# CVEs published 2015-02-11 65 CVEs were published on February 11, 2015: 0 critical, 0 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-1172](https://cve.now/CVE-2015-1172.md): Unrestricted file upload vulnerability in admin/upload-file.php in the Holding Pattern theme (aka holding\_pattern) 0.6 and earlier for WordP (no CVSS) - [CVE-2015-1518](https://cve.now/CVE-2015-1518.md): SQL injection vulnerability in the search\_post function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execut (no CVSS) - [CVE-2015-1575](https://cve.now/CVE-2015-1575.md): Multiple cross-site scripting (XSS) vulnerabilities in u5CMS before 3.9.4 allow remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2015-1576](https://cve.now/CVE-2015-1576.md): Multiple SQL injection vulnerabilities in u5CMS before 3.9.4 allow remote attackers to execute arbitrary SQL commands via the name parameter (no CVSS) - [CVE-2015-1577](https://cve.now/CVE-2015-1577.md): Directory traversal vulnerability in u5admin/deletefile.php in u5CMS before 3.9.4 allows remote attackers to write to arbitrary files via a (no CVSS) - [CVE-2015-1578](https://cve.now/CVE-2015-1578.md): Multiple open redirect vulnerabilities in u5CMS before 3.9.4 allow remote attackers to redirect users to arbitrary web sites and conduct phi (no CVSS) - [CVE-2015-1579](https://cve.now/CVE-2015-1579.md): Directory traversal vulnerability in the Elegant Themes Divi theme for WordPress allows remote attackers to read arbitrary files via a .. (no CVSS) - [CVE-2015-1580](https://cve.now/CVE-2015-1580.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Redirection Page plugin 1.2 for WordPress allow remote attackers to hijack (no CVSS) - [CVE-2015-1581](https://cve.now/CVE-2015-1581.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the Mobile Domain plugin 1.5.2 for WordPress allow remote attackers to hijack (no CVSS) - [CVE-2015-1582](https://cve.now/CVE-2015-1582.md): Multiple cross-site scripting (XSS) vulnerabilities in the Spider Facebook plugin before 1.0.11 for WordPress allow (1) remote attackers to (no CVSS) - [CVE-2014-6362](https://cve.now/CVE-2014-6362.md): Use-after-free vulnerability in Microsoft Office 2007 SP3, 2010 SP2, and 2013 Gold and SP1 allows remote attackers to bypass the ASLR protec (no CVSS) - [CVE-2015-0003](https://cve.now/CVE-2015-0003.md): win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 (no CVSS) - [CVE-2015-0008](https://cve.now/CVE-2015-0008.md): The UNC implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8 (no CVSS) - [CVE-2015-0009](https://cve.now/CVE-2015-0009.md): The Group Policy Security Configuration policy implementation in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 S (no CVSS) - [CVE-2015-0010](https://cve.now/CVE-2015-0010.md): The CryptProtectMemory function in cng.sys (aka the Cryptography Next Generation driver) in the kernel-mode drivers in Microsoft Windows Ser (no CVSS) - [CVE-2015-0012](https://cve.now/CVE-2015-0012.md): Microsoft System Center Virtual Machine Manager (VMM) 2012 R2 Update Rollup 4 does not properly validate the roles of users, which allows lo (no CVSS) - [CVE-2015-0017](https://cve.now/CVE-2015-0017.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0018](https://cve.now/CVE-2015-0018.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-0019](https://cve.now/CVE-2015-0019.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-0020](https://cve.now/CVE-2015-0020.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0021](https://cve.now/CVE-2015-0021.md): Microsoft Internet Explorer 6 through 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0022](https://cve.now/CVE-2015-0022.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0023](https://cve.now/CVE-2015-0023.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-0025](https://cve.now/CVE-2015-0025.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-0026](https://cve.now/CVE-2015-0026.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0027](https://cve.now/CVE-2015-0027.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-0028](https://cve.now/CVE-2015-0028.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS) - [CVE-2015-0029](https://cve.now/CVE-2015-0029.md): Microsoft Internet Explorer 6 and 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS) - [CVE-2015-0030](https://cve.now/CVE-2015-0030.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0031](https://cve.now/CVE-2015-0031.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0035](https://cve.now/CVE-2015-0035.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-0036](https://cve.now/CVE-2015-0036.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0037](https://cve.now/CVE-2015-0037.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-0038](https://cve.now/CVE-2015-0038.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0039](https://cve.now/CVE-2015-0039.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-0040](https://cve.now/CVE-2015-0040.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-0041](https://cve.now/CVE-2015-0041.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0042](https://cve.now/CVE-2015-0042.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0043](https://cve.now/CVE-2015-0043.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0044](https://cve.now/CVE-2015-0044.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS) - [CVE-2015-0045](https://cve.now/CVE-2015-0045.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS) - [CVE-2015-0046](https://cve.now/CVE-2015-0046.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-0048](https://cve.now/CVE-2015-0048.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS) - [CVE-2015-0049](https://cve.now/CVE-2015-0049.md): Microsoft Internet Explorer 8 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-0050](https://cve.now/CVE-2015-0050.md): Microsoft Internet Explorer 8 and 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a (no CVSS) - [CVE-2015-0051](https://cve.now/CVE-2015-0051.md): Microsoft Internet Explorer 8 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet Explorer (no CVSS) - [CVE-2015-0052](https://cve.now/CVE-2015-0052.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-0053](https://cve.now/CVE-2015-0053.md): Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS) - [CVE-2015-0054](https://cve.now/CVE-2015-0054.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation (no CVSS) - [CVE-2015-0055](https://cve.now/CVE-2015-0055.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of (no CVSS) - [CVE-2015-0057](https://cve.now/CVE-2015-0057.md): win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 (no CVSS) - [CVE-2015-0058](https://cve.now/CVE-2015-0058.md): Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 R2, and Windows RT 8.1 allo (no CVSS) - [CVE-2015-0059](https://cve.now/CVE-2015-0059.md): win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Go (no CVSS) - [CVE-2015-0060](https://cve.now/CVE-2015-0060.md): The font mapper in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 an (no CVSS) - [CVE-2015-0061](https://cve.now/CVE-2015-0061.md): Microsoft Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Ser (no CVSS) - [CVE-2015-0062](https://cve.now/CVE-2015-0062.md): Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 al (no CVSS) - [CVE-2015-0063](https://cve.now/CVE-2015-0063.md): Microsoft Excel 2007 SP3; the proofing tools in Office 2010 SP2; Excel 2010 SP2; Excel 2013 Gold, SP1, and RT; Excel Viewer; and Office Comp (no CVSS) - [CVE-2015-0064](https://cve.now/CVE-2015-0064.md): Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word Automation Services in SharePoint Server 2010, Web Applications 2010 SP2, Word (no CVSS) - [CVE-2015-0065](https://cve.now/CVE-2015-0065.md): Microsoft Word 2007 SP3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted Off (no CVSS) - [CVE-2015-0066](https://cve.now/CVE-2015-0066.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-0067](https://cve.now/CVE-2015-0067.md): Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS) - [CVE-2015-0068](https://cve.now/CVE-2015-0068.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-0069](https://cve.now/CVE-2015-0069.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Internet (no CVSS) - [CVE-2015-0070](https://cve.now/CVE-2015-0070.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web s (no CVSS) - [CVE-2015-0071](https://cve.now/CVE-2015-0071.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "Intern (CVSS 6.5, KEV) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-02-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.