2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-7932 | — | — | 1.5% | Dec 24, 2015 | Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing ... |
| CVE-2015-7931 | — | — | 1.3% | Dec 24, 2015 | The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which a... |
| CVE-2015-7930 | — | — | 2.5% | Dec 24, 2015 | Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain a... |
| CVE-2015-8267 | — | — | 2.4% | Dec 24, 2015 | The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Pass... |
| CVE-2015-7929 | — | — | 2.6% | Dec 23, 2015 | eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain... |
| CVE-2015-7928 | — | — | 3.2% | Dec 23, 2015 | eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it ... |
| CVE-2015-7927 | — | — | 2.0% | Dec 23, 2015 | Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject ... |
| CVE-2015-7926 | — | — | 3.4% | Dec 23, 2015 | eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote a... |
| CVE-2015-7925 | — | — | 1.2% | Dec 23, 2015 | Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to ... |
| CVE-2015-7924 | — | — | 2.1% | Dec 23, 2015 | eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off ... |
| CVE-2015-7936 | — | — | 0.6% | Dec 23, 2015 | Cross-site request forgery (CSRF) vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijac... |
| CVE-2015-7935 | — | — | 1.5% | Dec 23, 2015 | Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors. |
| CVE-2015-7917 | — | — | 0.4% | Dec 23, 2015 | Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain ... |
| CVE-2015-7911 | — | — | 2.4% | Dec 23, 2015 | Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7... |
| CVE-2015-6851 | — | — | 0.6% | Dec 23, 2015 | EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mecha... |
| CVE-2015-6471 | — | — | 1.1% | Dec 23, 2015 | Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not prope... |
| CVE-2015-6431 | — | — | 0.7% | Dec 23, 2015 | Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-... |
| CVE-2015-8373 | — | — | 3.7% | Dec 22, 2015 | The kea-dhcp4 and kea-dhcp6 servers 0.9.2 and 1.0.0-beta in ISC Kea, when certain debugging settings are used, allow rem... |
| CVE-2015-4545 | — | — | 2.2% | Dec 21, 2015 | EMC Isilon OneFS 7.1 before 7.1.1.8, 7.2.0 before 7.2.0.4, and 7.2.1 before 7.2.1.1 allows remote authenticated administ... |
| CVE-2015-8458 | — | — | 8.3% | Dec 21, 2015 | Heap-based buffer overflow in AGM.dll in Adobe Reader and Acrobat 10.x before 10.1.16 and 11.x before 11.0.13, Acrobat a... |
| CVE-2015-7937 | — | — | 7.4% | Dec 21, 2015 | Stack-based buffer overflow in the GoAhead Web Server on Schneider Electric Modicon M340 PLC BMXNOx and BMXPx devices al... |
| CVE-2015-7919 | — | — | 22.0% | Dec 21, 2015 | SearchBlox 8.3 before 8.3.1 allows remote attackers to write to the config file, and consequently cause a denial of serv... |
| CVE-2015-7908 | — | — | 2.0% | Dec 21, 2015 | Honeywell Midas gas detectors before 1.13b3 and Midas Black gas detectors before 2.13b3 allow remote attackers to discov... |
| CVE-2015-7907 | — | — | 3.6% | Dec 21, 2015 | Directory traversal vulnerability in the web server on Honeywell Midas gas detectors before 1.13b3 and Midas Black gas d... |
| CVE-2015-7906 | — | — | 2.3% | Dec 21, 2015 | LOYTEC LIP-3ECTB 6.0.1, LINX-100, LVIS-3E100, and LIP-ME201 devices allow remote attackers to read a password-hash backu... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now