Skip to content
OpenAdvisories

Latest vulnerabilities

Every new CVE with its exploitation status, public exploits and fixes — from more than 20 public sources, updated hourly.

Tracked
409,138
Last 24h
481
Critical, 7 days
341
Known exploited
1,779
All Critical High Medium Low Exploited only Public exploit

1,796 results · Clear filters · Feed

  • High 7.5
    CVE-2015-5317 Exploited EPSS 23%

    Jenkins discloses project names via fingerprints

    The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.

    org.jenkins-ci.main:jenkins-core Maven
    KEV May 12, 2023
  • Critical 9.8
    CVE-2015-4852 Exploited Public exploit EPSS 95%

    The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers…

    openjdk-8 libcommons-collections3-java Ubuntu
    KEV Nov 3, 2021
  • Medium 5.3
    CVE-2015-4902 Exploited EPSS 14%

    Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unkno…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-7645 Exploited · Ransomware Public exploit EPSS 65%

    Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.53…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-2545 Exploited EPSS 86%

    Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a …

    KEV Mar 3, 2022
  • High 8.2
    CVE-2015-2546 Exploited · Ransomware Public exploit EPSS 10%

    The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Wi…

    KEV Mar 15, 2022
  • High 8.8
    CVE-2015-2502 Exploited EPSS 51%

    Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service…

    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-1642 Exploited EPSS 53%

    Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted docum…

    KEV Mar 3, 2022
  • Medium 6.6
    CVE-2015-1769 Exploited Public exploit

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1…

    KEV May 25, 2022
  • High 7.4
    CVE-2015-3246 Exploited Public exploit

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly mo…

    libuser libuser Debian Ubuntu
    KEV Aug 26, 2026
  • High 8.8
    CVE-2015-4495 Exploited Public exploit EPSS 69%

    The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remot…

    firefox pdf.js Debian Ubuntu
    KEV May 25, 2022
  • High 7.5
    CVE-2015-5477 Exploited Public exploit EPSS 100%

    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service …

    bind9 bind9 Debian Ubuntu
    KEV Oct 8, 2026
  • High 8.8
    CVE-2015-2426 Exploited Public exploit EPSS 87%

    Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server …

    KEV Mar 28, 2022
  • Critical 9.8
    CVE-2015-2590 Exploited EPSS 25%

    Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote atta…

    openjdk-7 openjdk-6 Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-2387 Exploited EPSS 35%

    ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server…

    KEV Mar 3, 2022
  • High 8.8
    CVE-2015-2425 Exploited EPSS 45%

    Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory c…

    KEV May 25, 2022
  • High 8.8
    CVE-2015-2419 Exploited Public exploit EPSS 53%

    JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial …

    KEV Mar 28, 2022
  • High 8.8
    CVE-2015-2424 Exploited EPSS 40%

    Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, a…

    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-5122 Exploited Public exploit EPSS 87%

    Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Playe…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5123 Exploited EPSS 19%

    Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 1…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 7.8
    CVE-2015-5119 Exploited Public exploit EPSS 99%

    Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • High 7.8
    CVE-2015-3113 Exploited Public exploit EPSS 100%

    Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows a…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022
  • High 8.8
    CVE-2015-1770 Exploited EPSS 35%

    Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office docume…

    KEV Mar 28, 2022
  • High 8.8
    CVE-2015-2360 Exploited EPSS 15%

    win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Serve…

    KEV May 25, 2022
  • Critical 9.1
    CVE-2015-4068 Exploited EPSS 64%

    Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive infor…

    KEV Mar 25, 2022
  • Critical 10.0
    CVE-2015-3306 Exploited Public exploit EPSS 99%

    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and…

    proftpd-dfsg proftpd-dfsg Debian Ubuntu
    KEV Oct 8, 2026
  • High 7.8
    CVE-2015-1671 Exploited EPSS 49%

    The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Off…

    KEV May 25, 2022
  • Critical 9.8
    CVE-2014-8361 Exploited Public exploit EPSS 100%

    The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClie…

    KEV Sep 18, 2023
  • High 7.8
    CVE-2015-1701 Exploited · Ransomware Public exploit EPSS 56%

    Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local…

    KEV Mar 3, 2022
  • High 7.5
    CVE-2015-3035 Exploited Public exploit EPSS 84%

    Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before…

    KEV Mar 25, 2022
  • High 7.8
    CVE-2015-3043 Exploited Public exploit EPSS 74%

    Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.45…

    flashplugin-nonfree Ubuntu
    KEV Mar 3, 2022
  • Critical 9.8
    CVE-2015-1635 Exploited Public exploit EPSS 100%

    HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, and Windows Server 2012 Gold a…

    KEV Feb 10, 2022
  • High 7.8
    CVE-2015-1641 Exploited Public exploit EPSS 97%

    Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Com…

    KEV Nov 3, 2021
  • High 7.8
    CVE-2015-1130 Exploited Public exploit

    The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and …

    KEV Feb 10, 2022
  • High 7.5
    CVE-2015-0666 Exploited EPSS 40%

    Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(…

    KEV Mar 25, 2022
  • Unscored —
    CVE-2015-0279 Exploited

    JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitra…

  • High 8.8
    CVE-2015-2051 Exploited Public exploit EPSS 97%

    The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute a…

    KEV Feb 10, 2022
  • Critical 9.8
    CVE-2015-1427 Exploited Public exploit EPSS 100%

    Improper Access Control in Elasticsearch

    The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.

    org.elasticsearch:elasticsearch Maven
    KEV Mar 25, 2022
  • Medium 6.5
    CVE-2015-0071 Exploited EPSS 34%

    Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted …

    KEV May 25, 2022
  • High 7.8
    CVE-2015-0313 Exploited Public exploit EPSS 95%

    Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows…

    flashplugin-nonfree Ubuntu
    KEV Apr 13, 2022