2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-3411 | — | — | 3.4% | May 16, 2016 | PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 does not ensure that pathnames lack %00 sequences, which ... |
| CVE-2015-3152 | MEDIUM | 5.9 | 7.1% | May 16, 2016 | Oracle MySQL before 5.7.3, Oracle MySQL Connector/C (aka libmysqlclient) before 6.1.3, and MariaDB before 5.5.44 use the... |
| CVE-2015-8530 | — | — | 1.5% | May 14, 2016 | Stack-based buffer overflow in the Initialize function in an ActiveX control in IBM SPSS Statistics 19 and 20 before 20.... |
| CVE-2015-8156 | — | — | 0.3% | May 14, 2016 | Unquoted Windows search path vulnerability in EEDService in Symantec Endpoint Encryption (SEE) 11.x before 11.1.1 allows... |
| CVE-2015-8312 | — | — | 0.4% | May 13, 2016 | Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory o... |
| CVE-2015-8099 | — | — | 2.0% | May 13, 2016 | F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.x, 11.4.x before 11.4.1 HF10, 11.5.x before 11.5.... |
| CVE-2015-7827 | — | — | 2.4% | May 13, 2016 | Botan before 1.10.13 and 1.11.x before 1.11.22 make it easier for remote attackers to conduct million-message attacks by... |
| CVE-2015-5727 | — | — | 1.5% | May 13, 2016 | The BER decoder in Botan 1.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of se... |
| CVE-2015-5726 | — | — | 1.4% | May 13, 2016 | The BER decoder in Botan 0.10.x before 1.10.10 and 1.11.x before 1.11.19 allows remote attackers to cause a denial of se... |
| CVE-2015-5208 | — | — | 4.6% | May 9, 2016 | Apache Cordova iOS before 4.0.0 allows remote attackers to execute arbitrary plugins via a link. |
| CVE-2015-5207 | — | — | 2.9% | May 9, 2016 | Apache Cordova iOS before 4.0.0 might allow attackers to bypass a URL whitelist protection mechanism in an app and load ... |
| CVE-2015-0571 | HIGH | 7.8 | 1.4% | May 9, 2016 | The WLAN (aka Wi-Fi) driver for the Linux kernel 3.x and 4.x, as used in Qualcomm Innovation Center (QuIC) Android contr... |
| CVE-2015-0570 | HIGH | 7.8 | 1.8% | May 9, 2016 | Stack-based buffer overflow in the SET_WPS_IE IOCTL implementation in wlan_hdd_hostapd.c in the WLAN (aka Wi-Fi) driver ... |
| CVE-2015-0569 | HIGH | 7.8 | 6.5% | May 9, 2016 | Heap-based buffer overflow in the private wireless extensions IOCTL implementation in wlan_hdd_wext.c in the WLAN (aka W... |
| CVE-2015-6552 | — | — | 2.1% | May 7, 2016 | The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1... |
| CVE-2015-6551 | — | — | 1.1% | May 7, 2016 | Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x thro... |
| CVE-2015-6550 | — | — | 2.8% | May 7, 2016 | bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 ... |
| CVE-2015-8868 | — | — | 4.6% | May 6, 2016 | Heap-based buffer overflow in the ExponentialFunction::ExponentialFunction function in Poppler before 0.40.0 allows remo... |
| CVE-2015-8863 | — | — | 7.5% | May 6, 2016 | Off-by-one error in the tokenadd function in jv_parse.c in jq allows remote attackers to cause a denial of service (cras... |
| CVE-2015-0858 | — | — | 0.4% | May 6, 2016 | Cool Projects TarDiff allows local users to write to arbitrary files via a symlink attack on a pathname in a /tmp/tardif... |
| CVE-2015-0857 | — | — | 5.3% | May 6, 2016 | Cool Projects TarDiff allows remote attackers to execute arbitrary commands via shell metacharacters in the name of a (1... |
| CVE-2015-8839 | MEDIUM | 5.1 | 0.4% | May 2, 2016 | Multiple race conditions in the ext4 filesystem implementation in the Linux kernel before 4.5 allow local users to cause... |
| CVE-2015-8830 | — | — | 0.5% | May 2, 2016 | Integer overflow in the aio_setup_single_vector function in fs/aio.c in the Linux kernel 4.0 allows local users to cause... |
| CVE-2015-8746 | — | — | 3.0% | May 2, 2016 | fs/nfs/nfs4proc.c in the NFS client in the Linux kernel before 4.2.2 does not properly initialize memory for migration r... |
| CVE-2015-8324 | — | — | 0.4% | May 2, 2016 | The ext4 implementation in the Linux kernel before 2.6.34 does not properly track the initialization of certain data str... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now