| | CVE-2015-6142 |  Microsoft | critical | 9.3 | 23.5%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6141 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6140 | Microsoft | critical | 9.3 | 14.8%
| | Microsoft Internet Explorer 11 and Microsoft Edge allow remote attackers to execute arbitrary code o… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6139 | Microsoft | critical | 9.3 | 16.1%
| | Microsoft Internet Explorer 11 and Microsoft Edge mishandle content types, which allows remote attac… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6138 | Microsoft | medium | 4.3 | 19.8%
| | Microsoft Internet Explorer 8 through 11 mishandles HTML attributes in HTTP responses, which allows … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6136 | Microsoft | critical | 9.3 | 44.6%
| | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Expl… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6135 | Microsoft | medium | 5.0 | 8.5%
| | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Expl… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6134 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6124 | Microsoft | critical | 9.3 | 37.5%
| | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, and Office… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6122 | Microsoft | critical | 9.3 | 37.5%
| | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Office Compatibility Pack SP3, and Exc… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6118 | Microsoft | critical | 9.3 | 34.3%
| | Microsoft Office 2007 SP3 and Office 2010 SP2 allow remote attackers to execute arbitrary code via a… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6114 | Microsoft | medium | 4.3 | 17.5%
| | Microsoft Silverlight 5 before 5.1.41105.00 allows remote attackers to bypass the ASLR protection me… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6108 | Microsoft | critical | 9.3 | 44.4%
| | The Windows font library in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6107 | Microsoft | critical | 9.3 | 49.4%
| | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6106 | Microsoft | critical | 9.3 | 44.8%
| | The Windows font library in Microsoft Windows Vista SP2, Windows Server 2008 SP2, Office 2007 SP3, O… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6083 | Microsoft | critical | 9.3 | 16.5%
| | Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause … | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-6040 | Microsoft | critical | 9.3 | 37.5%
| | Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel for Mac 2011, Excel 2016 for Mac, Office Compatibili… | Dec 9, 2015 | May 6, 2026 |
| | CVE-2015-3628 |  F5 | critical | 9.0 | 75.2%
| | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before … | Dec 7, 2015 | May 6, 2026 |
| | CVE-2015-3196 |  HPE | medium | 4.3 | 7.4%
| | ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when use… | Dec 6, 2015 | May 6, 2026 |
| | CVE-2015-6388 |  Cisco | medium | 5.0 | 0.3%
| | Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct se… | Dec 5, 2015 | May 6, 2026 |
| | CVE-2015-6387 | Cisco | medium | 4.3 | 0.4%
| | Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.… | Dec 5, 2015 | May 6, 2026 |
| | CVE-2015-6384 | Cisco | medium | 4.3 | 0.2%
| | The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom applicat… | Dec 5, 2015 | May 6, 2026 |
| | CVE-2015-6390 | Cisco | medium | 4.3 | 0.4%
| | Cross-site scripting (XSS) vulnerability in the management interface in Cisco Unity Connection 9.1(1… | Dec 3, 2015 | May 6, 2026 |
| | CVE-2015-8024 |  Trellix | critical | 9.3 | 1.5%
| | McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enter… | Dec 2, 2015 | May 6, 2026 |
| | CVE-2015-6386 | Cisco | medium | 5.0 | 0.4%
| | The passthrough FTP feature on Cisco Web Security Appliance (WSA) devices with software 8.0.7-142 an… | Dec 1, 2015 | May 6, 2026 |
| | CVE-2015-6857 | HPE | high | 7.2 | 2.3%
| | Unspecified vulnerability in Virtual Table Server (VTS) in HP LoadRunner 11.52, 12.00, 12.01, 12.02,… | Nov 26, 2015 | May 6, 2026 |
| | CVE-2015-6382 | Cisco | medium | 5.0 | 0.5%
