CVEs
Every published CVE. Without a filter the list holds those exploited, with a public check, or likely to be exploited; pick a year and month or a vendor for the rest.
| CVE | Vendor · product | Exploitation | CVSS | EPSS | Published |
|---|---|---|---|---|---|
| CVE-2015-1635Microsoft Windows 'HTTP.sys' - Remote Code Execution | Microsoft · HTTP.sys | Exploited | 9.8 | 100% | 2015-04-14 |
| CVE-2014-8361The miniigd SOAP service in Realtek SDK allows remote attackers to execute arbitrary code via a crafted NewInternalClient request, as exploited in the wild through 2023. | Realtek · SDK | Exploited | 9.8 | 100% | 2015-05-01 |
| CVE-2015-1427ElasticSearch - Remote Code Execution | Elastic · Elasticsearch | Exploited | 9.8 | 100% | 2015-02-17 |
| CVE-2015-3113Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attac… | Adobe · Flash Player | Exploited | 7.8 | 100% | 2015-06-23 |
| CVE-2015-5477named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion failure and daemon exit) via TKEY queries. | ISC · BIND | Exploited | 7.5 | 100% | 2015-07-29 |
| CVE-2015-3306ProFTPd - Remote Code Execution | ProFTPD · ProFTPD | Exploited | 10.0 | 99% | 2015-05-18 |
| CVE-2015-5119Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows… | Adobe · Flash Player | Exploited | 7.8 | 99% | 2015-07-08 |
| CVE-2015-1641Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Compatibility Pack SP3, Word Automation Services on SharePoint… | Microsoft · Office | Exploited | 7.8 | 97% | 2015-04-14 |
| CVE-2015-2051The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute arbitrary commands via a GetDeviceSettings action to the HNAP… | D-Link · DIR-645 Router | Exploited | 8.8 | 97% | 2015-02-23 |
| CVE-2015-0313Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows remote att… | Adobe · Flash Player | Exploited | 7.8 | 95% | 2015-02-02 |
| CVE-2015-4852The WLS Security component in Oracle WebLogic Server 10.3.6.0, 12.1.2.0, 12.1.3.0, and 12.2.1.0 allows remote attackers to execute arbitrary commands via a crafted serialized Java… | Oracle · WebLogic Server | Exploited | 9.8 | 95% | 2015-11-18 |
| CVE-2015-5122Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through… | Adobe · Flash Player | Exploited | 7.8 | 87% | 2015-07-14 |
| CVE-2015-2426Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,… | Microsoft · Windows | Exploited | 8.8 | 87% | 2015-07-20 |
| CVE-2015-2545Microsoft Office 2007 SP3, 2010 SP2, 2013 SP1, and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted EPS image, aka "Microsoft Office Malformed EPS File… | Microsoft · Office | Exploited | 7.8 | 86% | 2015-09-09 |
| CVE-2015-0311Unspecified vulnerability in Adobe Flash Player through 13.0.0.262 and 14.x, 15.x, and 16.x through 16.0.0.287 on Windows and OS X and through 11.2.202.438 on Linux allows remote… | Adobe · Flash Player | Exploited | 7.8 | 86% | 2015-01-23 |
| CVE-2015-3035TP-LINK - Local File Inclusion | TP-Link · Multiple Archer Devices | Exploited | 7.5 | 84% | 2015-04-17 |
| CVE-2015-0016Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Wi… | Microsoft · Windows | Exploited | 7.8 | 76% | 2015-01-13 |
| CVE-2015-3043Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cau… | Adobe · Flash Player | Exploited | 7.8 | 74% | 2015-04-14 |
| CVE-2015-4495The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbit… | Mozilla · Firefox | Exploited | 8.8 | 69% | 2015-08-08 |
| CVE-2015-8651Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Ado… | Adobe · Flash Player | Exploited | 8.8 | 68% | 2015-12-28 |
| CVE-2015-7645Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code… | Adobe · Flash Player | Exploited | 7.8 | 65% | 2015-10-15 |
| CVE-2015-4068Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path… | Arcserve · Unified Data Protection (UDP) | Exploited | 9.1 | 64% | 2015-05-29 |
| CVE-2015-7755Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0r14b, 6.3.0r15 before 6.3.0r15b, 6.3.0r16 before 6.3.0r16b,… | Juniper · ScreenOS | Exploited | 9.8 | 61% | 2015-12-19 |
