November 2015

29 results · Clear filters · Feed

• Critical 9.8
  CVE-2015-8103 Public exploit EPSS 92%

  Jenkins CLI Deserialization of Untrusted Data vulnerability

  The Jenkins CLI subsystem in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to execute arbitrary code via a crafted serialized Java object, related to a problematic webapps/ROOT/WEB-INF/lib/commons-collections-*.jar file and the "Groovy v…

  org.jenkins-ci.main:cli Maven
  Nov 25, 2015
• Unscored —
  CVE-2015-7865 Public exploit

  nvSCPAPISvr.exe in the Stereoscopic 3D Driver Service in the NVIDIA GPU graphics driver R340 before 341.92, R352 before…

  Nov 24, 2015
• Unscored —
  CVE-2015-7985 Public exploit

  Valve Steam 2.10.91.91 uses weak permissions (Users: read and write) for the Install folder, which allows local users t…

  Nov 24, 2015
• Unscored —
  CVE-2015-7808 Public exploit EPSS 81%

  The vB_Api_Hook::decodeArguments method in vBulletin 5 Connect 5.1.2 through 5.1.9 allows remote attackers to conduct P…

  Nov 24, 2015
• Unscored —
  CVE-2015-7984 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Ho…

  php-horde Debian
  Nov 19, 2015
• Unscored —
  CVE-2015-5999 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in the D-Link DIR-816L Wireless Router with firmware before …

  Nov 18, 2015
• Critical 9.8
  CVE-2015-4852 Exploited Public exploit EPSS 95%

  The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers…

  openjdk-8 libcommons-collections3-java Ubuntu
  Nov 18, 2015

  KEV Nov 3, 2021
• Unscored —
  CVE-2015-6357 Public exploit

  The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verify the X.509 certifi…

  Nov 18, 2015
• Unscored —
  CVE-2015-7805 Public exploit EPSS 14%

  Heap-based buffer overflow in libsndfile 1.0.25 allows remote attackers to have unspecified impact via the headindex va…

  libsndfile libsndfile Debian Ubuntu
  Nov 17, 2015
• Unscored —
  CVE-2015-5602 Public exploit

  sudoedit in Sudo before 1.8.15 allows local users to gain privileges via a symlink attack on a file whose full path is …

  sudo sudo Debian Ubuntu
  Nov 17, 2015
• Unscored —
  CVE-2015-7897 Public exploit

  The media scanning functionality in the face recognition library in android.media.process in Samsung Galaxy S6 Edge bef…

  Nov 16, 2015
• Unscored —
  CVE-2015-2925 Public exploit

  The prepend_path function in fs/dcache.c in the Linux kernel before 4.2.4 does not properly handle rename actions insid…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 16, 2015
• Unscored —
  CVE-2015-7652 Public exploit EPSS 25%

  Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and…

  flashplugin-nonfree Ubuntu
  Nov 11, 2015
• Unscored —
  CVE-2015-6104 Public exploit EPSS 35%

  The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo…

  Nov 11, 2015
• Unscored —
  CVE-2015-6100 Public exploit

  The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W…

  Nov 11, 2015
• Unscored —
  CVE-2015-6095 Public exploit

  Kerberos in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Win…

  Nov 11, 2015
• Unscored —
  CVE-2015-6086 Public exploit EPSS 26%

  Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information from process memory vi…

  Nov 11, 2015
• Unscored —
  CVE-2015-6098 Public exploit

  Buffer overflow in the Network Driver Interface Standard (NDIS) implementation in Microsoft Windows Vista SP2, Windows …

  Nov 11, 2015
• Unscored —
  CVE-2015-6101 Public exploit

  The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W…

  Nov 11, 2015
• Unscored —
  CVE-2015-6102 Public exploit

  The kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, W…

  Nov 11, 2015
• Unscored —
  CVE-2015-6103 Public exploit EPSS 35%

  The Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windo…

  Nov 11, 2015
• Unscored —
  CVE-2015-8046 Public exploit EPSS 30%

  Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and…

  flashplugin-nonfree Ubuntu
  Nov 11, 2015
• Unscored —
  CVE-2015-8043 Public exploit EPSS 29%

  Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and…

  flashplugin-nonfree Ubuntu
  Nov 11, 2015
• Unscored —
  CVE-2015-8044 Public exploit EPSS 41%

  Use-after-free vulnerability in Adobe Flash Player before 18.0.0.261 and 19.x before 19.0.0.245 on Windows and OS X and…

  flashplugin-nonfree Ubuntu
  Nov 11, 2015
• Unscored —
  CVE-2015-7254 Public exploit EPSS 28%

  Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrar…

  Nov 7, 2015
• Unscored —
  CVE-2015-6612 Public exploit

  libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted app…

  android Ubuntu
  Nov 3, 2015
• Unscored —
  CVE-2015-8038 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager befo…

  Nov 2, 2015
• Unscored —
  CVE-2015-8037 Public exploit

  Multiple cross-site scripting (XSS) vulnerabilities in the Graphical User Interface (GUI) in Fortinet FortiManager befo…

  Nov 2, 2015
• Unscored —
  CVE-2015-5534 Public exploit

  Multiple cross-site request forgery (CSRF) vulnerabilities in Oxwall before 1.8 allow remote attackers to hijack the au…

  Nov 2, 2015