Skip to content
OpenAdvisories

Archive

11 February 2015

Vulnerabilities first published on this day (UTC), newest first.

65 results · Feed

  • Unscored —
    CVE-2015-1579 Public exploit Scanner template EPSS 21%

    Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitr…

  • Unscored —
    CVE-2015-1518 Public exploit

    SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remot…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Redirection Page plugin 1.2 for WordPress allow remot…

  • Unscored —
    CVE-2015-1172 Public exploit EPSS 58%

    Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 …

  • Unscored —
    CVE-2015-1576 Public exploit

    Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2015-1575 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary we…

  • Unscored —

    Multiple cross-site request forgery (CSRF) vulnerabilities in the Mobile Domain plugin 1.5.2 for WordPress allow remote…

  • Unscored —
    CVE-2015-1578 Public exploit

    Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web …

  • Unscored —

    Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1)…

  • Unscored —
    CVE-2015-1577 Public exploit

    Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to a…

  • Unscored —
    CVE-2015-0070 EPSS 16%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zon…

  • Unscored —
    CVE-2015-0061 EPSS 19%

    Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win…

  • Unscored —
    CVE-2015-0019 EPSS 22%

    Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…

  • Unscored —
    CVE-2015-0037 EPSS 27%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2015-0043 EPSS 16%

    Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-0021 EPSS 16%

    Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-0051 EPSS 15%

    Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, a…

  • Unscored —
    CVE-2015-0035 EPSS 16%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2015-0009 Public exploit

    The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —

    Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windo…

  • Unscored —
    CVE-2015-0038 EPSS 16%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-0039 EPSS 16%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2015-0023 EPSS 17%

    Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2015-0026 EPSS 16%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-0068 EPSS 22%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2015-0010 Public exploit

    The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in …

  • Unscored —
    CVE-2015-0008 Public exploit EPSS 29%

    The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win…

  • Unscored —
    CVE-2015-0054 EPSS 11%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

  • Unscored —
    CVE-2015-0066 EPSS 16%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2015-0067 EPSS 16%

    Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2015-0029 EPSS 16%

    Microsoft Internet Explorer 6 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

  • Medium 6.5
    CVE-2015-0071 Exploited EPSS 34%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted …

    KEV May 25, 2022
  • Unscored —
    CVE-2015-0059 Public exploit EPSS 11%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W…

  • Unscored —
    CVE-2015-0042 EPSS 19%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-0045 EPSS 16%

    Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service …

  • Unscored —
    CVE-2015-0017 EPSS 16%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-0057 Public exploit EPSS 13%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

  • Unscored —
    CVE-2015-0055 EPSS 11%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet …

  • Unscored —
    CVE-2015-0058 Public exploit

    Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, an…

  • Unscored —
    CVE-2015-0020 EPSS 16%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…