deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-1644
Published: 2015-04-14
Description: Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 do not properly constrain impersonation levels, which allows local users to gain privileges via a crafted application, aka "Windows MS-DOS Device Name Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securityfocus.com/bid/73998; http://www.securitytracker.com/id/1032113; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-038
CVE: CVE-2015-1645
Published: 2015-04-14
Description: Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7 SP1 allow remote attackers to execute arbitrary code via a crafted Enhanced Metafile (EMF) image, aka "EMF Processing Remote Code Execution Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://packetstormsecurity.com/files/131457/Microsoft-Windows-GDI-MRSETDIBITSTODEVICE-bPlay-EMF-Parsing-Memory-Corruption.html; http://www.securityfocus.com/archive/1/535272/100/0/threaded; http://www.securitytracker.com/id/1032110
CVE: CVE-2015-1646
Published: 2015-04-14
Description: Microsoft XML Core Services (aka MSXML) 3.0 allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted DTD, aka "MSXML3 Same Origin Policy SFB Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.securitytracker.com/id/1032114; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-039; http://www.securitytracker.com/id/1032114
CVE: CVE-2015-1647
Published: 2015-04-14
Description: Virtual Machine Manager (VMM) in Hyper-V in Microsoft Windows 8.1 and Windows Server 2012 R2 allows guest OS users to cause a denial of service (VMM functionality loss) via a crafted application, aka "Windows Hyper-V DoS Vulnerability."
CVSS Score: 2.1 (LOW)
CWE: CWE-20
References: http://www.securitytracker.com/id/1032117; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-042; http://www.securitytracker.com/id/1032117
CVE: CVE-2015-1648
Published: 2015-04-14
Description: ASP.NET in Microsoft .NET Framework 1.1 SP1, 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2, when the customErrors configuration is disabled, allows remote attackers to obtain sensitive configuration-file information via a crafted request, aka "ASP.NET Information Disclosure Vulnerability."
CVSS Score: 2.6 (LOW)
CWE: CWE-19
References: http://www.securitytracker.com/id/1032116; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-041; http://www.securitytracker.com/id/1032116
CVE: CVE-2015-1649
Published: 2015-04-14
Description: Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2, and Office Web Apps Server 2010 SP2 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.securitytracker.com/id/1032104; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033; http://www.securitytracker.com/id/1032104
CVE: CVE-2015-1650
Published: 2015-04-14
Description: Use-after-free vulnerability in Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word Viewer, Office Compatibility Pack SP3, Word Automation Services on SharePoint Server 2010 SP2 and 2013 SP1, and Office Web Apps Server 2010 SP2 and 2013 SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.securitytracker.com/id/1032104; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033; http://www.securitytracker.com/id/1032104
CVE: CVE-2015-1651
Published: 2015-04-14
Description: Use-after-free vulnerability in Microsoft Word 2007 SP3, Word Viewer, and Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Office Component Use After Free Vulnerability."
CVSS Score: 9.3 (HIGH)
References: http://www.securitytracker.com/id/1032104; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-033; http://www.securitytracker.com/id/1032104
CVE: CVE-2015-1652
Published: 2015-04-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1666.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/73990; http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE: CVE-2015-1653
Published: 2015-04-14
Description: Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Foundation 2013 SP1 and SharePoint Server 2013 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted request, aka "Microsoft SharePoint XSS Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1032111; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-036; http://www.securitytracker.com/id/1032111
CVE: CVE-2015-1657
Published: 2015-04-14
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032; http://www.securitytracker.com/id/1032108
CVE: CVE-2015-1659
Published: 2015-04-14
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1662 and CVE-2015-1665.
CVSS Score: 9.3 (HIGH)
References: http://www.securityfocus.com/bid/73994; http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE: CVE-2015-1660
Published: 2015-04-14
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032; http://www.securitytracker.com/id/1032108
CVE: CVE-2015-1661
Published: 2015-04-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/74006; http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE: CVE-2015-1662
Published: 2015-04-14
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1659 and CVE-2015-1665.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032; http://www.securitytracker.com/id/1032108
CVE: CVE-2015-1665
Published: 2015-04-14
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1659 and CVE-2015-1662.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74000; http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE: CVE-2015-1666
Published: 2015-04-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1652.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032; http://www.securitytracker.com/id/1032108
CVE: CVE-2015-1667
Published: 2015-04-14
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032; http://www.securitytracker.com/id/1032108
CVE: CVE-2015-1668
Published: 2015-04-14
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.securityfocus.com/bid/74004; http://www.securitytracker.com/id/1032108; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-032
CVE: CVE-2015-0346
Published: 2015-04-14
Description: Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0359.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0347
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0348
Published: 2015-04-14
Description: Buffer overflow in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0349
Published: 2015-04-14
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0351, CVE-2015-0358, and CVE-2015-3039.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0350
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0351
Published: 2015-04-14
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0358, and CVE-2015-3039.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0352
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0353
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0354
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0355
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0356
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code by leveraging an unspecified "type confusion."
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0357
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-3040.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0358
Published: 2015-04-14
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-3039.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0359
Published: 2015-04-14
Description: Double free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0346.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-0360
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-3038, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-2112
Published: 2015-04-14
Description: Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote authenticated users to execute arbitrary code via unknown vectors.
CVSS Score: 9.0 (HIGH)
References: http://www.securityfocus.com/bid/73961; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04629160; http://www.securityfocus.com/bid/73961
CVE: CVE-2015-2113
Published: 2015-04-14
Description: Unspecified vulnerability in HP Easy Deploy, as distributed standalone and in HP Easy Tools before 3.0.1.1650, on HP Thin Client t5540, t5740, and t5740e devices and HP Flexible Thin Client t510, t520, t610, t620, and t820 devices allows remote attackers to execute arbitrary code via unknown vectors.
CVSS Score: 10.0 (HIGH)
References: http://www.securityfocus.com/bid/73964; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04629160; http://www.securityfocus.com/bid/73964
CVE: CVE-2015-2114
Published: 2015-04-14
Description: HP Support Solution Framework before 11.51.0049 allows remote attackers to download an arbitrary program onto a client machine and execute this program via unspecified vectors.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-254
References: http://www.securityfocus.com/bid/74054; https://h20564.www2.hp.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c04634535; http://www.securityfocus.com/bid/74054
CVE: CVE-2015-3038
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3041, CVE-2015-3042, and CVE-2015-3043.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-3039
Published: 2015-04-14
Description: Use-after-free vulnerability in Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2015-0349, CVE-2015-0351, and CVE-2015-0358.
CVSS Score: 10.0 (HIGH)
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html
CVE: CVE-2015-3040
Published: 2015-04-14
Description: Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux does not properly restrict discovery of memory addresses, which allows attackers to bypass the ASLR protection mechanism via unspecified vectors, a different vulnerability than CVE-2015-0357.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00010.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00011.html; http://lists.opensuse.org/opensuse-security-announce/2015-04/msg00012.html