| | Cisco ASR 5000 devices with software 16.0(900) allow remote attackers to cause a denial of service (… | Nov 26, 2015 | May 6, 2026 |
| | CVE-2015-6377 | Cisco | high | 7.8 | 3.6%
| | Cisco Virtual Topology System (VTS) 2.0(0) and 2.0(1) allows remote attackers to cause a denial of s… | Nov 24, 2015 | May 6, 2026 |
| | CVE-2015-8320 |  Apache | medium | 5.0 | 1.9%
| | Apache Cordova-Android before 3.7.0 improperly generates random values for BridgeSecret data, which … | Nov 23, 2015 | May 6, 2026 |
| | CVE-2015-5256 | Apache | medium | 4.3 | 0.7%
| | Apache Cordova-Android before 4.1.0, when an application relies on a remote server, improperly imple… | Nov 23, 2015 | May 6, 2026 |
| | CVE-2015-5451 | HPE | medium | 6.8 | 0.1%
| | Cross-site request forgery (CSRF) vulnerability in HP Operations Orchestration Central 10.x before 1… | Nov 23, 2015 | May 6, 2026 |
| | CVE-2015-6376 | Cisco | medium | 6.8 | 0.1%
| | Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server (VC… | Nov 21, 2015 | May 6, 2026 |
| | CVE-2015-5255 | HPE | medium | 4.3 | 2.9%
| | Adobe BlazeDS, as used in ColdFusion 10 before Update 18 and 11 before Update 7 and LiveCycle Data S… | Nov 18, 2015 | May 6, 2026 |
| | CVE-2015-7942 | HPE | medium | 6.8 | 1.5%
| | The xmlParseConditionalSections function in parser.c in libxml2 does not properly skip intermediary … | Nov 18, 2015 | May 6, 2026 |
| | CVE-2015-5253 | Apache | medium | 4.0 | 0.3%
| | The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allo… | Nov 18, 2015 | May 6, 2026 |
| | CVE-2015-6357 | Cisco | medium | 6.8 | 5.9%
| | The rule-update feature in Cisco FireSIGHT Management Center (MC) 5.2 through 5.4.0.1 does not verif… | Nov 18, 2015 | May 6, 2026 |
| | CVE-2015-6330 | Cisco | medium | 6.8 | 0.1%
| | Cross-site request forgery (CSRF) vulnerability in Cisco Prime Collaboration Assurance 10.5(1) and 1… | Nov 18, 2015 | May 6, 2026 |
| | CVE-2015-6364 | Cisco | medium | 5.0 | 0.3%
| | Cisco Content Delivery System Manager Software 3.2 on Videoscape Distribution Suite Service Manager … | Nov 14, 2015 | May 6, 2026 |
| | CVE-2015-6045 | Microsoft | critical | 9.3 | 34.4%
| | Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11… | Nov 13, 2015 | May 6, 2026 |
| | CVE-2015-6363 | Cisco | low | 3.5 | 0.2%
| | Multiple cross-site scripting (XSS) vulnerabilities in the web framework in Cisco FireSIGHT Manageme… | Nov 12, 2015 | May 6, 2026 |
| | CVE-2015-5441 | HPE | medium | 4.3 | 0.7%
| | Multiple cross-site scripting (XSS) vulnerabilities in HP ArcSight Management Center before 2.1 and … | Nov 12, 2015 | May 6, 2026 |
| | CVE-2015-6123 | Microsoft | medium | 4.3 | 10.4%
| | Cross-site scripting (XSS) vulnerability in Microsoft Excel for Mac 2011 and Excel 2016 for Mac allo… | Nov 11, 2015 | May 6, 2026 |
| | CVE-2015-6115 | Microsoft | medium | 4.3 | 14.9%
| | Microsoft .NET Framework 2.0 SP2, 3.5, and 3.5.1 allows remote attackers to bypass the ASLR protecti… | Nov 11, 2015 | May 6, 2026 |
| | CVE-2015-6099 | Microsoft | medium | 4.3 | 28.6%
| | Cross-site scripting (XSS) vulnerability in ASP.NET in Microsoft .NET Framework 4, 4.5, 4.5.1, 4.5.2… | Nov 11, 2015 | May 6, 2026 |
| | CVE-2015-6096 | Microsoft | medium | 4.3 | 27.9%
| | The XML DTD parser in Microsoft .NET Framework 2.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 al… | Nov 11, 2015 | May 6, 2026 |
| | CVE-2015-6094 | Microsoft | critical | 9.3 | 40.9%
| | Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Excel for Mac 2011, Excel 2… | Nov 11, 2015 | May 6, 2026 |
| | CVE-2015-6093 | Microsoft | critical | 9.3 | 45.2%
| | Microsoft Office 2007 SP3, Office 2010 SP2, Office 2013 SP1, Office 2013 RT SP1, Office 2016, Word A… | Nov 11, 2015 | May 6, 2026 |
| | CVE-2015-6092 | Microsoft | critical | 9.3 | 31.3%
| | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016,… | Nov 11, 2015 | May 6, 2026 |
| | CVE-2015-6091 | Microsoft | critical | 9.3 | 31.3%
| | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word 2016,… | Nov 11, 2015 | May 6, 2026 |
| | CVE-2015-6089 | Microsoft | critical | 9.3 | 28.1%
| | The Microsoft (1) VBScript and (2) JScript engines, as used in Internet Explorer 8 through 11, allow… | Nov 11, 2015 | May 6, 2026 |