CVE-2015-5995

creationtimestamp| type| source ---|---|--- 2015-09-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41402...

CVE-2015-6809

creationtimestamp| type| source ---|---|--- 2015-09-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38051...

CVE-2014-2331

CheckMK 1.2.2p2, 1.2.2p3, and 1.2.3i5 allows remote authenticated users to execute arbitrary Python code via a crafted rules.mk file in a snapshot. NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330...

CVE-2014-2332

CheckMK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330...

CVE-2015-7243

creationtimestamp| type| source ---|---|--- 2015-08-31 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/38035 2018-07-02 19:07:14+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/fileformat/boxoftwavtomp3.rb 2018-07-03 00:00:00+00:00|...

Fake EFF Site Used in Spear Phishing Campaign

Attackers, possibly associated with the Russian government, registered a phony Electronic Frontier Foundation domain earlier this month in an attempt to dupe users into thinking correspondence from the site was coming from the well-known privacy watchdog. The scheme, largely carried out via spear...

CVE-2017-1000028

creationtimestamp| type| source ---|---|--- 2015-08-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/39441 2018-08-13 16:30:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/glassfishtraversal.rb 2018-08-14 00:00:00+00:00|...

CVE-2016-6195

creationtimestamp| type| source ---|---|--- 2015-08-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40751 2016-09-06 14:25:29+00:00| seen| https://t.me/alexmakus/654 2026-06-19 16:45:34+00:00| exploited|...

Debian DSA-3339-1 : openjdk-6 - security update (Bar Mitzvah) (Logjam)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, denial of service or insecure cryptography. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2015-2502

Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Memory Corruption Vulnerability," as exploited in the wild in August 2015...

Emergency Out-of-Band Internet Explorer Patch

Microsoft today released an emergency patch for all supported versions of Internet Explorer, including IE 11 running on the recently released Windows 10. Microsoft said in its advisory that the zero-day is being publicly exploited. Google security engineer Clement Lecigne is credited with reporti...

CVE-2015-1830

creationtimestamp| type| source ---|---|--- 2015-08-17 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/40857 2020-03-05 15:12:36+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/apacheactivemqtraversalupload.rb 2020-03-09...

CVE-2015-1642

Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka “Microsoft Office Memory Corruption Vulnerability.” Recent assessments: gwillcox-r7 at November 23, 2020 6:13pm UTC reported: Reported as exploited in the wild as part o...

Security Advisory - Stagefright Vulnerability in Multiple Huawei Android Products

The Stagefright media player engine in Android OS has multiple vulnerabilities, which can be exploited to remotely execute code in affected devices. Vulnerability ID: HWPSIRT-2015-07056, HWPSIRT-2015-07057, HWPSIRT-2015-07058, HWPSIRT-2015-07059, HWPSIRT-2015-07060, HWPSIRT-2015-07061 and...

Design/Logic Flaw

The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the...

pacman: silent downgrade

A flaw has been discovered in pacman that is leading to possible silent package downgrade when exploited. While loading each package it was not ensured that the internal version matches the expected database version, leading to the possibility to circumvent the version check. This issue can be us...

Debian DSA-3316-1 : openjdk-7 - security update (Bar Mitzvah) (Logjam)

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform, resulting in the execution of arbitrary code, breakouts of the Java sandbox, information disclosure, denial of service or insecure cryptography. %NASLMINLEVEL 70300 C Tenable Network Security,...

CVE-2015-3246

creationtimestamp| type| source ---|---|--- 2015-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37706 2018-05-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44633 2018-05-29 15:50:33+00:00| seen|...

flash-plugin: two code execution issues in APSA15-04 / APSB15-18

Use-after-free vulnerability in the BitmapData class in the ActionScript 3 AS3 implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installatio...

Microsoft Internet Explorer Multiple Memory Corruption Vulnerabilities (3076321)

This host is missing a critical security update according to Microsoft Bulletin MS15-065. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...