Latest CVE Feed
-
7.2
HIGHCVE-2015-0660
Cisco Virtual TelePresence Server Software does not properly restrict use of the serial port, which allows local users to execute arbitrary OS commands as root by leveraging vSphere controller administrative privileges, aka Bug ID CSCus61123.... Read more
Affected Products : telepresence_server_software- EPSS Score: %0.05
- Published: Mar. 14, 2015
- Modified: Apr. 12, 2025
-
6.9
MEDIUMCVE-2014-9207
Untrusted search path vulnerability in CmnView.exe in CIMON CmnView 2.14.0.1 and 3.x before UltimateAccess 3.02 allows local users to gain privileges via a Trojan horse DLL in the current working directory.... Read more
- EPSS Score: %0.05
- Published: Mar. 14, 2015
- Modified: Apr. 12, 2025
-
6.9
MEDIUMCVE-2014-9206
Stack-based buffer overflow in Device Type Manager (DTM) 3.1.6 and earlier for Schneider Electric Invensys SRD Control Valve Positioner devices 960 and 991 allows local users to gain privileges via a malformed DLL file.... Read more
Affected Products : device_type_manager- EPSS Score: %0.05
- Published: Mar. 14, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2014-7885
Multiple unspecified vulnerabilities in HP ArcSight Enterprise Security Manager (ESM) before 6.8c have unknown impact and remote attack vectors.... Read more
- EPSS Score: %0.74
- Published: Mar. 14, 2015
- Modified: Apr. 12, 2025
-
9.0
HIGHCVE-2014-7884
Multiple unspecified vulnerabilities in HP ArcSight Logger before 6.0P1 have unknown impact and remote authenticated attack vectors.... Read more
Affected Products : arcsight_logger- EPSS Score: %23.19
- Published: Mar. 14, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2014-5409
The 17046 Ethernet card before 94450214LFMT100SEM-L.R3-CL for the GE Digital Energy Hydran M2 does not properly generate random values for TCP Initial Sequence Numbers (ISNs), which makes it easier for remote attackers to spoof packets by predicting these... Read more
Affected Products : hydran_m2- EPSS Score: %0.49
- Published: Mar. 14, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-0342
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability... Read more
- EPSS Score: %5.19
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-0341
Use-after-free vulnerability in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability... Read more
- EPSS Score: %5.19
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-0340
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass intended file-upload restrictions via unspecified vectors.... Read more
- EPSS Score: %1.22
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-0339
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a differ... Read more
- EPSS Score: %9.33
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-0338
Integer overflow in Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code via unspecified vectors.... Read more
- EPSS Score: %4.01
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-0337
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows remote attackers to bypass the Same Origin Policy via unspecified vectors.... Read more
- EPSS Score: %1.22
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2015-0336
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-... Read more
- EPSS Score: %91.74
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-0335
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a differ... Read more
- EPSS Score: %9.33
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
9.3
HIGHCVE-2015-0334
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion," a different vulnerability than CVE-... Read more
- EPSS Score: %5.02
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-0333
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a differ... Read more
- EPSS Score: %9.33
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
10.0
HIGHCVE-2015-0332
Adobe Flash Player before 13.0.0.277 and 14.x through 17.x before 17.0.0.134 on Windows and OS X and before 11.2.202.451 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a differ... Read more
- EPSS Score: %8.65
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
5.0
MEDIUMCVE-2015-2091
The authentication hook (mgs_hook_authz) in mod-gnutls 0.5.10 and earlier does not validate client certificates when "GnuTLSClientVerify require" is set, which allows remote attackers to spoof clients via a crafted certificate.... Read more
Affected Products : mod-gnutls- EPSS Score: %0.71
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
6.8
MEDIUMCVE-2015-1782
The kex_agree_methods function in libssh2 before 1.5.0 allows remote servers to cause a denial of service (crash) or have other unspecified impact via crafted length values in an SSH_MSG_KEXINIT packet.... Read more
- EPSS Score: %1.53
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025
-
6.9
MEDIUMCVE-2015-2264
Multiple untrusted search path vulnerabilities in (1) EQATEC.Analytics.Monitor.Win32_vc100.dll and (2) EQATEC.Analytics.Monitor.Win32_vc100-x64.dll in Telerik Analytics Monitor Library before 3.2.125 allow local users to gain privileges via a Trojan horse... Read more
Affected Products : analytics_monitor_library- EPSS Score: %0.06
- Published: Mar. 13, 2015
- Modified: Apr. 12, 2025