Browse CVEs

HIGH 9.3 CVE-2015-6092EPSS 15% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, Office Compatibility Pack SP3, and Word Viewer a… Office Mitigation only Fix from $1,9502015-11-11 HIGH 9.3 CVE-2015-6091EPSS 15% Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016, and Word Viewer allow remote attackers to execut… Office Mitigation only Fix from $1,9502015-11-11 HIGH 9.3 CVE-2015-6089EPSS 13% The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow remote attackers to execute arbitrary code or ca… Jscript Mitigation only Fix from $1,9502015-11-11 HIGH 9.3 CVE-2015-6078EPSS 17% Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory cor… Edge Mitigation only Fix from $1,9502015-11-11 HIGH 9.3 CVE-2015-6073EPSS 17% Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v… Edge Mitigation only Fix from $1,9502015-11-11 HIGH 9.3 CVE-2015-6064EPSS 20% Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corrup… Edge Mitigation only Fix from $1,9502015-11-11 HIGH 9.3 CVE-2015-6038EPSS 36% Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibility… Excel Mitigation only Fix from $1,9502015-11-11 MEDIUM 6.8 CVE-2015-5214EPSS 10% LibreOffice before 4.4.6 and 5.x before 5.0.1 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a denial of service (memory corrupt… Ubuntu Linux after 4.4.5 Fix from $1,6002015-11-10 HIGH 10.0 CVE-2015-8096 Integer overflow in Google Picasa 3.9.140 Build 239 and Build 248 allows remote attackers to execute arbitrary code via unspecified vectors related t… Picasa Mitigation only Fix from $1,9502015-11-09 MEDIUM 5.0 CVE-2015-7295 hw/virtio/virtio.c in the Virtual Network Device (virtio-net) support in QEMU, when big or mergeable receive buffers are not supported, allows remote… Fedora after 2.4.1 Fix from $1,6002015-11-09 HIGH 7.2 CVE-2015-5225 Buffer overflow in the vnc_refresh_server_surface function in the VNC display driver in QEMU before 2.4.0.1 allows guest users to cause a denial of s… Openstack after 2.4.0 Fix from $1,9502015-11-06 MEDIUM 6.8 CVE-2015-7696EPSS 7% Info-ZIP UnZip 6.0 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) or possibly execute arbit… Ubuntu Linux Mitigation only Fix from $1,6002015-11-06 HIGH 7.5 CVE-2015-7199 The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interpolate functions in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4… Firefox after 41.0.2 Fix from $1,9502015-11-05 HIGH 7.5 CVE-2015-7198 Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, allows remote at… Firefox after 41.0.2 Fix from $1,9502015-11-05 HIGH 7.5 CVE-2015-7194 Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to cause a denial of service (appl… Firefox after 41.0.2 Fix from $1,9502015-11-05 MEDIUM 6.8 CVE-2015-7189 Race condition in the JPEGEncoder function in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allows remote attackers to execute arbitra… Firefox after 41.0.2 Fix from $1,6002015-11-05 HIGH 7.5 CVE-2015-7183EPSS 7% Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape Portable Runtime (NSPR) in Mozilla Network Security Services (NSS) before 3.19.2… Firefox after 41.0.2 Fix from $1,9502015-11-05 CRITICAL 9.8 CVE-2015-7182EPSS 9% Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firef… Firefox after 41.0.2 Fix from $2,3002015-11-05 HIGH 7.5 CVE-2015-7181EPSS 8% The sec_asn1d_parse_leaf function in Mozilla Network Security Services (NSS) before 3.19.2.1 and 3.20.x before 3.20.1, as used in Firefox before 42.0… Firefox after 41.0.2 Fix from $1,9502015-11-05 HIGH 7.5 CVE-2015-4514 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 allow remote attackers to cause a denial of service (memory… Firefox after 41.0.2 Fix from $1,9502015-11-05 HIGH 7.5 CVE-2015-4513 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow remote attackers to … Firefox after 41.0.2 Fix from $1,9502015-11-05 MEDIUM 6.8 CVE-2015-7650 Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat and Acrobat Reader DC Classic before 2015.006.30094, and Acrobat and Ac… Acrobat 15.006.30094 / 15.009.20069+ Fix from $1,6002015-11-04 HIGH 10.0 CVE-2015-8073 mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corrupt… Android Mitigation only Fix from $1,9502015-11-03 HIGH 10.0 CVE-2015-8072 mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a den… Android Mitigation only Fix from $1,9502015-11-03 HIGH 10.0 CVE-2015-6610 libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corr… Android 5.1.1+ Fix from $1,9502015-11-03 HIGH 10.0 CVE-2015-6609 libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (mem… Android after 5.1.0 Fix from $1,9502015-11-03 HIGH 10.0 CVE-2015-6608 mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of servi… Android 5.1.1+ Fix from $1,9502015-11-03 MEDIUM 6.8 CVE-2015-8036 Heap-based buffer overflow in ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote SSL servers to cause a denial o… Debian Linux 1.3.14 / 2.1.2+ Fix from $1,6002015-11-02 MEDIUM 6.8 CVE-2015-6031 Buffer overflow in the IGDstartelt function in igd_desc_parse.c in the MiniUPnP client (aka MiniUPnPc) before 1.9.20150917 allows remote UPNP servers… Debian Linux after 1.9 Fix from $1,6002015-11-02 MEDIUM 6.8 CVE-2015-5291 Heap-based buffer overflow in PolarSSL 1.x before 1.2.17 and ARM mbed TLS (formerly PolarSSL) 1.3.x before 1.3.14 and 2.x before 2.1.2 allows remote … Debian Linux 1.2.17 / 1.3.14+ Fix from $1,6002015-11-02