2015 CVE Vulnerabilities
8,779 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-5272 | — | — | 1.5% | Feb 22, 2016 | The Forum module in Moodle 2.7.x before 2.7.10 allows remote authenticated users to post to arbitrary groups by leveragi... |
| CVE-2015-5269 | — | — | 1.2% | Feb 22, 2016 | Cross-site scripting (XSS) vulnerability in group/overview.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x befo... |
| CVE-2015-5268 | — | — | 1.6% | Feb 22, 2016 | The rating component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 mishandle... |
| CVE-2015-5267 | — | — | 2.4% | Feb 22, 2016 | lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 relies on th... |
| CVE-2015-5266 | — | — | 1.6% | Feb 22, 2016 | The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.... |
| CVE-2015-5265 | — | — | 1.5% | Feb 22, 2016 | The wiki component in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 does not co... |
| CVE-2015-5264 | — | — | 1.4% | Feb 22, 2016 | The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remot... |
| CVE-2015-3275 | — | — | 1.5% | Feb 22, 2016 | Multiple cross-site scripting (XSS) vulnerabilities in the SCORM module in Moodle through 2.6.11, 2.7.x before 2.7.9, 2.... |
| CVE-2015-3274 | — | — | 1.5% | Feb 22, 2016 | Cross-site scripting (XSS) vulnerability in the user_get_user_details function in user/lib.php in Moodle through 2.6.11,... |
| CVE-2015-3273 | — | — | 1.5% | Feb 22, 2016 | mod/forum/post.php in Moodle 2.9.x before 2.9.1 does not consider the mod/forum:canposttomygroups capability before auth... |
| CVE-2015-3272 | — | — | 1.8% | Feb 22, 2016 | Open redirect vulnerability in the clean_param function in lib/moodlelib.php in Moodle through 2.6.11, 2.7.x before 2.7.... |
| CVE-2015-7425 | — | — | 3.9% | Feb 21, 2016 | The Data Protection component in the VMware vSphere GUI in IBM Tivoli Storage Manager for Virtual Environments: Data Pro... |
| CVE-2015-7769 | — | — | 1.1% | Feb 19, 2016 | baserCMS 3.0.2 through 3.0.8 allows remote authenticated users to execute arbitrary OS commands via unspecified vectors. |
| CVE-2015-3825 | — | — | — | Feb 18, 2016 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-3837. Reason: This candidate is a reservation du... |
| CVE-2015-8151 | — | — | 1.9% | Feb 18, 2016 | Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS... |
| CVE-2015-8150 | — | — | 0.3% | Feb 18, 2016 | Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a b... |
| CVE-2015-8149 | — | — | 1.9% | Feb 18, 2016 | The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a de... |
| CVE-2015-8148 | — | — | 1.6% | Feb 18, 2016 | The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sen... |
| CVE-2015-5970 | — | — | 1.3% | Feb 18, 2016 | The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to... |
| CVE-2015-7547 | — | — | 89.6% | Feb 18, 2016 | Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C... |
| CVE-2015-8287 | — | — | 1.4% | Feb 18, 2016 | Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote a... |
| CVE-2015-8286 | — | — | 4.6% | Feb 18, 2016 | Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via ... |
| CVE-2015-8489 | — | — | 1.6% | Feb 17, 2016 | customapp in Cybozu Office 9.9.0 through 10.3.0 allows remote authenticated users to cause a denial of service (excessiv... |
| CVE-2015-8488 | — | — | 1.2% | Feb 17, 2016 | Cybozu Office 10.3.0 allows remote attackers to read image files via a crafted e-mail message, a different vulnerability... |
| CVE-2015-8487 | — | — | 1.2% | Feb 17, 2016 | Cybozu Office 9.0.0 through 10.3 allows remote attackers to discover CSRF tokens via unspecified vectors, a different vu... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now