2015 CVE Vulnerabilities
8,779 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-5479 | — | — | 2.0% | Apr 19, 2016 | The ff_h263_decode_mba function in libavcodec/ituh263dec.c in Libav before 11.5 allows remote attackers to cause a denia... |
| CVE-2015-7378 | HIGH | 7.8 | 0.9% | Apr 18, 2016 | Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and install... |
| CVE-2015-8106 | — | — | 3.6% | Apr 18, 2016 | Format string vulnerability in the CmdKeywords function in funct1.c in latex2rtf before 2.3.10 allows remote attackers t... |
| CVE-2015-7552 | — | — | 3.9% | Apr 18, 2016 | Heap-based buffer overflow in the gdk_pixbuf_flip function in gdk-pixbuf-scale.c in gdk-pixbuf 2.30.x allows remote atta... |
| CVE-2015-5271 | — | — | 2.4% | Apr 15, 2016 | The TripleO Heat templates (tripleo-heat-templates) do not properly order the Identity Service (keystone) before the Ope... |
| CVE-2015-7676 | — | — | 1.8% | Apr 15, 2016 | Ipswitch MOVEit File Transfer (formerly DMZ) 8.1 and earlier, when configured to support file view on download, allows r... |
| CVE-2015-5348 | — | — | 6.4% | Apr 15, 2016 | Apache Camel 2.6.x through 2.14.x, 2.15.x before 2.15.5, and 2.16.x before 2.16.1, when using (1) camel-jetty or (2) cam... |
| CVE-2015-8677 | — | — | 1.1% | Apr 14, 2016 | Memory leak in Huawei S5300EI, S5300SI, S5310HI, and S6300EI Campus series switches with software V200R003C00 before V20... |
| CVE-2015-8676 | — | — | 1.3% | Apr 14, 2016 | Memory leak in Huawei S5300EI, S5300SI, S5310HI, S6300EI/ S2350EI, and S5300LI Campus series switches with software V200... |
| CVE-2015-8336 | MEDIUM | 4.3 | 0.6% | Apr 14, 2016 | Huawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to obtain sensitive "role ... |
| CVE-2015-5247 | — | — | 1.4% | Apr 14, 2016 | The virStorageVolCreateXML API in libvirt 1.2.14 through 1.2.19 allows remote authenticated users with a read-write conn... |
| CVE-2015-8560 | — | — | 5.3% | Apr 14, 2016 | Incomplete blacklist vulnerability in util.c in foomatic-rip in cups-filters 1.0.42 before 1.4.0 and in foomatic-filters... |
| CVE-2015-8554 | — | — | 0.4% | Apr 14, 2016 | Buffer overflow in hw/pt-msi.c in Xen 4.6.x and earlier, when using the qemu-xen-traditional (aka qemu-dm) device model,... |
| CVE-2015-8550 | — | — | 1.1% | Apr 14, 2016 | Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (hos... |
| CVE-2015-8540 | — | — | 6.5% | Apr 14, 2016 | Integer underflow in the png_check_keyword function in pngwutil.c in libpng 0.90 through 0.99, 1.0.x before 1.0.66, 1.1.... |
| CVE-2015-7999 | — | — | 2.1% | Apr 14, 2016 | Multiple SQL injection vulnerabilities in the Administration Web UI servlets in Citrix Command Center before 5.1 Build 3... |
| CVE-2015-5343 | — | — | 30.2% | Apr 14, 2016 | Integer overflow in util.c in mod_dav_svn in Apache Subversion 1.7.x, 1.8.x before 1.8.15, and 1.9.x before 1.9.3 allows... |
| CVE-2015-0284 | — | — | 1.2% | Apr 14, 2016 | Cross-site scripting (XSS) vulnerability in spacewalk-java in Spacewalk and Red Hat Satellite 5.7 allows remote authenti... |
| CVE-2015-8806 | HIGH | 7.5 | 5.1% | Apr 13, 2016 | dict.c in libxml2 allows remote attackers to cause a denial of service (heap-based buffer over-read and application cras... |
| CVE-2015-8784 | MEDIUM | 6.5 | 4.0% | Apr 13, 2016 | The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (out-of-bounds wri... |
| CVE-2015-8683 | — | — | 2.9% | Apr 13, 2016 | The putcontig8bitCIELab function in tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service... |
| CVE-2015-8665 | — | — | 2.9% | Apr 13, 2016 | tif_getimage.c in LibTIFF 4.0.6 allows remote attackers to cause a denial of service (out-of-bounds read) via the Sample... |
| CVE-2015-3146 | — | — | 3.9% | Apr 13, 2016 | The (1) SSH_MSG_NEWKEYS and (2) SSH_MSG_KEXDH_REPLY packet handlers in package_cb.c in libssh before 0.6.5 do not proper... |
| CVE-2015-1547 | — | — | 3.4% | Apr 13, 2016 | The NeXTDecode function in tif_next.c in LibTIFF allows remote attackers to cause a denial of service (uninitialized mem... |
| CVE-2015-8807 | — | — | 2.1% | Apr 13, 2016 | Cross-site scripting (XSS) vulnerability in the _renderVarInput_number function in horde/framework/Core/lib/Horde/Core/U... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now