June 2015

70 results · Clear filters · Feed

• Unscored —
  CVE-2015-1724 Public exploit

  Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista …

  Jun 10, 2015
• Unscored —
  CVE-2015-1727 Public exploit

  Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows …

  Jun 10, 2015
• Unscored —
  CVE-2015-1723 Public exploit

  Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista …

  Jun 10, 2015
• Unscored —
  CVE-2015-1725 Public exploit

  Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows …

  Jun 10, 2015
• Unscored —
  CVE-2015-1730 Public exploit EPSS 29%

  Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory co…

  Jun 10, 2015
• Unscored —
  CVE-2015-1722 Public exploit

  Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista …

  Jun 10, 2015
• Unscored —
  CVE-2015-3105 Public exploit EPSS 90%

  Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.46…

  flashplugin-nonfree Ubuntu
  Jun 10, 2015
• Unscored —
  CVE-2015-3107 Public exploit EPSS 32%

  Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows…

  flashplugin-nonfree Ubuntu
  Jun 10, 2015
• Unscored —
  CVE-2015-3106 Public exploit EPSS 43%

  Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows…

  flashplugin-nonfree Ubuntu
  Jun 10, 2015
• Unscored —
  CVE-2015-4148 Public exploit EPSS 20%

  The do_soap_call function in ext/soap/soap.c in PHP before 5.4.39, 5.5.x before 5.5.23, and 5.6.x before 5.6.7 does not…

  php5 Ubuntu
  Jun 9, 2015
• Unscored —
  CVE-2015-4010 Public exploit

  Cross-site request forgery (CSRF) vulnerability in the Encrypted Contact Form plugin before 1.1 for WordPress allows re…

  Jun 9, 2015
• Unscored —
  CVE-2015-3624 Public exploit

  Cross-site request forgery (CSRF) vulnerability in Test/WorkArea/DmsMenu/menuActions/MenuActions.aspx in Ektron Content…

  Jun 9, 2015
• Unscored —
  CVE-2014-7872 Public exploit

  Comodo GeekBuddy before 4.18.121 does not restrict access to the VNC server, which allows local users to gain privilege…

  Jun 9, 2015
• Unscored —
  CVE-2015-3001 Public exploit

  SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which a…

  Jun 8, 2015
• Unscored —
  CVE-2015-3000 Public exploit

  SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a la…

  Jun 8, 2015
• Unscored —
  CVE-2015-2999 Public exploit

  Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary…

  Jun 8, 2015
• Unscored —
  CVE-2015-2997 Public exploit EPSS 57%

  SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accoun…

  Jun 8, 2015
• Unscored —
  CVE-2015-2995 Public exploit EPSS 34%

  The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote a…

  Jun 8, 2015
• Unscored —
  CVE-2015-2996 Public exploit Scanner template EPSS 87%

  Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitra…

  Jun 8, 2015
• Unscored —
  CVE-2015-2994 Public exploit EPSS 50%

  Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators …

  Jun 8, 2015
• Unscored —
  CVE-2015-2993 Public exploit EPSS 55%

  SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers …

  Jun 8, 2015
• Unscored —
  CVE-2015-2998 Public exploit EPSS 26%

  SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sens…

  Jun 8, 2015
• Unscored —
  CVE-2015-0779 Public exploit EPSS 74%

  Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 1…

  Jun 7, 2015
• Unscored —
  CVE-2010-5323 Public exploit EPSS 14%

  Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration …

  Jun 7, 2015
• Unscored —
  CVE-2010-5324 Public exploit EPSS 72%

  Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration …

  Jun 7, 2015
• Unscored —
  CVE-2015-2125 Public exploit

  Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to b…

  Jun 7, 2015
• Unscored —
  CVE-2015-4038 Public exploit

  The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an …

  Jun 3, 2015
• Unscored —
  CVE-2014-0999 Public exploit

  Sendio before 7.2.4 includes the session identifier in URLs in emails, which allows remote attackers to obtain sensitiv…

  Jun 2, 2015
• Unscored —
  CVE-2014-8391 Public exploit

  The Web interface in Sendio before 7.2.4 does not properly handle sessions, which allows remote authenticated users to …

  Jun 2, 2015
• Low —
  CVE-2015-2269 Public exploit

  Moodle XSS Vulnerability

  Multiple cross-site scripting (XSS) vulnerabilities in lib/javascript-static.js in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before 2.7.6, and 2.8.x before 2.8.4 allow remote authenticated users to inject arbitrary web script or HTML via a (1) alt or (2…

  moodle/moodle Packagist
  Jun 1, 2015