    microsoft · edge9 Ara 2015

  • CVE-2015-6172
    53Planlayın

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1, and Office Compatibility Pack SP3 allow

    KritikCVSS 9,3İstismar yokEPSS %53

    microsoft · office9 Ara 2015

  • CVE-2015-6175
    63Bu hafta

    The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevatio

    YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %5

    microsoft · windows 10 15079 Ara 2015

  • CVE-2015-6176
    21İzleyin

    Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass a cross-site scripting (XSS) protection

    OrtaCVSS 4,3Kavram kanıtıEPSS %14

    microsoft · edge9 Ara 2015

  • CVE-2015-6177
    41Planlayın

    Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to execute arbitrary code via a crafted Off

    KritikCVSS 9,3İstismar yokEPSS %13

    microsoft · excel9 Ara 2015

  • CVE-2015-8048
    49Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %31

    adobe · air sdk10 Ara 2015

  • CVE-2015-8410
    49Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %31

    adobe · flash player10 Ara 2015

  • CVE-2015-8411
    49Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %31

    adobe · flash player10 Ara 2015

  • CVE-2015-8412
    49Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %31

    adobe · air10 Ara 2015

  • CVE-2015-8413
    49Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %31

    adobe · air10 Ara 2015

  • CVE-2015-8420
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-8421
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-8422
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-8423
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · air sdk10 Ara 2015

  • CVE-2015-8424
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-8425
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · air10 Ara 2015

  • CVE-2015-8426
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-8427
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-8428
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-8429
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-8430
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · air10 Ara 2015

  • CVE-2015-8431
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-8434
    53Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2

    KritikCVSS 10,0Kavram kanıtıEPSS %43

    adobe · flash player10 Ara 2015

  • CVE-2015-7039
    30İzleyin

    Buffer overflow in libc in Apple iOS before 9.2, OS X before 10.11.2, tvOS before 9.1, and watchOS before 2.1 allows remote attackers to exe

    OrtaCVSS 6,8Kavram kanıtıEPSS %11

    apple · tvos11 Ara 2015

  • CVE-2015-7803
    30İzleyin

    The phar_get_entry_data function in ext/phar/util.c in PHP before 5.5.30 and 5.6.x before 5.6.14 allows remote attackers to cause a denial o

    OrtaCVSS 6,8İstismar yokEPSS %10

    php · php11 Ara 2015

  • CVE-2015-6420
    45Planlayın

    Serialized-object interfaces in certain Cisco Collaboration and Social Media; Endpoint Clients and Client Software; Network Application, Ser

    KritikCVSS 9,8Kavram kanıtıEPSS %18

    apache · commons collections15 Ara 2015

  • CVE-2015-8000
    36İzleyin

    db.c in named in ISC BIND 9.x before 9.9.8-P2 and 9.10.x before 9.10.3-P2 allows remote attackers to cause a denial of service (REQUIRE asse

    OrtaCVSS 5,0İstismar yokEPSS %54

    isc · bind16 Ara 2015

  • CVE-2015-8562
    59Planlayın

    Joomla! 1.5.x, 2.x, and 3.x before 3.4.6 allow remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via t

    YüksekCVSS 7,5SilahlaştırılmışEPSS %98

    joomla · joomla\!16 Ara 2015

  • CVE-2015-8327
    33İzleyin

    Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.2.0 and in foomatic-filters in Foomatic 4.0.x a

    YüksekCVSS 7,5İstismar yokEPSS %10

    redhat · enterprise linux desktop17 Ara 2015

  • CVE-2015-7755
    87Hemen

    Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before

    KritikCVSS 9,8KEVSilahlaştırılmışEPSS %61

    juniper · screenos19 Ara 2015

  • CVE-2015-7919
    47Planlayın

    SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of service (application cra

    KritikCVSS 10,0İstismar yokEPSS %21

    searchblox · searchblox21 Ara 2015

  • CVE-2015-8660
    40Planlayın

    The ovl_setattr function in fs/overlayfs/inode.c in the Linux kernel through 4.3.3 attempts to merge distinct setattr operations, which allo

    OrtaCVSS 6,7SilahlaştırılmışEPSS %22

    linux · linux kernel28 Ara 2015

  • CVE-2015-8634
    43Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2

    YüksekCVSS 8,8Kavram kanıtıEPSS %25

    adobe · flash player28 Ara 2015

  • CVE-2015-8635
    43Planlayın

    Use-after-free vulnerability in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2

    YüksekCVSS 8,8Kavram kanıtıEPSS %25

    adobe · flash player28 Ara 2015

  • CVE-2015-8636
    41Planlayın

    Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR bef

    YüksekCVSS 8,8Kavram kanıtıEPSS %21

    adobe · air28 Ara 2015

  • CVE-2015-8644
    43Planlayın

    Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR bef

    YüksekCVSS 8,8Kavram kanıtıEPSS %26

    adobe · flash player28 Ara 2015

  • CVE-2015-8651
    85Hemen

    Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on

    YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %67

    adobe · air sdk28 Ara 2015

  • CVE-2015-5252
    32İzleyin

    vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relati

    YüksekCVSS 7,2İstismar yokEPSS %13

    samba · samba29 Ara 2015

  • CVE-2015-5299
    25İzleyin

    The shadow_copy2_get_shadow_copy_data function in modules/vfs_shadow_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3

    OrtaCVSS 5,3İstismar yokEPSS %13

    samba · samba29 Ara 2015

  • CVE-2015-7250
    35İzleyin

    Absolute path traversal vulnerability in cgi-bin/webproc on ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE allows remote attack

    YüksekCVSS 7,5Kavram kanıtıEPSS %15

    zte · zxhn h108n r1a firmware30 Ara 2015

  • CVE-2015-7251
    42Planlayın

    ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE have a hardcoded password of root for the root account, which allows remote atta

    KritikCVSS 9,8Kavram kanıtıEPSS %10

    zte · zxhn h108n r1a firmware30 Ara 2015

  • CVE-2015-5995
    45Planlayın

    Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attackers to obtain adminis

    KritikCVSS 9,8Kavram kanıtıEPSS %19

    tenda · n3 wireless n15031 Ara 2015

  • CVE-2015-6018
    45Planlayın

    The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attackers to execute arbi

    KritikCVSS 9,8Kavram kanıtıEPSS %20

    zyxel · pmg5318-b20a firmware31 Ara 2015