Microsoft Office Suite Remote Code Execution Vulnerabilities (3089664)

This host is missing a critical security update according to Microsoft Bulletin MS15-099. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-1538

creationtimestamp| type| source ---|---|--- 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38124 2016-03-02 12:59:09+00:00| seen| https://t.me/hacker350/773 2022-02-03 12:21:08+00:00| seen| https://t.me/TheMalwareTeam/85425 2022-02-03 12:21:08+00:00| seen|...

CVE-2015-6834

creationtimestamp| type| source ---|---|--- 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38120 2015-09-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38122 2025-07-18 22:39:10+00:00| seen| https://t.me/HackBlaz/29...

Amazon Linux: Security Advisory (ALAS-2012-77)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2015-570)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2013-207)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Amazon Linux: Security Advisory (ALAS-2014-392)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-5082

creationtimestamp| type| source ---|---|--- 2015-09-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38096 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/efwchpasswdexec.rb 2025-02-06 03:13:42+00:00| seen|...

CVE-2015-5995

creationtimestamp| type| source ---|---|--- 2015-09-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41402...

CVE-2015-6809

creationtimestamp| type| source ---|---|--- 2015-09-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38051...

CVE-2014-2331

CheckMK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330...

CVE-2014-2332

CheckMK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330...

CVE-2015-7243

creationtimestamp| type| source ---|---|--- 2015-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/38035 2018-07-02 19:07:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/boxoftwavtomp3.rb 2018-07-03 00:00:00+00:00|...

Fake EFF Site Used in Spear Phishing Campaign

Attackers, possibly associated with the Russian government, registered a phony Electronic Frontier Foundation domain earlier this month in an attempt to dupe users into thinking correspondence from the site was coming from the well-known privacy watchdog. The scheme, largely carried out via spear...

CVE-2017-1000028

creationtimestamp| type| source ---|---|--- 2015-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39441 2018-08-13 16:30:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/glassfishtraversal.rb 2018-08-14 00:00:00+00:00|...

CVE-2016-6195

creationtimestamp| type| source ---|---|--- 2015-08-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40751 2016-09-06 14:25:29+00:00| seen| https://t.me/alexmakus/654 2026-06-19 16:45:34+00:00| exploited|...

Debian DSA-3339-1 : openjdk-6 - security update (Bar Mitzvah) (Logjam)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, denial of service or insecure cryptography. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2015-2502

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015...

Emergency Out-of-Band Internet Explorer Patch

Microsoft today released an emergency patch for all supported versions of Internet Explorer, including IE 11 running on the recently released Windows 10. Microsoft said in its advisory that the zero-day is being publicly exploited. Google security engineer Clement Lecigne is credited with reporti...

CVE-2015-1830

creationtimestamp| type| source ---|---|--- 2015-08-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40857 2020-03-05 15:12:36+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apacheactivemqtraversalupload.rb 2020-03-09...