deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2015-2385
Published: 2015-07-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2390, CVE-2015-2397, CVE-2015-2404, CVE-2015-2406, and CVE-2015-2422.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2388
Published: 2015-07-14
Description: Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1738.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2389
Published: 2015-07-14
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1733 and CVE-2015-2411.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2390
Published: 2015-07-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2397, CVE-2015-2404, CVE-2015-2406, and CVE-2015-2422.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2391
Published: 2015-07-14
Description: Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2397
Published: 2015-07-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2390, CVE-2015-2404, CVE-2015-2406, and CVE-2015-2422.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2398
Published: 2015-07-14
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to bypass the XSS filter via a crafted attribute of an element in an HTML document, aka "Internet Explorer XSS Filter Bypass Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2401
Published: 2015-07-14
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1767 and CVE-2015-2408.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2402
Published: 2015-07-14
Description: Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of Privilege Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-264
References: http://www.securityfocus.com/bid/75677; http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065
CVE: CVE-2015-2403
Published: 2015-07-14
Description: Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2404
Published: 2015-07-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2390, CVE-2015-2397, CVE-2015-2406, and CVE-2015-2422.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2406
Published: 2015-07-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2390, CVE-2015-2397, CVE-2015-2404, and CVE-2015-2422.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2408
Published: 2015-07-14
Description: Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1767 and CVE-2015-2401.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; http://www.zerodayinitiative.com/advisories/ZDI-15-458; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065
CVE: CVE-2015-2410
Published: 2015-07-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted stylesheet, aka "Internet Explorer Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2411
Published: 2015-07-14
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-1733 and CVE-2015-2389.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2412
Published: 2015-07-14
Description: Microsoft Internet Explorer 10 and 11 allows remote attackers to read arbitrary local files via a crafted pathname, aka "Internet Explorer Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20, CWE-200
References: http://www.securityfocus.com/bid/75687; http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065
CVE: CVE-2015-2413
Published: 2015-07-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to determine the existence of local files via a crafted module-resource request, aka "Internet Explorer Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2414
Published: 2015-07-14
Description: Microsoft Internet Explorer 8 through 11 allows remote attackers to obtain sensitive browsing-history information via vectors related to image caching, aka "Internet Explorer Information Disclosure Vulnerability."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2415
Published: 2015-07-14
Description: Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, and Office Compatibility Pack SP3 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032899; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070; http://www.securitytracker.com/id/1032899
CVE: CVE-2015-2419
Published: 2015-07-14
Description: JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "JScript9 Memory Corruption Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2421
Published: 2015-07-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer ASLR Bypass."
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2422
Published: 2015-07-14
Description: Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2385, CVE-2015-2390, CVE-2015-2397, CVE-2015-2404, and CVE-2015-2406.
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2424
Published: 2015-07-14
Description: Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, and PowerPoint 2013 RT SP1 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Office document, aka "Microsoft Office Memory Corruption Vulnerability."
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securitytracker.com/id/1032899; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-070; http://www.securitytracker.com/id/1032899
CVE: CVE-2015-2425
Published: 2015-07-14
Description: Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2015-2383 and CVE-2015-2384.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securitytracker.com/id/1032894; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-065; http://www.securitytracker.com/id/1032894
CVE: CVE-2015-2363
Published: 2015-07-14
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012, and Windows RT allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1032904; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073; http://www.securitytracker.com/id/1032904
CVE: CVE-2015-2364
Published: 2015-07-14
Description: The graphics component in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application that leverages an incorrect bitmap conversion, aka "Graphics Component EOP Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1032902; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-072; http://www.securitytracker.com/id/1032902
CVE: CVE-2015-2365
Published: 2015-07-14
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1032904; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073; https://www.exploit-db.com/exploits/38267/
CVE: CVE-2015-2366
Published: 2015-07-14
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows 7 SP1, Windows Server 2008 R2 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "Win32k Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1032904; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073; https://www.exploit-db.com/exploits/38266/
CVE: CVE-2015-2367
Published: 2015-07-14
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from uninitialized kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability."
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032904; http://www.zerodayinitiative.com/advisories/ZDI-15-536; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073
CVE: CVE-2015-2370
Published: 2015-07-14
Description: The authentication implementation in the RPC subsystem in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 does not prevent DCE/RPC connection reflection, which allows local users to gain privileges via a crafted application, aka "Windows RPC Elevation of Privilege Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-264
References: http://www.securitytracker.com/id/1032907; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-076; https://www.exploit-db.com/exploits/37768/
CVE: CVE-2015-2371
Published: 2015-07-14
Description: The Windows Installer service in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a custom action script associated with a .msi package, aka "Windows Installer EoP Vulnerability."
