Archive
11 February 2015
Vulnerabilities first published on this day (UTC), newest first.
65 results · Feed
-
Unscored —
Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitr…
-
Unscored —CVE-2015-1518 Public exploit
SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remot…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Redirection Page plugin 1.2 for WordPress allow remot…
-
Unscored —
Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 …
-
Unscored —CVE-2015-1576 Public exploit
Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands v…
-
Unscored —CVE-2015-1575 Public exploit
Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary we…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in the Mobile Domain plugin 1.5.2 for WordPress allow remote…
-
Unscored —CVE-2015-1578 Public exploit
Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web …
-
Unscored —
Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1)…
-
Unscored —CVE-2015-1577 Public exploit
Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to a…
-
Unscored —CVE-2015-0070 EPSS 16%
Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zon…
-
Unscored —CVE-2015-0061 EPSS 19%
Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Win…
-
Unscored —CVE-2015-0019 EPSS 22%
Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (me…
-
Unscored —CVE-2015-0037 EPSS 27%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-0043 EPSS 16%
Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-0021 EPSS 16%
Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-0051 EPSS 15%
Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, a…
-
Unscored —CVE-2015-0035 EPSS 16%
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…
-
Unscored —CVE-2015-0009 Public exploit
The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, …
-
Unscored —
Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windo…
-
Unscored —CVE-2015-0038 EPSS 16%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-0039 EPSS 16%
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…
-
Unscored —CVE-2015-0023 EPSS 17%
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-0026 EPSS 16%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-0068 EPSS 22%
Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…
-
Unscored —CVE-2015-0010 Public exploit
The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in …
-
Unscored —
The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win…
-
Unscored —CVE-2015-0054 EPSS 11%
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…
-
Unscored —CVE-2015-0066 EPSS 16%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-0067 EPSS 16%
Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service …
-
Unscored —CVE-2015-0029 EPSS 16%
Microsoft Internet Explorer 6 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (mem…
-
Medium 6.5
Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted …
KEV May 25, 2022 -
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W…
-
Unscored —CVE-2015-0042 EPSS 19%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-0045 EPSS 16%
Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service …
-
Unscored —CVE-2015-0017 EPSS 16%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …
-
Unscored —CVE-2015-0055 EPSS 11%
Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet …
-
Unscored —CVE-2015-0058 Public exploit
Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, an…
-
Unscored —CVE-2015-0020 EPSS 16%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…