Exploited CVEs of 2015

Every one of the 47 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Microsoft Windows 'HTTP.sys' - Remote Code ExecutionCVE-2015-1635Microsoft · CVSS 9.8 · 100% likely

   CWE-94Microsoft1 bounty report

2. The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023.CVE-2014-8361Realtek · CVSS 9.8 · 100% likelycovered by CyberSIXT

   Realtek2 articles

3. ElasticSearch - Remote Code ExecutionCVE-2015-1427Elastic · CVSS 9.8 · 100% likely

   Elastic

4. Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attac…CVE-2015-3113Adobe · CVSS 7.8 · 100% likely

   CWE-122AdobeAPT3

5. named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries.CVE-2015-5477ISC · CVSS 7.5 · 100% likelycovered by CyberSIXT

   CWE-617IscFlax Typhoon3 bounty reports5 articles

6. ProFTPd - Remote Code ExecutionCVE-2015-3306ProFTPD · CVSS 10 · 99% likelycovered by CyberSIXT

   CWE-284ProftpdFlax Typhoon5 articles

7. Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows…CVE-2015-5119Adobe · CVSS 7.8 · 99% likely

   CWE-416AdobeBlackTech

8. Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint…CVE-2015-1641Microsoft · CVSS 7.8 · 97% likely

   CWE-787MicrosoftAPT41Confucius

9. The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP…CVE-2015-2051D-Link · CVSS 8.8 · 97% likely

   CWE-77D-Link

10. Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote att…CVE-2015-0313Adobe · CVSS 7.8 · 95% likely

    CWE-416Adobe

11. The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java…CVE-2015-4852Oracle · CVSS 9.8 · 95% likely

    CWE-502Oracle

12. Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through…CVE-2015-5122Adobe · CVSS 7.8 · 87% likely

    CWE-416Adobe

13. Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,…CVE-2015-2426Microsoft · CVSS 8.8 · 87% likely

    CWE-124Microsoft

14. Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File…CVE-2015-2545Microsoft · CVSS 7.8 · 86% likely

    Microsoft

15. Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote…CVE-2015-0311Adobe · CVSS 7.8 · 86% likely

    Adobe

16. TP-LINK - Local File InclusionCVE-2015-3035TP-Link · CVSS 7.5 · 84% likely

    CWE-22TP-Link

17. Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Wi…CVE-2015-0016Microsoft · CVSS 7.8 · 76% likely

    CWE-22Microsoft

18. Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cau…CVE-2015-3043Adobe · CVSS 7.8 · 74% likely

    CWE-787Adobe

19. The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbit…CVE-2015-4495Mozilla · CVSS 8.8 · 69% likely

    CWE-346Mozilla

20. Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Ado…CVE-2015-8651Adobe · CVSS 8.8 · 68% likely

    CWE-190AdobeDarkhotel

21. Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code…CVE-2015-7645Adobe · CVSS 7.8 · 65% likely

    Adobe

22. Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path…CVE-2015-4068Arcserve · CVSS 9.1 · 64% likely

    CWE-22Arcserve

23. Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b,…CVE-2015-7755Juniper · CVSS 9.8 · 61% likely

    CWE-287Juniper Networks

24. Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as expl…CVE-2015-1701Microsoft · CVSS 7.8 · 56% likely

    MicrosoftAPT28

25. Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability."CVE-2015-1642Microsoft · CVSS 7.8 · 53% likely

    CWE-787Microsoft

26. JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "…CVE-2015-2419Microsoft · CVSS 8.8 · 53% likely

    CWE-787Microsoft

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.