CVSS Score: 6.9 (MEDIUM)
CWE: CWE-264
References: http://www.securitytracker.com/id/1032905; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-074; http://www.securitytracker.com/id/1032905
CVE: CVE-2015-2381
Published: 2015-07-14
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2382.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032904; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073; http://www.securitytracker.com/id/1032904
CVE: CVE-2015-2382
Published: 2015-07-14
Description: win32k.sys in the kernel-mode drivers in Microsoft Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to obtain sensitive information from kernel memory via a crafted application, aka "Win32k Information Disclosure Vulnerability," a different vulnerability than CVE-2015-2381.
CVSS Score: 2.1 (LOW)
CWE: CWE-200
References: http://www.securitytracker.com/id/1032904; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-073; http://www.securitytracker.com/id/1032904
CVE: CVE-2015-2387
Published: 2015-07-14
Description: ATMFD.DLL in the Adobe Type Manager Font Driver in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows local users to gain privileges via a crafted application, aka "ATMFD.DLL Memory Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-787, CWE-787
References: http://www.securityfocus.com/bid/75587; http://www.securitytracker.com/id/1032908; http://www.us-cert.gov/ncas/alerts/TA15-195A
CVE: CVE-2015-2416
Published: 2015-07-14
Description: OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via crafted input, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "OLE Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2417.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1032906; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-075; http://www.securitytracker.com/id/1032906
CVE: CVE-2015-2417
Published: 2015-07-14
Description: OLE in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allows remote attackers to gain privileges via crafted input, as demonstrated by a transition from Low Integrity to Medium Integrity, aka "OLE Elevation of Privilege Vulnerability," a different vulnerability than CVE-2015-2416.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-20
References: http://www.securitytracker.com/id/1032906; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-075; http://www.securitytracker.com/id/1032906
CVE: CVE-2015-1761
Published: 2015-07-14
Description: Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 uses an incorrect class during casts of unspecified pointers, which allows remote authenticated users to gain privileges by leveraging certain write access, aka "SQL Server Elevation of Privilege Vulnerability."
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-284
References: http://www.securitytracker.com/id/1032893; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058; https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05382740
CVE: CVE-2015-1762
Published: 2015-07-14
Description: Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014, when transactional replication is configured, does not prevent use of uninitialized memory in unspecified function calls, which allows remote authenticated users to execute arbitrary code by leveraging certain permissions and making a crafted query, as demonstrated by the VIEW SERVER STATE permission, aka "SQL Server Remote Code Execution Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-74
References: http://www.securitytracker.com/id/1032893; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058; http://www.securitytracker.com/id/1032893
CVE: CVE-2015-1763
Published: 2015-07-14
Description: Microsoft SQL Server 2008 SP3 and SP4, 2008 R2 SP2 and SP3, 2012 SP1 and SP2, and 2014 does not prevent use of uninitialized memory in certain attempts to execute virtual functions, which allows remote authenticated users to execute arbitrary code via a crafted query, aka "SQL Server Remote Code Execution Vulnerability."
CVSS Score: 8.5 (HIGH)
CWE: CWE-284
References: http://www.securitytracker.com/id/1032893; https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-058; http://www.securitytracker.com/id/1032893
CVE: CVE-2015-5120
Published: 2015-07-14
Description: Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5121.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032891; https://helpx.adobe.com/security/products/shockwave/apsb15-17.html; http://www.securitytracker.com/id/1032891
CVE: CVE-2015-5121
Published: 2015-07-14
Description: Adobe Shockwave Player before 12.1.9.159 allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2015-5120.
CVSS Score: 10.0 (HIGH)
CWE: CWE-119
References: http://www.securitytracker.com/id/1032891; https://helpx.adobe.com/security/products/shockwave/apsb15-17.html; http://www.securitytracker.com/id/1032891
CVE: CVE-2014-8450
Published: 2015-07-15
Description: Adobe Reader and Acrobat 10.x before 10.1.15 and 11.x before 11.0.12, Acrobat and Acrobat Reader DC Classic before 2[PII_REDACTED]0, and Acrobat and Acrobat Reader DC Continuous before 2[PII_REDACTED]2 on Windows and OS X allow attackers to bypass intended access restrictions and obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2015-4449, CVE-2015-4450, CVE-2015-5088, CVE-2015-5089, and CVE-2015-5092.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/75742; http://www.securitytracker.com/id/1032892; https://helpx.adobe.com/security/products/reader/apsb15-15.html