2015 CVE Vulnerabilities
8,786 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-20130 | MEDIUM | 6.1 | 0.3% | Oct 30, 2026 | Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/repo... |
| CVE-2015-20129 | HIGH | 8.8 | 0.2% | Oct 28, 2026 | CrushFTP before 7.3.0 contains a cross-site request forgery vulnerability that allows attackers to perform administrativ... |
| CVE-2015-20128 | HIGH | 8.2 | 0.3% | Oct 20, 2026 | FooSun DotNetCMS 1.0 and 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate... |
| CVE-2015-20125 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Aspose PDF Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated ... |
| CVE-2015-20124 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Aspose Importer & Exporter plugin for WordPress before 3.0 contains a path traversal vulnerability that allows unauthent... |
| CVE-2015-20123 | HIGH | 7.5 | 0.4% | Oct 20, 2026 | Aspose Doc Exporter plugin for WordPress before 2.0 contains a path traversal vulnerability that allows unauthenticated ... |
| CVE-2015-20122 | HIGH | 7.5 | — | Sep 29, 2026 | Seeyon A6 collaborative office automation platform contains an unauthenticated SQL injection vulnerability in the attach... |
| CVE-2015-10148 | HIGH | 8.8 | 0.3% | Apr 3, 2026 | Hirschmann HiLCOS devices OpenBAT, WLC, BAT300, BAT54 prior to 8.80 and OpenBAT prior to 9.10 are shipped with identical... |
| CVE-2015-20121 | CRITICAL | 9.8 | 0.4% | Mar 16, 2026 | Next Click Ventures RealtyScript 4.0.2 contains SQL injection vulnerabilities that allow unauthenticated attackers to ma... |
| CVE-2015-20120 | CRITICAL | 9.8 | 0.4% | Mar 16, 2026 | Next Click Ventures RealtyScript 4.0.2 contains multiple time-based blind SQL injection vulnerabilities that allow unaut... |
| CVE-2015-20119 | MEDIUM | 5.4 | 0.2% | Mar 16, 2026 | Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability that allows authenticated at... |
| CVE-2015-20118 | MEDIUM | 6.1 | 0.3% | Mar 16, 2026 | Next Click Ventures RealtyScript 4.0.2 contains a stored cross-site scripting vulnerability in the location_name paramet... |
| CVE-2015-20117 | HIGH | 8.8 | 0.2% | Mar 16, 2026 | Next Click Ventures RealtyScript 4.0.2 contains a cross-site request forgery vulnerability that allows unauthenticated a... |
| CVE-2015-20116 | MEDIUM | 6.1 | 0.2% | Mar 16, 2026 | Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize CSV file uploads, allowing attackers to inject malicio... |
| CVE-2015-20115 | MEDIUM | 6.1 | 0.3% | Mar 16, 2026 | Next Click Ventures RealtyScript 4.0.2 fails to properly sanitize file uploads, allowing attackers to store malicious sc... |
| CVE-2015-20114 | MEDIUM | 6.1 | 0.3% | Mar 16, 2026 | Next Click Ventures RealtyScript 4.0.2 contains a cross-site scripting vulnerability that allows attackers to execute ar... |
| CVE-2015-20113 | MEDIUM | 4.3 | 0.2% | Mar 16, 2026 | Next Click Ventures RealtyScript 4.0.2 contains cross-site request forgery and persistent cross-site scripting vulnerabi... |
| CVE-2015-10145 | HIGH | 8.8 | 0.7% | Dec 31, 2025 | Gargoyle router management utility versions 1.5.x contain an authenticated OS command execution vulnerability in /utilit... |
| CVE-2015-10147 | MEDIUM | 4.9 | 0.3% | Oct 29, 2025 | The Easy Testimonial Slider and Form plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all v... |
| CVE-2015-10146 | MEDIUM | 4.9 | 0.3% | Oct 29, 2025 | The Thumbnail Slider With Lightbox plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter in all ver... |
| CVE-2015-10142 | MEDIUM | 6.9 | 0.5% | Jul 25, 2025 | Sitecore Experience Platform (XP) prior to 8.0 Initial Release (rev. 141212) and Content Management System (CMS) prior t... |
| CVE-2015-10144 | HIGH | 8.8 | 2.1% | Jul 25, 2025 | The Responsive Thumbnail Slider plugin for WordPress is vulnerable to arbitrary file uploads due to missing file type sa... |
| CVE-2015-10143 | CRITICAL | 9.8 | 1.8% | Jul 25, 2025 | The Platform theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalatio... |
| CVE-2015-10141 | CRITICAL | 9.3 | 5.0% | Jul 23, 2025 | An unauthenticated OS command injection vulnerability exists within Xdebug versions 2.5.5 and earlier, a PHP debugging e... |
| CVE-2015-10140 | HIGH | 8.8 | 1.0% | Jul 22, 2025 | The Ajax Load More plugin before 2.8.1.2 does not have authorisation in some of its AJAX actions, allowing any authentic... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now