Latest vulnerabilities

1,125 results · Clear filters · Feed

• High 7.5
  CVE-2015-5477 Exploited Public exploit EPSS 100%

  named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service …

  bind9 bind9 Debian Ubuntu
  Jul 29, 2015

  KEV Oct 8, 2026
• High 8.8
  CVE-2015-2426 Exploited Public exploit EPSS 87%

  Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server …

  Jul 20, 2015

  KEV Mar 28, 2022
• High 8.8
  CVE-2015-2419 Exploited Public exploit EPSS 53%

  JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial …

  Jul 14, 2015

  KEV Mar 28, 2022
• High 7.8
  CVE-2015-5122 Exploited Public exploit EPSS 87%

  Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Playe…

  flashplugin-nonfree Ubuntu
  Jul 14, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-5119 Exploited Public exploit EPSS 99%

  Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13…

  flashplugin-nonfree Ubuntu
  Jul 8, 2015

  KEV Mar 3, 2022
• High 7.8
  CVE-2015-3113 Exploited Public exploit EPSS 100%

  Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows a…

  flashplugin-nonfree Ubuntu
  Jun 23, 2015

  KEV Apr 13, 2022
• Critical 10.0
  CVE-2015-3306 Exploited Public exploit EPSS 99%

  The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and…

  proftpd-dfsg proftpd-dfsg Debian Ubuntu
  May 18, 2015

  KEV Oct 8, 2026
• Critical 9.8
  CVE-2014-8361 Exploited Public exploit EPSS 100%

  The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClie…

  May 1, 2015

  KEV Sep 18, 2023
• High 7.8
  CVE-2015-1701 Exploited · Ransomware Public exploit EPSS 56%

  Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local…

  Apr 21, 2015

  KEV Mar 3, 2022
• High 7.5
  CVE-2015-3035 Exploited Public exploit EPSS 84%

  Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before…

  Apr 17, 2015

  KEV Mar 25, 2022
• High 7.8
  CVE-2015-3043 Exploited Public exploit EPSS 74%

  Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

  flashplugin-nonfree Ubuntu
  Apr 14, 2015

  KEV Mar 3, 2022
• Critical 9.8
  CVE-2015-1635 Exploited Public exploit EPSS 100%

  HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold a…

  Apr 14, 2015

  KEV Feb 10, 2022
• High 7.8
  CVE-2015-1641 Exploited Public exploit EPSS 97%

  Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Com…

  Apr 14, 2015

  KEV Nov 3, 2021
• High 7.8
  CVE-2015-1130 Exploited Public exploit

  The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and …

  Apr 10, 2015

  KEV Feb 10, 2022
• High 8.8
  CVE-2015-2051 Exploited Public exploit EPSS 97%

  The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute a…

  Feb 23, 2015

  KEV Feb 10, 2022
• Critical 9.8
  CVE-2015-1427 Exploited Public exploit EPSS 100%

  Improper Access Control in Elasticsearch

  The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

  org.elasticsearch:elasticsearch Maven
  Feb 17, 2015

  KEV Mar 25, 2022
• High 7.8
  CVE-2015-0313 Exploited Public exploit EPSS 95%

  Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows…

  flashplugin-nonfree Ubuntu
  Feb 2, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-0311 Exploited Public exploit EPSS 86%

  Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windo…

  flashplugin-nonfree Ubuntu
  Jan 23, 2015

  KEV Apr 13, 2022
• High 7.8
  CVE-2015-0016 Exploited Public exploit EPSS 76%

  Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7…

  Jan 13, 2015

  KEV May 25, 2022
• High 8.0
  CVE-2014-100005 Exploited Public exploit EPSS 43%

  Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17…

  Jan 13, 2015

  KEV May 16, 2024
• High 8.8
  CVE-2014-6324 Exploited Public exploit EPSS 87%

  The Kerberos Key Distribution Center (KDC) in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008…

  Nov 18, 2014

  KEV Mar 25, 2022
• High 8.8
  CVE-2014-6332 Exploited Public exploit EPSS 95%

  OleAut32.dll in OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Window…

  Nov 11, 2014

  KEV Mar 25, 2022
• High 7.8
  CVE-2014-6352 Exploited Public exploit EPSS 77%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  Oct 22, 2014

