Skip to content
OpenAdvisories

Archive

May 2015

Vulnerabilities first published in this month (UTC), newest first.

← April 2015 2015 / May June 2015 →
  1. 118
  2. 21
  3. 3 
  4. 4 
  5. 5 
  6. 6 
  7. 76
  8. 813
  9. 9 
  10. 10 
  11. 11 
  12. 1228
  13. 1395
  14. 1429
  15. 159
  16. 167
  17. 173
  18. 1813
  19. 199
  20. 2035
  21. 219
  22. 223
  23. 231
  24. 24 
  25. 2543
  26. 2616
  27. 2715
  28. 2813
  29. 2924
  30. 3015
  31. 315
All Critical High Medium Low Exploited only Public exploit

410 results · Feed

  • Unscored —
    CVE-2015-2717

    Integer overflow in libstagefright in Mozilla Firefox before 38.0 allows remote attackers to execute arbitrary code or …

    firefox Ubuntu
  • Unscored —
    CVE-2015-2720

    The update implementation in Mozilla Firefox before 38.0 on Windows does not ensure that the pathname for updater.exe c…

  • Unscored —
    CVE-2015-2711

    Mozilla Firefox before 38.0 does not recognize a referrer policy delivered by a referrer META element in cases of conte…

    firefox Ubuntu
  • Unscored —
    CVE-2015-3326

    Trend Micro ScanMail for Microsoft Exchange (SMEX) 10.2 before Hot Fix Build 3318 and 11.0 before Hot Fix Build 4180 cr…

  • Unscored —
    CVE-2015-3644

    Stunnel 5.00 through 5.13, when using the redirect option, does not redirect client connections to the expected server …

    stunnel4 Debian
  • Medium —
    CVE-2015-3397

    Yii Framework Cross-site Scripting Vulnerability

    Cross-site scripting (XSS) vulnerability in Yii Framework before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via vectors related to JSON, arrays, and Internet Explorer 6 or 7.

    yiisoft/yii2 Packagist
  • Unscored —
    CVE-2014-1902

    Multiple cross-site scripting (XSS) vulnerabilities in Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range…

  • Unscored —
    CVE-2014-1900

    Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCB…

  • Unscored —
    CVE-2014-1901

    Y-Cam camera models SD range YCB003, YCK003, and YCW003; S range YCB004, YCK004, YCW004; EyeBall YCEB03; Bullet VGA YCB…

  • Unscored —
    CVE-2015-3456 Public exploit EPSS 15%

    The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5.x and earlier and KVM, allows local guest users to cause a…

    xen qemu virtualbox xen Debian Ubuntu
  • Unscored —
    CVE-2015-1675 EPSS 14%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  • Unscored —
    CVE-2015-1680 Public exploit

    The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wi…

  • High 7.8
    CVE-2015-1671 Exploited EPSS 49%

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Off…

    KEV May 25, 2022
  • Unscored —
    CVE-2015-1694 EPSS 16%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-1698 EPSS 18%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  • Unscored —
    CVE-2015-1670 EPSS 16%

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, all…

  • Unscored —
    CVE-2015-1678 Public exploit

    The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wi…

  • Unscored —
    CVE-2015-1710 EPSS 16%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-1683 EPSS 14%

    Microsoft Office 2007 SP3 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Offi…

  • Unscored —
    CVE-2015-1679 Public exploit

    The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wi…

  • Unscored —
    CVE-2015-1677 Public exploit

    The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wi…

  • Unscored —
    CVE-2015-1708 EPSS 16%

    Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (mem…

  • Unscored —
    CVE-2015-1658 EPSS 16%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2015-1705 EPSS 16%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-1674 Public exploit

    The kernel in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not p…

  • Unscored —
    CVE-2015-1685 EPSS 17%

    Microsoft Internet Explorer 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, …

  • Unscored —
    CVE-2015-1704 EPSS 11%

    Microsoft Internet Explorer 6 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

  • Unscored —
    CVE-2015-1714 EPSS 27%

    Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (m…

  • Unscored —
    CVE-2015-1711 EPSS 16%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2015-1676 Public exploit

    The kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Wi…

  • Unscored —
    CVE-2015-1716 EPSS 21%

    Schannel in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wi…

  • Unscored —
    CVE-2015-1700 EPSS 12%

    Microsoft SharePoint Server 2007 SP3, SharePoint Foundation 2010 SP2, SharePoint Server 2010 SP2, and SharePoint Founda…

  • Unscored —
    CVE-2015-1684 EPSS 16%

    VBScript.dll in the Microsoft VBScript 5.6 through 5.8 engine, as used in Internet Explorer 8 through 11 and other prod…

  • Unscored —
    CVE-2015-1709 EPSS 16%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

  • Unscored —
    CVE-2015-1688 EPSS 11%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…

  • Unscored —
    CVE-2015-1717 EPSS 16%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

  • Unscored —
    CVE-2015-1692 EPSS 35%

    Microsoft Internet Explorer 7 through 11 allows user-assisted remote attackers to read the clipboard contents via craft…

  • Unscored —
    CVE-2015-1695 EPSS 14%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  • Unscored —
    CVE-2015-1696 EPSS 18%

    Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  • Unscored —
    CVE-2015-1702

    The Service Control Manager (SCM) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and …