Archive
10 June 2015
Vulnerabilities first published on this day (UTC), newest first.
70 results · Feed
-
Unscored —
strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for…
-
Unscored —
Multiple cross-site request forgery (CSRF) vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hi…
-
Unscored —CVE-2015-4465 Public exploit
Cross-site scripting (XSS) vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remot…
-
Unscored —
Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attac…
-
Unscored —
Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder p…
-
Unscored —CVE-2014-8607 Public exploit
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command li…
-
Unscored —CVE-2014-8604 Public exploit
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in t…
-
Unscored —CVE-2014-8606 Public exploit
Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote adminis…
-
Unscored —CVE-2014-8603 Public exploit
cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to ex…
-
Unscored —CVE-2014-8605 Public exploit
The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under …
-
Unscored —
Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attacke…
-
Medium —
Dolibarr ERP and CRM contain Cross-site Scripting Vulnerability
Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the Business Search (search_nom) field to (1) htdocs/societe/societe.php or (2) htdocs/societe/admin/societe.…
-
Unscored —CVE-2015-1757 EPSS 11%
Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Window…
-
Unscored —CVE-2015-1754 EPSS 16%
Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…
-
Unscored —CVE-2015-1687 EPSS 13%
Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service …
-
Unscored —
The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and…
-
Unscored —
win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privil…
-
High 8.8
Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office docume…
KEV Mar 28, 2022 -
Unscored —CVE-2015-1741 EPSS 16%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-1735 EPSS 16%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-1750 EPSS 22%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —
Untrusted search path vulnerability in the LoadLibrary function in the kernel in Microsoft Windows Vista SP2, Windows S…
-
Unscored —CVE-2015-1759 EPSS 16%
Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document…
-
Unscored —CVE-2015-1748 EPSS 15%
Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Intern…
-
Unscored —CVE-2015-1752 EPSS 16%
Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —
Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumul…
-
Unscored —CVE-2015-1721 Public exploit
The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and…
-
Unscored —CVE-2015-1726 Public exploit
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista …
-
Unscored —
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista …
-
Unscored —CVE-2015-1724 Public exploit
Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista …
-
Unscored —CVE-2015-1740 EPSS 16%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-1747 EPSS 24%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-1732 EPSS 13%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-1739 EPSS 15%
Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet …
-
Unscored —CVE-2015-1751 EPSS 17%
Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-1756 EPSS 17%
Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R…
-
Unscored —CVE-2015-1744 EPSS 16%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-1753 EPSS 16%
Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…
-
Unscored —CVE-2015-1745 EPSS 24%
Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…
-
Unscored —CVE-2015-1764 EPSS 13%
The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the…