| | CVE-2015-3270 |  Apache | medium | 6.5 | 0.8%
| | Apache Ambari before 2.0.2 or 2.1.x before 2.1.1 allows remote authenticated users to gain administr… | Nov 2, 2015 | May 6, 2026 |
| | CVE-2015-3186 | Apache | low | 3.5 | 0.2%
| | Cross-site scripting (XSS) vulnerability in Apache Ambari before 2.1.0 allows remote authenticated c… | Nov 2, 2015 | May 6, 2026 |
| | CVE-2015-1775 | Apache | medium | 5.5 | 0.2%
| | Server-side request forgery (SSRF) vulnerability in the proxy endpoint (api/v1/proxy) in Apache Amba… | Nov 2, 2015 | May 6, 2026 |
| | CVE-2015-6354 |  Cisco | low | 3.5 | 0.2%
| | Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.4.1.… | Oct 31, 2015 | May 6, 2026 |
| | CVE-2015-6353 | Cisco | low | 3.5 | 0.2%
| | Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.3.1.… | Oct 31, 2015 | May 6, 2026 |
| | CVE-2015-6352 | Cisco | medium | 4.3 | 0.3%
| | Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pat… | Oct 30, 2015 | May 6, 2026 |
| | CVE-2015-6351 | Cisco | medium | 5.0 | 0.5%
| | Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices with software 19.1.0.61559 and 19… | Oct 30, 2015 | May 6, 2026 |
| | CVE-2015-6350 | Cisco | medium | 6.5 | 0.3%
| | SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote a… | Oct 30, 2015 | May 6, 2026 |
| | CVE-2015-6349 | Cisco | medium | 4.3 | 0.3%
| | Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco Secure… | Oct 30, 2015 | May 6, 2026 |
| | CVE-2015-6348 | Cisco | medium | 4.0 | 0.2%
| | The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (AC… | Oct 30, 2015 | May 6, 2026 |
| | CVE-2015-6347 | Cisco | medium | 4.0 | 0.1%
| | The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticate… | Oct 30, 2015 | May 6, 2026 |
| | CVE-2015-6346 | Cisco | medium | 4.3 | 0.3%
| | Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15) allow… | Oct 30, 2015 | May 6, 2026 |
| | CVE-2015-6345 | Cisco | medium | 6.5 | 0.3%
| | SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0… | Oct 30, 2015 | May 6, 2026 |
| | CVE-2015-5262 | Apache | medium | 4.3 | 1.6%
| | http/conn/ssl/SSLConnectionSocketFactory.java in Apache HttpComponents HttpClient before 4.3.6 ignor… | Oct 27, 2015 | May 6, 2026 |
| | CVE-2015-6340 | Cisco | medium | 5.0 | 0.5%
| | The Proxy Mobile IPv6 (PMIPv6) component in the CDMA implementation on Cisco ASR 5000 devices with s… | Oct 27, 2015 | May 6, 2026 |
| | CVE-2015-6335 | Cisco | critical | 9.0 | 0.3%
| | The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMwar… | Oct 25, 2015 | May 6, 2026 |
| | CVE-2015-5444 |  HPE | medium | 4.3 | 0.6%
| | Multiple cross-site scripting (XSS) vulnerabilities in HP Smart Profile Server Data Analytics Layer … | Oct 18, 2015 | May 6, 2026 |
| | CVE-2015-5742 |  Veeam | low | 2.1 | 0.1%
| | VeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0 update 3 stores local administrator cre… | Oct 16, 2015 | May 6, 2026 |
| | CVE-2015-6059 |  Microsoft | medium | 4.3 | 22.3%
| | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Expl… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6058 | Microsoft | medium | 4.3 | 14.7%
| | Microsoft Edge mishandles HTML attributes in HTTP responses, which allows remote attackers to bypass… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6057 | Microsoft | medium | 5.0 | 18.5%
| | Microsoft Edge allows remote attackers to obtain sensitive information from process memory via a cra… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6056 | Microsoft | critical | 9.3 | 30.1%
| | The (1) JScript and (2) VBScript engines in Microsoft Internet Explorer 9 through 11 allow remote at… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6055 | Microsoft | critical | 9.3 | 44.4%
| | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Expl… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6053 | Microsoft | medium | 5.0 | 23.2%
| | Microsoft Internet Explorer 11 allows remote attackers to obtain sensitive information from process … | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6052 | Microsoft | medium | 4.3 | 18.8%
| | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Expl… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6051 | Microsoft | medium | 4.3 | 9.8%
| | Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web s… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6050 | Microsoft | critical | 9.3 | 30.1%
| | Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial o… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6049 | Microsoft | critical | 9.3 | 24.5%
| | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause … | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6048 | Microsoft | critical | 9.3 | 25.3%
| | Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause … | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6047 | Microsoft | medium | 6.8 | 11.0%
| | The broker EditWith feature in Microsoft Internet Explorer 8 through 11 allows remote attackers to b… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6046 | Microsoft | medium | 4.3 | 18.5%
| | Microsoft Internet Explorer 9 through 11 allows remote attackers to obtain sensitive information fro… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6044 | Microsoft | medium | 6.8 | 14.1%
| | Microsoft Internet Explorer 8 allows remote attackers to gain privileges via a crafted web site, as … | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6042 | Microsoft | critical | 9.3 | 42.9%
| | Use-after-free vulnerability in the CWindow object implementation in Microsoft Internet Explorer 11 … | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6039 | Microsoft | low | 3.5 | 6.6%
| | Cross-site scripting (XSS) vulnerability in Microsoft SharePoint Server 2013 SP1 and SharePoint Foun… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6037 | Microsoft | low | 3.5 | 10.2%
| | Cross-site scripting (XSS) vulnerability in Microsoft Excel Services on SharePoint Server 2010 SP2 a… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-2558 | Microsoft | critical | 9.3 | 43.0%
| | Use-after-free vulnerability in Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-2557 | Microsoft | critical | 9.3 | 34.6%
| | Buffer overflow in Microsoft Visio 2007 SP3 and 2010 SP2 allows remote attackers to execute arbitrar… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-2556 | Microsoft | medium | 4.3 | 29.6%
| | The InfoPath Forms Services component in Microsoft SharePoint Server 2007 SP3 and 2010 SP2 misparses… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-2555 | Microsoft | critical | 9.3 | 43.0%
| | Use-after-free vulnerability in Microsoft Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-2482 | Microsoft | critical | 9.3 | 64.1%
| | The Microsoft (1) VBScript 5.7 and 5.8 and (2) JScript 5.7 and 5.8 engines, as used in Internet Expl… | Oct 14, 2015 | May 6, 2026 |
| | CVE-2015-6332 | Cisco | medium | 5.0 | 0.5%
| | Cisco Prime Infrastructure 2.2 allows remote attackers to cause a denial of service (daemon hang) by… | Oct 13, 2015 | May 6, 2026 |
| | CVE-2015-6328 | Cisco | medium | 6.8 | 0.2%
| | The web framework in Cisco Prime Collaboration Assurance (PCA) 10.5(1) allows remote authenticated u… | Oct 13, 2015 | May 6, 2026 |
| | CVE-2015-6331 | Cisco | medium | 6.5 | 0.3%
| | SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allo… | Oct 12, 2015 | May 6, 2026 |
| | CVE-2015-6329 | Cisco | medium | 6.5 | 0.3%
| | SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote au… | Oct 12, 2015 | May 6, 2026 |
| | CVE-2015-6322 | Cisco | medium | 6.6 | 0.1%
| | The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local user… | Oct 12, 2015 | May 6, 2026 |
| | CVE-2015-6318 | Cisco | medium | 6.9 | 0.1%
| | Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 and X8.5.2 allows local users … | Oct 12, 2015 | May 6, 2026 |
| | CVE-2015-5443 | HPE | medium | 4.0 | 0.2%
| | HP 3PAR Service Processor SP 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC, and SP 4.3.0-GA-24 (… | Oct 12, 2015 | May 6, 2026 |
| | CVE-2015-4325 | Cisco | medium | 6.9 | 0.1%
| | The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Express… | Oct 12, 2015 | May 6, 2026 |
| | CVE-2015-4265 | Cisco | medium | 4.9 | 0.1%
| | Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local users t… | Oct 12, 2015 | May 6, 2026 |
| | CVE-2015-2342 |  VMware | critical | 10.0 | 92.0%
| | The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 … | Oct 12, 2015 | May 6, 2026 |