CVE-2015-2360

win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges or cause a denial...

CVE-2015-2994

creationtimestamp| type| source ---|---|--- 2015-06-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41691 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/sysaidauthfileupload.rb 2025-02-06 03:13:42+00:00|...

CVE-2014-8361

creationtimestamp| type| source ---|---|--- 2015-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37169 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/realtekminiigdupnpexecnoauth.rb 2018-05-29...

VulnCheck KEV: CVE-2015-2945

mt-phpincgi.php in Hajime Fujimoto mt-phpincgi before 2015-05-15 does not properly restrict URLs, which allows remote attackers to conduct PHP object injection attacks and execute arbitrary PHP code via a crafted request, as exploited in the wild in May 2015...

ICU Project ICU4C Library Vulnerabilities Patched

Multitudes of software packages that make use of the ICU Project C/C++ and Java libraries may need to update after a pair of memory-based vulnerabilities were discovered and subsequently patched. Version 55.1 of the ICU Project ICU4C library, released yesterday, addresses separate heap-based buff...

Security Advisory-Authentication Bypass Vulnerability on E587 Mobile WiFi

Huawei E587 products have an authentication bypass vulnerability that could be exploited by an attacker to graft commands to obtain and change configuration information, send short messages, and restart the device without login Vulnerability ID: HWPSIRT-2015-02001. This Vulnerability has been...

Microsoft Data Shows Drop in Remote Code Execution Bugs Being Exploited

SAN FRANCISCO–One of the downsides to being a software company with a huge customer base is that your products are going to be prime targets for attackers. But the flip side to that coin is that you’re going to gather a lot of data about vulnerabilities and attacks. Microsoft has been collecting...

Privilege escalation

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka "Win32k Elevation of Privilege Vulnerability."...

CVE-2015-1701

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka “Win32k Elevation of Privilege Vulnerability.” Recent assessments: gwillcox-r7 at...

CVE-2015-2845

creationtimestamp| type| source ---|---|--- 2015-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36807 2017-07-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42296 2018-05-29 15:50:33+00:00| seen|...

Adobe Flash Player Multiple Vulnerabilities - 01 (Apr 2015) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (3048019)

This host is missing a critical security update according to Microsoft Bulletin MS15-033. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Word Remote Code Execution Vulnerabilities (3048019) - Mac OS X

This host is missing a critical security update according to Microsoft Bulletin MS15-033. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows HTTP.sys Remote Code Execution Vulnerability (3042553)

This host is missing an important security update according to Microsoft Bulletin MS15-034. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-3043

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, as exploited in the wild in April 2015, a different...

Cisco Data Center Network Manager Directory Traversal Vulnerability

Cisco Data Center Network Manager is prone to a directory-traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-3315

creationtimestamp| type| source ---|---|--- 2015-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36747 2018-02-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44097 2018-05-29 15:50:33+00:00| seen|...

CVE-2015-3306

creationtimestamp| type| source ---|---|--- 2015-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36742 2015-06-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37262 2018-05-29 15:50:33+00:00| seen|...

CVE-2015-2219

creationtimestamp| type| source ---|---|--- 2015-04-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41708 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/lenovosystemupdate.rb 2025-02-06 03:13:42+00:00|...

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pent...