| CVE-2015-1701Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local users to gain privileges via a crafted application, as expl… | Microsoft · Win32k | Exploited | 7.8 | 56% | 2015-04-21 |
| CVE-2015-1642Microsoft Office 2007 SP3, 2010 SP2, and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted document, aka "Microsoft Office Memory Corruption Vulnerability." | Microsoft · Office | Exploited | 7.8 | 53% | 2015-08-15 |
| CVE-2015-2419JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "… | Microsoft · Internet Explorer | Exploited | 8.8 | 53% | 2015-07-14 |
| CVE-2015-2502Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Memory Cor… | Microsoft · Internet Explorer | Exploited | 8.8 | 51% | 2015-08-19 |
| CVE-2015-1671The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Office 2007 SP3 and 2010 SP2; Live Meeting 2007 Console; Lync 2… | Microsoft · Windows | Exploited | 7.8 | 49% | 2015-05-13 |
| CVE-2015-2425Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Me… | Microsoft · Internet Explorer | Exploited | 8.8 | 45% | 2015-07-14 |
| CVE-2014-100005Multiple cross-site request forgery (CSRF) vulnerabilities in D-Link DIR-600 router (rev. Bx) with firmware before 2.17b02 allow remote attackers to hijack the authentication of a… | D-Link · DIR-600 Router | Exploited | 8.0 | 43% | 2015-01-13 |
| CVE-2015-0666Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1) allows remote attackers to read arbitrary files via a cra… | Cisco · Prime Data Center Network Manager (DCNM) | Exploited | 7.5 | 40% | 2015-04-03 |
| CVE-2015-2424Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute… | Microsoft · PowerPoint | Exploited | 8.8 | 40% | 2015-07-14 |
| CVE-2015-1770Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Uninitialized Memory Use Vulnerabi… | Microsoft · Office | Exploited | 8.8 | 35% | 2015-06-10 |
| CVE-2015-2387ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1,… | Microsoft · ATM Font Driver | Exploited | 7.8 | 35% | 2015-07-14 |
| CVE-2015-0071Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability." | Microsoft · Internet Explorer | Exploited | 6.5 | 34% | 2015-02-11 |
| CVE-2015-2590Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability… | Oracle · Java SE | Exploited | 9.8 | 25% | 2015-07-16 |
| CVE-2015-5317The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request. | Jenkins · Jenkins User Interface (UI) | Exploited | 7.5 | 23% | 2015-11-25 |
| CVE-2015-5123Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.… | Adobe · Flash Player | Exploited | 7.8 | 19% | 2015-07-14 |
| CVE-2015-0310Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438 on Linux does not properly restrict discovery of memory ad… | Adobe · Flash Player | Exploited | 7.8 | 15% | 2015-01-23 |
| CVE-2015-2360win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1… | Microsoft · Win32k | Exploited | 8.8 | 15% | 2015-06-10 |
| CVE-2015-4902Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment. | Oracle · Java SE | Exploited | 5.3 | 14% | 2015-10-21 |
| CVE-2015-2546The kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold… | Microsoft · Win32k | Exploited | 8.2 | 10% | 2015-09-09 |
| CVE-2015-1130The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and obtain admin privileges via unspecified vectors. | Apple · OS X | Exploited | 7.8 | 9.9% | 2015-04-10 |
| CVE-2015-3246libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local users to cause a deni… | Red Hat · Libuser | Exploited | 7.4 | 8.5% | 2015-08-11 |
| CVE-2015-6175The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Kernel Memory Elevation of Privilege Vulnerability." | Microsoft · Windows | Exploited | 7.8 | 5.3% | 2015-12-09 |
| CVE-2015-5287The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file w… | Red Hat · Automatic Bug Reporting Tool | Exploited | 7.8 | 5.0% | 2015-12-07 |
| CVE-2015-1769Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1,… | Microsoft · Windows | Exploited | 6.6 | 4.1% | 2015-08-15 |
Exploitation: exploited (CISA KEV), a public nuclei check, then EPSS: likely 10% or more, possible 1 to 10%, unlikely under 1%. Data as of 2026-11-15.