2015 CVEs¶
26 entries from 2015. 0 ship detection & prevention rules.
| CVE | Severity | Detection / prevention | PoC |
|---|---|---|---|
| CVE-2015-0311 — Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and… | Critical (9.8) | — | ✅ |
| CVE-2015-0313 — Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through… | Critical (9.8) | — | ✅ |
| CVE-2015-1187 — The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute… | Critical (9.8) | — | ✅ |
| CVE-2015-1427 — The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows… | Critical (9.8) | — | ✅ |
| CVE-2015-1635 — HTTP.sys in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1,… | Critical (9.8) | — | ✅ |
| CVE-2015-2590 — Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded… | Critical (9.8) | — | ✅ |
| CVE-2015-3043 — Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows… | Critical (9.8) | — | ✅ |
| CVE-2015-3113 — Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x… | Critical (9.8) | — | ✅ |
| CVE-2015-4852 — The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and… | Critical (9.8) | — | ✅ |
| CVE-2015-5119 — Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3)… | Critical (9.8) | — | ✅ |
| CVE-2015-5122 — Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3)… | Critical (9.8) | — | ✅ |
| CVE-2015-5123 — Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3)… | Critical (9.8) | — | ✅ |
| CVE-2015-7450 — Serialized-object interfaces in certain IBM analytics, business solutions, cognitive, IT… | Critical (9.8) | — | ✅ |
| CVE-2015-7755 — Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before… | Critical (9.8) | — | ✅ |
| CVE-2015-4068 — Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote… | Critical (9.1) | — | ✅ |
| CVE-2015-1770 — Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary… | High (8.8) | — | ✅ |
| CVE-2015-2051 — The D-Link DIR-645 Wired/Wireless Router Rev. | High (8.8) | — | ✅ |
| CVE-2015-2360 — win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2,… | High (8.8) | — | ✅ |
| CVE-2015-2419 — JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute… | High (8.8) | — | ✅ |
| CVE-2015-2424 — Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2,… | High (8.8) | — | ✅ |
| CVE-2015-2425 — Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause… | High (8.8) | — | ✅ |
| CVE-2015-2426 — Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft… | High (8.8) | — | ✅ |
| CVE-2015-2502 — Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary… | High (8.8) | — | ✅ |
| CVE-2015-4495 — The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and… | High (8.8) | — | ✅ |
| CVE-2015-8651 — Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before… | High (8.8) | — | ✅ |
| CVE-2015-2546 — The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2… | High (8.2) | — | ✅ |