2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-8157 | HIGH | 8.8 | 1.7% | Jun 8, 2016 | SQL injection vulnerability in the Management Server in Symantec Embedded Security: Critical System Protection (SES:CSP)... |
| CVE-2015-7695 | — | — | 3.0% | Jun 7, 2016 | The PDO adapters in Zend Framework before 1.12.16 do not filer null bytes in SQL statements, which allows remote attacke... |
| CVE-2015-7611 | — | — | 68.6% | Jun 7, 2016 | Apache James Server 2.3.2, when configured with file-based user repositories, allows attackers to execute arbitrary syst... |
| CVE-2015-5723 | — | — | 0.4% | Jun 7, 2016 | Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1... |
| CVE-2015-5261 | — | — | 0.5% | Jun 7, 2016 | Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to read and write to arbitrary memory locations ... |
| CVE-2015-5260 | — | — | 0.6% | Jun 7, 2016 | Heap-based buffer overflow in SPICE before 0.12.6 allows guest OS users to cause a denial of service (heap-based memory ... |
| CVE-2015-5231 | — | — | 0.4% | Jun 7, 2016 | The service daemon in CRIU does not properly restrict access to non-dumpable processes, which allows local users to obta... |
| CVE-2015-5228 | — | — | 0.4% | Jun 7, 2016 | The service daemon in CRIU creates log and dump files insecurely, which allows local users to create arbitrary files and... |
| CVE-2015-5041 | — | — | 3.9% | Jun 6, 2016 | The J9 JVM in IBM SDK, Java Technology Edition 6 before SR16 FP20, 6 R1 before SR8 FP20, 7 before SR9 FP30, and 7 R1 bef... |
| CVE-2015-8872 | — | — | 0.4% | Jun 3, 2016 | The set_fat function in fat.c in dosfstools before 4.0 might allow attackers to corrupt a FAT12 filesystem or cause a de... |
| CVE-2015-8875 | — | — | 2.8% | Jun 1, 2016 | Multiple integer overflows in the (1) pixops_composite_nearest, (2) pixops_composite_color_nearest, and (3) pixops_proce... |
| CVE-2015-7360 | — | — | 1.5% | May 26, 2016 | Multiple cross-site scripting (XSS) vulnerabilities in the Web User Interface (WebUI) in Fortinet FortiSandbox before 2.... |
| CVE-2015-8853 | — | — | 2.6% | May 25, 2016 | The (1) S_reghop3, (2) S_reghop4, and (3) S_reghopmaybe3 functions in regexec.c in Perl before 5.24.0 allow context-depe... |
| CVE-2015-8558 | MEDIUM | 5.5 | 0.5% | May 23, 2016 | The ehci_process_itd function in hw/usb/hcd-ehci.c in QEMU allows local guest OS administrators to cause a denial of ser... |
| CVE-2015-8880 | CRITICAL | 9.8 | 3.0% | May 22, 2016 | Double free vulnerability in the format printer in PHP 7.x before 7.0.1 allows remote attackers to have an unspecified i... |
| CVE-2015-8879 | HIGH | 7.5 | 3.4% | May 22, 2016 | The odbc_bindcols function in ext/odbc/php_odbc.c in PHP before 5.6.12 mishandles driver behavior for SQL_WVARCHAR colum... |
| CVE-2015-8878 | — | — | 1.2% | May 22, 2016 | main/php_open_temporary_file.c in PHP before 5.5.28 and 5.6.x before 5.6.12 does not ensure thread safety, which allows ... |
| CVE-2015-8877 | — | — | 3.6% | May 22, 2016 | The gdImageScaleTwoPass function in gd_interpolation.c in the GD Graphics Library (aka libgd) before 2.2.0, as used in P... |
| CVE-2015-8876 | — | — | 7.7% | May 22, 2016 | Zend/zend_exceptions.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 does not validate certain Exce... |
| CVE-2015-8867 | — | — | 4.4% | May 22, 2016 | The openssl_random_pseudo_bytes function in ext/openssl/openssl.c in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x b... |
| CVE-2015-8866 | CRITICAL | 9.6 | 4.0% | May 22, 2016 | ext/libxml/libxml.c in PHP before 5.5.22 and 5.6.x before 5.6.6, when PHP-FPM is used, does not isolate each thread from... |
| CVE-2015-8834 | — | — | 1.8% | May 22, 2016 | Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.2 allows remote attackers to i... |
| CVE-2015-7989 | — | — | 2.1% | May 22, 2016 | Cross-site scripting (XSS) vulnerability in the user list table in WordPress before 4.3.1 allows remote authenticated us... |
| CVE-2015-5715 | — | — | 6.3% | May 22, 2016 | The mw_editPost function in wp-includes/class-wp-xmlrpc-server.php in the XMLRPC subsystem in WordPress before 4.3.1 all... |
| CVE-2015-5714 | — | — | 6.4% | May 22, 2016 | Cross-site scripting (XSS) vulnerability in WordPress before 4.3.1 allows remote attackers to inject arbitrary web scrip... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now