Skip to content
OpenAdvisories

Archive

11 February 2015

Vulnerabilities first published on this day (UTC), newest first.

19 results · Clear filters · Feed

  • Unscored —
    CVE-2015-1579 Public exploit Scanner template EPSS 21%

    Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitr…

  • Unscored —
    CVE-2015-1518 Public exploit

    SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remot…

  • Unscored —
    CVE-2015-1172 Public exploit EPSS 58%

    Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding_pattern) 0.6 …

  • Unscored —
    CVE-2015-1576 Public exploit

    Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands v…

  • Unscored —
    CVE-2015-1575 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary we…

  • Unscored —
    CVE-2015-1578 Public exploit

    Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web …

  • Unscored —
    CVE-2015-1577 Public exploit

    Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to a…

  • Unscored —
    CVE-2015-0009 Public exploit

    The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, …

  • Unscored —
    CVE-2015-0010 Public exploit

    The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in …

  • Unscored —
    CVE-2015-0008 Public exploit EPSS 29%

    The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Win…

  • Unscored —
    CVE-2015-0059 Public exploit EPSS 11%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W…

  • Unscored —
    CVE-2015-0057 Public exploit EPSS 13%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

  • Unscored —
    CVE-2015-0058 Public exploit

    Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, an…

  • Unscored —
    CVE-2015-0050 Public exploit EPSS 33%

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

  • Unscored —
    CVE-2015-0064 Public exploit EPSS 30%

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applic…

  • Unscored —
    CVE-2015-0060 Public exploit

    The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windo…

  • Unscored —
    CVE-2015-0065 Public exploit EPSS 30%

    Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupti…

  • Unscored —
    CVE-2015-0040 Public exploit EPSS 30%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2015-0003 Public exploit

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …