2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-8019 | — | — | 0.4% | May 2, 2016 | The skb_copy_and_csum_datagram_iovec function in net/core/datagram.c in the Linux kernel 3.14.54 and 3.18.22 does not ac... |
| CVE-2015-4178 | — | — | 0.4% | May 2, 2016 | The fs_pin implementation in the Linux kernel before 4.0.5 does not ensure the internal consistency of a certain list da... |
| CVE-2015-4177 | — | — | 0.4% | May 2, 2016 | The collect_mounts function in fs/namespace.c in the Linux kernel before 4.0.5 does not properly consider that it may ex... |
| CVE-2015-4176 | — | — | 0.4% | May 2, 2016 | fs/namespace.c in the Linux kernel before 4.0.2 does not properly support mount connectivity, which allows local users t... |
| CVE-2015-4170 | — | — | 0.3% | May 2, 2016 | Race condition in the ldsem_cmpxchg function in drivers/tty/tty_ldsem.c in the Linux kernel before 3.13-rc4-next-2013121... |
| CVE-2015-2686 | — | — | 0.4% | May 2, 2016 | net/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1) sendto and (2) recvfrom... |
| CVE-2015-2672 | — | — | 0.4% | May 2, 2016 | The xsave/xrstor implementation in arch/x86/include/asm/xsave.h in the Linux kernel before 3.19.2 creates certain .altin... |
| CVE-2015-1573 | — | — | 0.4% | May 2, 2016 | The nft_flush_table function in net/netfilter/nf_tables_api.c in the Linux kernel before 3.18.5 mishandles the interacti... |
| CVE-2015-1350 | MEDIUM | 5.5 | 0.5% | May 2, 2016 | The VFS subsystem in the Linux kernel 3.x provides an incomplete set of requirements for setattr operations that undersp... |
| CVE-2015-8325 | HIGH | 7.8 | 0.6% | May 1, 2016 | The do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin feature is enabled and PAM is... |
| CVE-2015-8845 | — | — | 0.4% | Apr 27, 2016 | The tm_reclaim_thread function in arch/powerpc/kernel/process.c in the Linux kernel before 4.4.1 on powerpc platforms do... |
| CVE-2015-8844 | — | — | 0.4% | Apr 27, 2016 | The signal implementation in the Linux kernel before 4.3.5 on powerpc platforms does not check for an MSR with both the ... |
| CVE-2015-8816 | MEDIUM | 6.8 | 0.5% | Apr 27, 2016 | The hub_activate function in drivers/usb/core/hub.c in the Linux kernel before 4.3.5 does not properly maintain a hub-in... |
| CVE-2015-8812 | CRITICAL | 9.8 | 14.3% | Apr 27, 2016 | drivers/infiniband/hw/cxgb3/iwch_cm.c in the Linux kernel before 4.5 does not properly identify error conditions, which ... |
| CVE-2015-7515 | MEDIUM | 4.6 | 1.8% | Apr 27, 2016 | The aiptek_probe function in drivers/input/tablet/aiptek.c in the Linux kernel before 4.4 allows physically proximate at... |
| CVE-2015-1339 | — | — | 0.4% | Apr 27, 2016 | Memory leak in the cuse_channel_release function in fs/fuse/cuse.c in the Linux kernel before 4.4 allows local users to ... |
| CVE-2015-3572 | — | — | — | Apr 26, 2016 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3572. Reason: This candidate is a duplicate of... |
| CVE-2015-3571 | — | — | — | Apr 26, 2016 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3571. Reason: This candidate is a duplicate of... |
| CVE-2015-3569 | — | — | — | Apr 26, 2016 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2014-3569. Reason: This candidate is a duplicate of... |
| CVE-2015-8852 | — | — | 3.4% | Apr 25, 2016 | Varnish 3.x before 3.0.7, when used in certain stacked installations, allows remote attackers to inject arbitrary HTTP h... |
| CVE-2015-5370 | — | — | 19.2% | Apr 25, 2016 | Samba 3.x and 4.x before 4.2.11, 4.3.x before 4.3.8, and 4.4.x before 4.4.2 does not properly implement the DCE-RPC laye... |
| CVE-2015-8823 | HIGH | 8.8 | 6.4% | Apr 22, 2016 | Use-after-free vulnerability in the TextField object implementation in Adobe Flash Player before 18.0.0.268 and 19.x and... |
| CVE-2015-4829 | — | — | — | Apr 22, 2016 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0638. Reason: This candidate is a reservation ... |
| CVE-2015-6479 | MEDIUM | 4.3 | 1.5% | Apr 21, 2016 | ACEmanager in Sierra Wireless ALEOS 4.4.2 and earlier on ES440, ES450, GX400, GX440, GX450, and LS300 devices allows rem... |
| CVE-2015-6360 | — | — | 8.3% | Apr 21, 2016 | The encryption-processing feature in Cisco libSRTP before 1.5.3 allows remote attackers to cause a denial of service via... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now