Skip to content
OpenAdvisories

Archive

May 2015

Vulnerabilities first published in this month (UTC), newest first.

← April 2015 2015 / May June 2015 →
  1. 118
  2. 21
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 76
  8. 813
  9. 9 
  10. 10 
  11. 11 
  12. 1228
  13. 1395
  14. 1429
  15. 159
  16. 167
  17. 173
  18. 1813
  19. 199
  20. 2035
  21. 219
  22. 223
  23. 231
  24. 24 
  25. 2543
  26. 2616
  27. 2715
  28. 2813
  29. 2924
  30. 3015
  31. 315
All Critical High Medium Low Exploited only Public exploit

60 results · Clear filters · Feed

  • Unscored —
    CVE-2015-3073 Public exploit EPSS 25%

    Adobe Reader and Acrobat 10.x before 10.1.14 and 11.x before 11.0.11 on Windows and OS X allow attackers to bypass inte…

  • Unscored —
    CVE-2015-3083 Public exploit EPSS 41%

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.46…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3088 Public exploit EPSS 62%

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows a…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3093 Public exploit EPSS 48%

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.46…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3082 Public exploit EPSS 43%

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.46…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3090 Public exploit EPSS 83%

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.46…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3081 Public exploit EPSS 11%

    Race condition in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and …

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3080 Public exploit EPSS 57%

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3087 Public exploit EPSS 74%

    Integer overflow in Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X an…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-3089 Public exploit EPSS 48%

    Adobe Flash Player before 13.0.0.289 and 14.x through 17.x before 17.0.0.188 on Windows and OS X and before 11.2.202.46…

    flashplugin-nonfree Ubuntu
  • Unscored —
    CVE-2015-2845 Public exploit EPSS 72%

    The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1421902800 allows remote attackers to execute ar…

  • Unscored —
    CVE-2015-2843 Public exploit EPSS 38%

    Multiple SQL injection vulnerabilities in GoAutoDial GoAdmin CE before 3.3-1421902800 allow remote attackers to execute…

  • Unscored —
    CVE-2015-2844 Public exploit EPSS 13%

    The cpanel function in go_site.php in GoAutoDial GoAdmin CE before 3.3-1420434000 allows remote attackers to execute ar…

  • Unscored —
    CVE-2015-2842 Public exploit EPSS 13%

    Unrestricted file upload vulnerability in go_audiostore.php in the audiostore (Voice Files) upload functionality in GoA…

  • Unscored —
    CVE-2015-2219 Public exploit

    Lenovo System Update (formerly ThinkVantage System Update) before 5.06.0034 uses predictable security tokens, which all…

  • Unscored —
    CVE-2015-1155 Public exploit EPSS 11%

    The history implementation in WebKit, as used in Apple Safari before 6.2.6, 7.x before 7.1.6, and 8.x before 8.0.6, all…

    qtwebkit-source qtwebkit-opensource-src webkitgtk Ubuntu
  • Medium —
    CVE-2015-3337 Public exploit Scanner template EPSS 33%

    Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch

    Directory traversal vulnerability in Elasticsearch before 1.4.5 and 1.5.x before 1.5.2, when a site plugin is enabled, allows remote attackers to read arbitrary files via unspecified vectors.

    org.elasticsearch:elasticsearch Maven
  • Unscored —
    CVE-2015-3632 Public exploit

    Foxit Reader, Enterprise Reader, and PhantomPDF before 7.1.5 allow remote attackers to cause a denial of service (memor…

  • Unscored —
    CVE-2015-2248 Public exploit

    Cross-site request forgery (CSRF) vulnerability in the user portal in Dell SonicWALL Secure Remote Access (SRA) product…

  • Critical 9.8
    CVE-2014-8361 Exploited Public exploit EPSS 100%

    The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClie…

    KEV Sep 18, 2023