Archive
February 2015
Vulnerabilities first published in this month (UTC), newest first.
71 results · Clear filters · Feed
-
Unscored —CVE-2015-0058 Public exploit
Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, an…
-
Unscored —
Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…
-
Unscored —
Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applic…
-
Unscored —CVE-2015-0060 Public exploit
The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windo…
-
Unscored —
Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupti…
-
Unscored —
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-0003 Public exploit
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …
-
Unscored —
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass …
-
Unscored —CVE-2015-1467 Public exploit
Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to exe…
-
Unscored —CVE-2015-1305 Public exploit
McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, a…
-
Unscored —CVE-2014-9643 Public exploit
K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local user…
-
Unscored —CVE-2014-9642 Public exploit
bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows loc…
-
Unscored —CVE-2014-9641 Public exploit
The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows l…
-
Unscored —CVE-2014-9632 Public exploit
The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Prote…
-
Unscored —
Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.44…
-
Unscored —CVE-2015-1482 Public exploit
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote attackers to bypass authentication and obtain sensitive infor…
-
Unscored —CVE-2015-1481 Public exploit
Ansible Tower (aka Ansible UI) before 2.0.5 allows remote organization administrators to gain privileges by creating a …
-
Unscored —CVE-2015-1479 Public exploit
SQL injection vulnerability in reports/CreateReportTable.jsp in ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 bui…
-
Unscored —CVE-2015-1476 Public exploit
Multiple SQL injection vulnerabilities in xlinkerz ecommerceMajor allow remote attackers to execute arbitrary SQL comma…
-
Unscored —CVE-2015-1480 Public exploit
ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ti…
-
Unscored —CVE-2015-1478 Public exploit
Cross-site scripting (XSS) vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote atta…
-
Unscored —CVE-2015-1477 Public exploit
SQL injection vulnerability in the CMSJunkie J-ClassifiedsManager component for Joomla! allows remote attackers to exec…
-
Unscored —
Multiple SQL injection vulnerabilities in the FailOverHelperServlet (aka FailServlet) servlet in ZOHO ManageEngine OpMa…
-
Unscored —CVE-2014-9331 Public exploit
Cross-site request forgery (CSRF) vulnerability in ZOHO ManageEngine Desktop Central before 9 build 90130 allows remote…
-
Unscored —CVE-2015-1428 Public exploit
Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL com…
-
Unscored —CVE-2015-1400 Public exploit
SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL comman…
-
Unscored —CVE-2014-9633 Public exploit
The bdisk.sys driver in COMODO Backup before 4.4.1.23 allows remote attackers to gain privileges via a crafted device h…
-
High 7.8
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows…
KEV Apr 13, 2022 -
Unscored —CVE-2014-0998 Public exploit
Integer signedness error in the vt console driver (formerly Newcons) in FreeBSD 9.3 before p10 and 10.1 before p6 allow…
-
Unscored —CVE-2014-8612 Public exploit
Multiple array index errors in the Stream Control Transmission Protocol (SCTP) module in FreeBSD 10.1 before p5, 10.0 b…
-
Unscored —CVE-2014-7288 Public exploit
Symantec PGP Universal Server and Encryption Management Server before 3.3.2 MP7 allow remote authenticated administrato…