| CVE-2014-9163 Known exploited | High 7.8 | Stack-based buffer overflow in Adobe Flash Player before 13.0.0.259 and 14.x and 15.x before 15.0.0.246 on Windows and OS X and before 11.2.202.425 on Linux allows attackers to execute arbitrary code… Assigned by adobe | Dec 10, 2014 |
| CVE-2014-100005 Known exploited | High 8.0 | Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Assigned by mitre | Jan 13, 2015 |
| CVE-2015-0016 Known exploited | High 7.8 | Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go… Assigned by microsoft | Jan 13, 2015 |
| CVE-2015-0311 Known exploited | High 7.8 | Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote attackers to execute… Assigned by adobe | Jan 23, 2015 |
| CVE-2015-0310 Known exploited | High 7.8 | Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory addresses, which allow… Assigned by adobe | Jan 23, 2015 |
| CVE-2015-0313 Known exploited | High 7.8 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote attackers to execute ar… Assigned by adobe | Feb 2, 2015 |
| CVE-2015-0071 Known exploited | Medium 6.5 | Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability." Assigned by microsoft | Feb 11, 2015 |
| CVE-2015-1427 Known exploited | Critical 9.8 | The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted… Assigned by mitre | Feb 17, 2015 |
| CVE-2015-2051 Known exploited | High 8.8 | The D-Link DIR-645 Wired/Wireless Router Rev. Assigned by mitre | Feb 23, 2015 |
| CVE-2015-0666 Known exploited | High 7.5 | Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a crafted pathname, aka B… Assigned by cisco | Apr 3, 2015 |
| CVE-2015-1130 Known exploited | High 7.8 | The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. Assigned by apple | Apr 10, 2015 |
| CVE-2015-1641 Known exploited | High 7.8 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and… Assigned by microsoft | Apr 14, 2015 |
| CVE-2015-1635 Known exploited | Critical 9.8 | HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold and R2 allows remote attackers to execute arbitrary code via crafted HTTP request… Assigned by microsoft | Apr 14, 2015 |
| CVE-2015-3043 Known exploited | High 7.8 | Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of servi… Assigned by adobe | Apr 14, 2015 |
| CVE-2015-3035 Known exploited | High 7.5 | Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) with firmware before 150316, Archer C9 (1.0), TL-WDR3500 (… Assigned by mitre | Apr 17, 2015 |
| CVE-2015-1701 Known exploited | High 7.8 | Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as exploited in the wild in… Assigned by microsoft | Apr 21, 2015 |
| CVE-2014-8361 Known exploited | Critical 9.8 | The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023. Assigned by mitre | May 1, 2015 |
| CVE-2015-1671 Known exploited | High 7.8 | The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2010; Lync 2010 Atten… Assigned by microsoft | May 13, 2015 |
| CVE-2015-3306 Known exploited | Critical 10.0 | The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands. Assigned by mitre | May 18, 2015 |
| CVE-2015-4068 Known exploited | Critical 9.1 | Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFil… Assigned by mitre | May 29, 2015 |
| CVE-2015-2360 Known exploited | High 8.8 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 201… Assigned by microsoft | Jun 10, 2015 |
| CVE-2015-1770 Known exploited | High 8.8 | Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerability." Assigned by microsoft | Jun 10, 2015 |
| CVE-2015-3113 Known exploited | High 7.8 | Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbi… Assigned by adobe | Jun 23, 2015 |
| CVE-2015-5119 Known exploited | High 7.8 | Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x t… Assigned by adobe | Jul 8, 2015 |
| CVE-2015-5123 Known exploited | High 7.8 | Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows a… Assigned by adobe | Jul 14, 2015 |
| CVE-2015-5122 Known exploited | High 7.8 | Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Window… Assigned by adobe | Jul 14, 2015 |
| CVE-2015-2425 Known exploited | High 8.8 | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vuln… Assigned by microsoft | Jul 14, 2015 |
| CVE-2015-2424 Known exploited | High 8.8 | Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or ca… Assigned by microsoft | Jul 14, 2015 |
| CVE-2015-2419 Known exploited | High 8.8 | JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory Corr… Assigned by microsoft | Jul 14, 2015 |
| CVE-2015-2387 Known exploited | High 7.8 | ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Assigned by microsoft | Jul 14, 2015 |
| CVE-2015-2590 Known exploited | Critical 9.8 | Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors… Assigned by oracle | Jul 16, 2015 |
| CVE-2015-2426 Known exploited | High 8.8 | Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012… Assigned by microsoft | Jul 20, 2015 |
| CVE-2015-5477 Known exploited | High 7.5 | named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. Assigned by mitre | Jul 29, 2015 |
| CVE-2015-4495 Known exploited | High 8.8 | The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain p… Assigned by mozilla | Aug 8, 2015 |
| CVE-2015-3246 Known exploited | High 7.4 | libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a denial of service (incon… Assigned by redhat | Aug 11, 2015 |
| CVE-2015-1769 Known exploited | Medium 6.6 | Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 misha… Assigned by microsoft | Aug 15, 2015 |
| CVE-2015-1642 Known exploited | High 7.8 | Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." Assigned by microsoft | Aug 15, 2015 |
| CVE-2015-2502 Known exploited | High 8.8 | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Corruption Vulnerabilit… Assigned by microsoft | Aug 19, 2015 |
| CVE-2015-2546 Known exploited | High 8.2 | The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows… Assigned by microsoft | Sep 9, 2015 |
| CVE-2015-2545 Known exploited | High 7.8 | Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File Vulnerability." Assigned by microsoft | Sep 9, 2015 |
| CVE-2015-7645 Known exploited | High 7.8 | Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF f… Assigned by adobe | Oct 15, 2015 |
| CVE-2015-4902 Known exploited | Medium 5.3 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment. Assigned by oracle | Oct 21, 2015 |
| CVE-2015-4852 Known exploited | Critical 9.8 | The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java object in T3 protoc… Assigned by oracle | Nov 18, 2015 |
| CVE-2015-5317 Known exploited | High 7.5 | The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request. Assigned by redhat | Nov 25, 2015 |
| CVE-2015-5287 Known exploited | High 7.8 | The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable na… Assigned by redhat | Dec 7, 2015 |
| CVE-2015-6175 Known exploited | High 7.8 | The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability." Assigned by microsoft | Dec 9, 2015 |
| CVE-2015-7755 Known exploited | Critical 9.8 | Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b, 6.3.0r17 before 6.3.… Assigned by mitre | Dec 19, 2015 |
| CVE-2015-8651 Known exploited | High 8.8 | Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20… Assigned by adobe | Dec 28, 2015 |
| CVE-2015-7450 Known exploited | Critical 9.8 | Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT infrastructure, and mobile and social products allow remote attackers to execute arbitrary commands via a craf… Assigned by ibm | Jan 2, 2016 |
| CVE-2016-0034 Known exploited | High 8.8 | Microsoft Silverlight 5 before 5.1.41212.0 mishandles negative offsets during decoding, which allows remote attackers to execute arbitrary code or cause a denial of service (object-header corruption)… Assigned by microsoft | Jan 13, 2016 |
