| | CVE-2015-5312 |  HPE | high | 7.1 | 1.0%
| | The xmlStringLenDecodeEntities function in parser.c in libxml2 before 2.9.3 does not properly preven… | Dec 15, 2015 | May 6, 2026 |
| | CVE-2015-6411 |  Cisco | medium | 5.0 | 0.5%
| | Cisco FirePOWER Management Center 5.4.1.3, 6.0.0, and 6.0.1 provides verbose responses to requests f… | Dec 15, 2015 | May 6, 2026 |
| | CVE-2015-6404 | Cisco | medium | 4.0 | 0.2%
| | Cisco Hosted Collaboration Mediation Fulfillment 10.6(3) does not use RBAC, which allows remote auth… | Dec 15, 2015 | May 6, 2026 |
| | CVE-2015-6399 | Cisco | medium | 6.8 | 0.7%
| | The Supervisor 1.0.0.0 and 1.0.0.1 in Cisco Integrated Management Controller (IMC) before 2.0(9) all… | Dec 15, 2015 | May 6, 2026 |
| | CVE-2015-4206 | Cisco | medium | 4.3 | 0.9%
| | Cisco Unified Communications Manager (UCM) 8.0 through 8.6 allows remote attackers to bypass an XSS … | Dec 15, 2015 | May 6, 2026 |
| | CVE-2015-6422 | Cisco | medium | 4.0 | 0.5%
| | The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows r… | Dec 14, 2015 | May 6, 2026 |
| | CVE-2015-6416 | Cisco | medium | 4.3 | 0.3%
| | Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and Unified Web … | Dec 14, 2015 | May 6, 2026 |
| | CVE-2015-6410 | Cisco | medium | 4.0 | 0.2%
| | The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager m… | Dec 14, 2015 | May 6, 2026 |
| | CVE-2015-6378 | Cisco | medium | 6.8 | 0.1%
| | Cross-site request forgery (CSRF) vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remo… | Dec 14, 2015 | May 6, 2026 |
| | CVE-2015-6418 | Cisco | medium | 4.3 | 0.4%
| | The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2… | Dec 13, 2015 | May 6, 2026 |
| | CVE-2015-6414 | Cisco | low | 2.1 | 0.0%
| | Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across differe… | Dec 13, 2015 | May 6, 2026 |
| | CVE-2015-6413 | Cisco | medium | 4.0 | 0.2%
| | Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated user… | Dec 13, 2015 | May 6, 2026 |
| | CVE-2015-6407 | Cisco | medium | 4.0 | 0.2%
| | Cisco Emergency Responder 10.5(3.10000.9) allows remote attackers to upload files to arbitrary locat… | Dec 13, 2015 | May 6, 2026 |
| | CVE-2015-6406 | Cisco | medium | 4.0 | 0.4%
| | Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) all… | Dec 13, 2015 | May 6, 2026 |
| | CVE-2015-6405 | Cisco | medium | 6.8 | 0.1%
| | Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) al… | Dec 13, 2015 | May 6, 2026 |
| | CVE-2015-6400 | Cisco | medium | 4.3 | 0.3%
| | Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 10.5(1a) allow remo… | Dec 13, 2015 | May 6, 2026 |
| | CVE-2015-6389 | Cisco | critical | 9.0 | 0.6%
| | Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote … | Dec 13, 2015 | May 6, 2026 |
| | CVE-2015-6419 | Cisco | medium | 6.8 | 0.2%
| | Cisco FireSIGHT Management Center with software 4.10.3, 5.2.0, 5.3.0, 5.3.1, and 5.4.0 allows remote… | Dec 12, 2015 | May 6, 2026 |
| | CVE-2015-6408 | Cisco | medium | 6.8 | 0.1%
| | Cross-site request forgery (CSRF) vulnerability in Cisco Unity Connection 11.5(0.98) allows remote a… | Dec 12, 2015 | May 6, 2026 |
| | CVE-2015-6417 | Cisco | medium | 6.5 | 0.1%
| | Cisco Videoscape Distribution Suite Service Manager (VDS-SM) 3.4.0 and earlier does not always use R… | Dec 12, 2015 | May 6, 2026 |
| | CVE-2015-6395 | Cisco | medium | 6.5 | 0.4%
| | Cisco Prime Service Catalog 10.0, 10.0(R2), 10.1, and 11.0 does not properly restrict access to web … | Dec 12, 2015 | May 6, 2026 |
| | CVE-2015-6177 |  Microsoft | critical | 9.3 | 37.5%
| | Microsoft Excel 2007 SP3, Office Compatibility Pack SP3, and Excel Viewer allow remote attackers to … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6176 | Microsoft | medium | 4.3 | 4.3%
| | Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6172 | Microsoft | critical | 9.3 | 32.8%
| | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2016, Word 2013 RT SP1,… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6170 | Microsoft | medium | 6.8 | 14.4%
| | Microsoft Edge allows remote attackers to gain privileges via a crafted web site, aka "Microsoft Bro… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6169 | Microsoft | medium | 4.3 | 10.8%
| | Microsoft Edge misparses HTTP responses, which allows remote attackers to redirect users to arbitrar… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6168 | Microsoft | critical | 9.3 | 32.5%
| | Microsoft Edge allows remote attackers to execute arbitrary code or cause a denial of service (memor… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6166 | Microsoft | critical | 9.3 | 20.5%
| | Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to execute arbitrary code or cau… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6165 | Microsoft | medium | 4.3 | 17.5%
| | Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection me… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6164 | Microsoft | medium | 6.8 | 14.6%
| | Microsoft Internet Explorer 9 through 11 improperly implements a cross-site scripting (XSS) protecti… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6162 | Microsoft | critical | 9.3 | 28.1%
| | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6161 | Microsoft | medium | 4.3 | 10.0%
| | Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to bypass the ASL… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6160 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6159 | Microsoft | critical | 9.3 | 18.9%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6158 | Microsoft | critical | 9.3 | 16.3%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6157 | Microsoft | medium | 4.3 | 22.3%
| | Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6156 | Microsoft | critical | 9.3 | 26.0%
| | Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6155 | Microsoft | critical | 9.3 | 16.3%
| | Microsoft Internet Explorer 10 and 11 and Microsoft Edge allow remote attackers to execute arbitrary… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6154 | Microsoft | critical | 9.3 | 14.8%
| | Microsoft Internet Explorer 7 through 11 and Microsoft Edge allow remote attackers to execute arbitr… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6153 | Microsoft | critical | 9.3 | 16.3%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6152 | Microsoft | critical | 9.3 | 14.8%
| | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6151 | Microsoft | critical | 9.3 | 16.3%
| | Microsoft Internet Explorer 8 through 11 and Microsoft Edge allow remote attackers to execute arbitr… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6150 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6149 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a den… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6148 | Microsoft | critical | 9.3 | 18.9%
| | Microsoft Internet Explorer 9 through 11 and Microsoft Edge allow remote attackers to execute arbitr… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6147 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a den… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6146 | Microsoft | critical | 9.3 | 26.0%
| | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a den… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6145 | Microsoft | critical | 9.3 | 26.0%
| | Microsoft Internet Explorer 7 and 8 allows remote attackers to execute arbitrary code or cause a den… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6144 | Microsoft | medium | 4.3 | 21.3%
| | Microsoft Internet Explorer 8 through 11 and Microsoft Edge mishandle HTML attributes in HTTP respon… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6143 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial o… | Dec 9, 2015 | May 6, 2026 |