  KEV Feb 25, 2022
• High 7.8
  CVE-2014-4114 Exploited Public exploit EPSS 82%

  Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server …

  Oct 15, 2014

  KEV Mar 3, 2022
• High 7.8
  CVE-2014-4113 Exploited Public exploit EPSS 87%

  win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 …

  Oct 15, 2014

  KEV May 4, 2022
• Critical 9.8
  CVE-2014-6287 Exploited Public exploit EPSS 99%

  The findMacroMarker function in parserLib.pas in Rejetto HTTP File Server (aks HFS or HttpFileServer) 2.3x before 2.3c …

  Oct 7, 2014

  KEV Mar 25, 2022
• High 8.8
  CVE-2014-6278 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-026 does not properly parse function definitions in the values of environment variables, wh…

  bash bash Debian Ubuntu
  Sep 30, 2014

  KEV Oct 2, 2025
• Critical 9.8
  CVE-2014-7169 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values o…

  bash bash Debian Ubuntu
  Sep 25, 2014

  KEV Jan 28, 2022
• Critical 9.8
  CVE-2014-6271 Exploited Public exploit EPSS 100%

  GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, whic…

  bash bash Debian Ubuntu
  Sep 24, 2014

  KEV Jan 28, 2022
• High 7.8
  CVE-2014-4404 Exploited Public exploit EPSS 49%

  Heap-based buffer overflow in IOHIDFamily in Apple iOS before 8 and Apple TV before 7 allows attackers to execute arbit…

  Sep 18, 2014

  KEV Feb 10, 2022
• High 8.4
  CVE-2013-2597 Exploited Public exploit

  Stack-based buffer overflow in the acdb_ioctl function in audio_acdb.c in the acdb audio driver for the Linux kernel 2.…

  Aug 31, 2014

  KEV Sep 15, 2022
• High 8.1
  CVE-2014-3120 Exploited Public exploit EPSS 89%

  Elasticsearch Improper Access Control vulnerability

  The default configuration in Elasticsearch before 1.2 enables dynamic scripting, which allows remote attackers to execute arbitrary MVEL expressions and Java code via the source parameter to _search. NOTE: this only violates the vendor's intended security pol…

  org.elasticsearch:elasticsearch Maven
  Jul 28, 2014

  KEV Mar 25, 2022
• High 7.8
  CVE-2014-3153 Exploited Public exploit EPSS 37%

  The futex_requeue function in kernel/futex.c in the Linux kernel through 3.14.5 does not ensure that calls have two dif…

  linux linux Debian Ubuntu
  Jun 7, 2014

  KEV May 25, 2022
• High 8.8
  CVE-2014-1812 Exploited · Ransomware Public exploit EPSS 65%

  The Group Policy implementation in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Wind…

  May 14, 2014

  KEV Nov 3, 2021
• High 7.5
  CVE-2014-0130 Exploited Public exploit EPSS 54%

  actionpack Path Traversal vulnerability

  Directory traversal vulnerability in actionpack/lib/abstract_controller/base.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows re…

  actionpack RubyGems
  May 7, 2014

  KEV Mar 25, 2022
• Medium 5.5
  CVE-2014-0196 Exploited Public exploit EPSS 20%

  The n_tty_write function in drivers/tty/n_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver …

  linux linux Debian Ubuntu
  May 7, 2014

  KEV May 12, 2023
• Critical 9.8
  CVE-2014-0780 Exploited Public exploit EPSS 75%

  InduSoft Web Studio Path Traversal

  Directory traversal vulnerability in NTWebServer in InduSoft Web Studio 7.1 before SP2 Patch 4 allows remote attackers to read administrative passwords in APP files, and consequently execute arbitrary code, via unspecified web requests.

  InduSoft Web Studio
  Apr 25, 2014

  KEV Apr 15, 2022
• High 7.5
  CVE-2014-0160 Exploited Public exploit EPSS 100%

  The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension pack…

  openssl Debian
  Apr 7, 2014

  KEV May 4, 2022
• High 7.8
  CVE-2014-1761 Exploited Public exploit EPSS 78%

  Microsoft Word 2003 SP3, 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT; Word Viewer; Office Compatibility Pack SP3; Off…

  Mar 24, 2014

  KEV Feb 15, 2022
• Medium 6.5
  CVE-2013-7331 Exploited Public exploit EPSS 50%

  The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the exis…

  Feb 26, 2014

  KEV May 25, 2022