Skip to content
OpenAdvisories

Archive

July 2015

Vulnerabilities first published in this month (UTC), newest first.

← June 2015 2015 / July August 2015 →
  1. 117
  2. 29
  3. 375
  4. 47
  5. 55
  6. 639
  7. 73
  8. 822
  9. 936
  10. 1018
  11. 11 
  12. 12 
  13. 131
  14. 1488
  15. 1548
  16. 16172
  17. 17 
  18. 185
  19. 192
  20. 2022
  21. 218
  22. 226
  23. 2323
  24. 244
  25. 251
  26. 2610
  27. 271
  28. 28 
  29. 2910
  30. 303
  31. 31 
All Critical High Medium Low Exploited only Public exploit

18 results · Clear filters · Feed

  • High 7.5
    CVE-2015-5477 Exploited Public exploit EPSS 100%

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service …

    bind9 bind9 Debian Ubuntu
    KEV Oct 8, 2026
  • High 8.8
    CVE-2015-2426 Exploited Public exploit EPSS 87%

    Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server …

    KEV Mar 28, 2022
  • High 7.6
    CVE-2014-9196

    Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet

    Eaton Cooper Power Systems ProView 4.0 and 5.0 before 5.0 11 on Form 6 controls and Idea and IdeaPLUS relays generates TCP initial sequence number (ISN) values linearly, which makes it easier for remote attackers to spoof TCP sessions by predicting an ISN val…

    Eaton’s Cooper Power Systems Idea/IdeaPLUS relays Series Form 6
  • High —
    CVE-2015-1831

    Incomplete exclude pattern in Apache Struts

    The default exclude patterns (excludeParams) in Apache Struts 2.3.20 allow remote attackers to "compromise internal state of an application" via unspecified vectors.

    org.apache.struts:struts2-core org.apache.struts.xwork:xwork-core Maven
  • High 7.8
    CVE-2015-2387 Exploited EPSS 35%

    ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2015-2425 Exploited EPSS 45%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

    KEV May 25, 2022
  • High 8.8
    CVE-2015-2419 Exploited Public exploit EPSS 53%

    JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial …

    KEV Mar 28, 2022
  • High 8.8
    CVE-2015-2424 Exploited EPSS 40%

    Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, a…

    KEV Mar 3, 2022
  • High 7.5
    CVE-2015-5145

    Django ReDoS in validators.URLValidator

    validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

    django PyPI
  • High 7.5
    CVE-2015-5144

    Django Vulnerable to HTTP Response Splitting Attack

    Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 uses an incorrect regular expression, which allows remote attackers to inject arbitrary headers and conduct HTTP response splitting attacks via a newline character in an (1)…

    python-django django python-django Debian Ubuntu PyPI
  • High 7.5
    CVE-2015-5143

    Django Denial-of-service by filling session store

    The session backends in Django before 1.4.21, 1.5.x through 1.6.x, 1.7.x before 1.7.9, and 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (session store consumption) via multiple requests with unique session keys.

    python-django django python-django Debian Ubuntu PyPI
  • High 8.5
    CVE-2015-1561 Public exploit

    Centreon Command Injection

    The escape_command function in include/Administration/corePerformance/getStats.php in Centreon (formerly Merethis Centreon) 2.5.4 and earlier (fixed in Centreon 19.10.0) uses an incorrect regular expression, which allows remote authenticated users to execute …

    centreon/centreon Packagist
  • High —
    CVE-2015-5147

    redcarpet Buffer Overflow vulnerability

    Stack-based buffer overflow in the header_anchor function in the HTML renderer in Redcarpet before 3.3.2 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via unspecified vectors.

    redcarpet RubyGems
  • High 7.8
    CVE-2015-5122 Exploited Public exploit EPSS 87%

    Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Playe…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5123 Exploited EPSS 19%

    Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 1…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5119 Exploited Public exploit EPSS 99%

    Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.6
    CVE-2014-5406

    Hospira LifeCare PCA Infusion System

    The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify settings or medication data via packets…

    Hospira LifeCare PCA Infusion System
  • High 7.5
    CVE-2015-1916

    Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vec…