CVE-2015-2845

creationtimestamp| type| source ---|---|--- 2015-04-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36807 2017-07-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42296 2018-05-29 15:50:33+00:00| seen|...

CVE-2015-1701

Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in April 2015, aka “Win32k Elevation of Privilege Vulnerability.” Recent assessments: gwillcox-r7 at...

Adobe Flash Player Multiple Vulnerabilities - 01 (Apr 2015) - Windows

Adobe Flash Player is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:flashplayer";...

Microsoft Office Word Remote Code Execution Vulnerabilities (3048019) - Mac OS X

This host is missing a critical security update according to Microsoft Bulletin MS15-033. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Windows HTTP.sys Remote Code Execution Vulnerability (3042553)

This host is missing an important security update according to Microsoft Bulletin MS15-034. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Office Compatibility Pack Remote Code Execution Vulnerabilities (3048019)

This host is missing a critical security update according to Microsoft Bulletin MS15-033. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2015-3043

Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service memory corruption via unspecified vectors, as exploited in the wild in April 2015, a different...

CVE-2015-3315

creationtimestamp| type| source ---|---|--- 2015-04-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36747 2018-02-16 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44097 2018-05-29 15:50:33+00:00| seen|...

Cisco Data Center Network Manager Directory Traversal Vulnerability

Cisco Data Center Network Manager is prone to a directory-traversal vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2015-3306

creationtimestamp| type| source ---|---|--- 2015-04-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36742 2015-06-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37262 2018-05-29 15:50:33+00:00| seen|...

CVE-2015-2219

creationtimestamp| type| source ---|---|--- 2015-04-12 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41708 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/lenovosystemupdate.rb 2025-02-06 03:13:42+00:00|...

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities

Balero CMS 0.7.2 - Multiple JSHTML Injection Vulnerabilities document.cookie="counter=1confirm'XSS'; path=/balerocms/"; csrf+stored xss+filter bypass+session hijack: document.location="http://www.zeroscience.mk/pent...

posterazor.sourceforge.net XSS vulnerability

Open Bug Bounty ID: OBB-57262 Description| Value ---|--- Affected Website:| posterazor.sourceforge.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventi...

CVE-2015-0936

creationtimestamp| type| source ---|---|--- 2015-04-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41679 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/ssh/ceragonfibeairknownprivkey.rb 2025-02-06 03:13:42+00:0...

Vulnerability in OpenSSL - Segmentation fault for invalid PSS parameters

Segmentation fault for invalid PSS parameters. The signature verification routines will crash with a NULL pointer dereference if presented with an ASN.1 signature using the RSA PSS algorithm and invalid parameters. Since these routines are used to verify certificate signature algorithms this can ...

Vulnerability in OpenSSL - OpenSSL 1.0.2 ClientHello sigalgs DoS

ClientHello sigalgs DoS. If a client connects to an OpenSSL 1.0.2 server and renegotiates with an invalid signature algorithms extension a NULL pointer dereference will occur. This can be exploited in a DoS attack against the server. Found by David Ramos Stanford University...

CVE-2015-1427

creationtimestamp| type| source ---|---|--- 2015-03-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36337 2015-03-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36415 2017-07-11 02:04:41+00:00| published-proof-of-concept| https://t.me/HackingPublicoficial/162...

Fedora Update for rubygem-actionpack FEDORA-2014-15371

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

(^Exploiting)\s*(CVE-2015-0318)\s*(in)\s*(Flash$)

Posted by Mark Brand, Irregular Expressionist So; issue 199/PSIRT-3161/CVE-2015-0318. Quick summary - it’s a bug in the PCRE regex engine as used in Flash. Note that the published version of the avmplus code is significantly out of date; there are a number of other vulnerabilities present that ha...

CVE-2015-1172

creationtimestamp| type| source ---|---|--- 2015-02-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/41698 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/wpholdingpatternfileupload.rb 2025-02-06...