Skip to content
OpenAdvisories

Archive

September 2015

Vulnerabilities first published in this month (UTC), newest first.

← August 2015 2015 / September October 2015 →
  1. 114
  2. 26
  3. 326
  4. 412
  5. 57
  6. 69
  7. 73
  8. 87
  9. 954
  10. 10 
  11. 1123
  12. 12 
  13. 13 
  14. 1413
  15. 158
  16. 1618
  17. 1715
  18. 18113
  19. 19 
  20. 2026
  21. 2119
  22. 2226
  23. 23 
  24. 2430
  25. 2517
  26. 26 
  27. 27 
  28. 2831
  29. 2916
  30. 30 
All Critical High Medium Low Exploited only Public exploit

62 results · Clear filters · Feed

  • Unscored —
    CVE-2015-2512 Public exploit

    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo…

  • Unscored —
    CVE-2015-2524 Public exploit

    Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 do not prope…

  • Unscored —
    CVE-2015-2528 Public exploit

    Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, and Windows 10 do not prope…

  • Unscored —
    CVE-2015-2523 Public exploit EPSS 30%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel for Mac 2011 and 2016, Office Compat…

  • High 8.2
    CVE-2015-2546 Exploited · Ransomware Public exploit EPSS 10%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi…

    KEV Mar 15, 2022
  • Unscored —
    CVE-2015-2518 Public exploit

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi…

  • Unscored —
    CVE-2015-2517 Public exploit

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi…

  • Unscored —
    CVE-2015-2508 Public exploit

    The Adobe Type Manager Library in Microsoft Windows 10 allows local users to gain privileges via a crafted application,…

  • Unscored —
    CVE-2015-2509 Public exploit EPSS 71%

    Windows Media Center in Microsoft Windows Vista SP2, Windows 7 SP1, Windows 8, and Windows 8.1 allows user-assisted rem…

  • Unscored —
    CVE-2015-2527 Public exploit

    The process-initialization implementation in win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1,…

  • Unscored —
    CVE-2015-2511 Public exploit

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi…

  • Unscored —
    CVE-2015-2521 Public exploit EPSS 28%

    Microsoft Excel 2007 SP3, Excel 2010 SP2, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to exe…

  • Unscored —
    CVE-2015-2507 Public exploit

    The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo…

  • Unscored —
    CVE-2015-2525 Public exploit EPSS 31%

    Task Scheduler in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.…

  • Unscored —
    CVE-2015-6809 Public exploit

    Multiple cross-site scripting (XSS) vulnerabilities in BEdita before 3.6.0 allow remote attackers to inject arbitrary w…

  • Unscored —
    CVE-2015-6811 Public exploit

    SQL injection vulnerability in the Sophos Cyberoam CR500iNG-XP firewall appliance with CyberoamOS 10.6.2 MR-1 and earli…

  • Unscored —
    CVE-2015-6810 Public exploit

    Cross-site scripting (XSS) vulnerability in Invision Power Services IPS Community Suite (aka Invision Power Board, IPB,…

  • Unscored —
    CVE-2014-9605 Public exploit

    WebUpgrade in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to bypass au…

  • Unscored —
    CVE-2015-6545 Public exploit

    Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the …

  • Unscored —
    CVE-2015-4077 Public exploit

    The (1) mdare64_48.sys, (2) mdare32_48.sys, (3) mdare32_52.sys, and (4) mdare64_52.sys drivers in Fortinet FortiClient …

  • Unscored —
    CVE-2015-5736 Public exploit

    The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kerne…

  • Unscored —
    CVE-2015-6805 Public exploit

    Cross-site scripting (XSS) vulnerability in the MDC Private Message plugin 1.0.0 for WordPress allows remote authentica…