2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-3191 | HIGH | 8.8 | 0.5% | May 25, 2017 | With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Clo... |
| CVE-2015-5436 | HIGH | 7.5 | 1.6% | May 11, 2017 | A potential security vulnerability has been identified with HP Integrated Lights-Out 4 (iLO 4) firmware version 2.11 and... |
| CVE-2015-9004 | HIGH | 7.8 | 0.8% | May 2, 2017 | kernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows local users to gain privi... |
| CVE-2015-8619 | HIGH | 7.5 | 3.9% | Apr 13, 2017 | The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write an... |
| CVE-2015-8567 | HIGH | 7.7 | 5.6% | Apr 13, 2017 | Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption). |
| CVE-2015-4646 | HIGH | 7.5 | 6.9% | Apr 13, 2017 | (1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attack... |
| CVE-2015-7563 | HIGH | 8.8 | 3.1% | Apr 12, 2017 | Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the aut... |
| CVE-2015-8666 | HIGH | 7.9 | 0.4% | Apr 11, 2017 | Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator. |
| CVE-2015-7260 | HIGH | 7.8 | 0.3% | Apr 10, 2017 | Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable f... |
| CVE-2015-6028 | HIGH | 8.8 | 1.1% | Apr 10, 2017 | Castle Rock Computing SNMPc before 2015-12-17 has SQL injection via the sc parameter. |
| CVE-2015-2889 | HIGH | 8.8 | 1.7% | Apr 10, 2017 | Summer Baby Zoom Wifi Monitor & Internet Viewing System allows remote attackers to gain privileges via manual entry of a... |
| CVE-2015-8026 | HIGH | 7.8 | 4.5% | Mar 27, 2017 | Heap-based buffer overflow in the verify_vbr_checksum function in exfatfsck in exfat-utils before 1.2.1 allows remote at... |
| CVE-2015-3884 | HIGH | 8.8 | 14.4% | Mar 17, 2017 | Unrestricted file upload vulnerability in the (1) myAccount, (2) projects, (3) tasks, (4) tickets, (5) discussions, (6) ... |
| CVE-2015-8994 | HIGH | 7.5 | 2.9% | Mar 2, 2017 | An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache e... |
| CVE-2015-4057 | HIGH | 7.5 | 1.5% | Feb 21, 2017 | The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon ... |
| CVE-2015-8971 | HIGH | 7.8 | 1.1% | Jan 23, 2017 | Terminology 0.7.0 allows remote attackers to execute arbitrary commands via escape sequences that modify the window titl... |
| CVE-2015-8854 | HIGH | 7.5 | 4.3% | Jan 23, 2017 | The marked package before 0.3.4 for Node.js allows attackers to cause a denial of service (CPU consumption) via unspecif... |
| CVE-2015-8315 | HIGH | 7.5 | 6.8% | Jan 23, 2017 | The ms package before 0.7.1 for Node.js allows attackers to cause a denial of service (CPU consumption) via a long versi... |
| CVE-2015-7848 | HIGH | 7.5 | 6.1% | Jan 6, 2017 | An integer overflow can occur in NTP-dev.4.3.70 leading to an out-of-bounds memory copy operation when processing a spec... |
| CVE-2015-8743 | HIGH | 7.1 | 0.4% | Dec 29, 2016 | QEMU (aka Quick Emulator) built with the NE2000 device emulation support is vulnerable to an OOB r/w access issue. It co... |
| CVE-2015-8967 | HIGH | 7.8 | 0.8% | Dec 8, 2016 | arch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict page permissions" protec... |
| CVE-2015-8963 | HIGH | 7 | 1.4% | Nov 16, 2016 | Race condition in kernel/events/core.c in the Linux kernel before 4.4 allows local users to gain privileges or cause a d... |
| CVE-2015-8962 | HIGH | 7.3 | 1.8% | Nov 16, 2016 | Double free vulnerability in the sg_common_write function in drivers/scsi/sg.c in the Linux kernel before 4.4 allows loc... |
| CVE-2015-8961 | HIGH | 7.8 | 2.0% | Nov 16, 2016 | The __ext4_journal_stop function in fs/ext4/ext4_jbd2.c in the Linux kernel before 4.3.3 allows local users to gain priv... |
| CVE-2015-8968 | HIGH | 8.8 | 5.2% | Nov 3, 2016 | git-fastclone before 1.0.1 permits arbitrary shell command execution from .gitmodules. If an attacker can instruct a use... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now