2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-8125 | — | — | 2.5% | Dec 7, 2015 | Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecifie... |
| CVE-2015-8124 | — | — | 2.7% | Dec 7, 2015 | Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, a... |
| CVE-2015-8084 | — | — | 0.9% | Dec 7, 2015 | Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DH... |
| CVE-2015-7348 | — | — | 1.9% | Dec 7, 2015 | Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitr... |
| CVE-2015-5309 | — | — | 3.5% | Dec 7, 2015 | Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (mem... |
| CVE-2015-5006 | — | — | 0.5% | Dec 7, 2015 | IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, ... |
| CVE-2015-4334 | — | — | 3.3% | Dec 7, 2015 | The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwa... |
| CVE-2015-3628 | — | — | 68.5% | Dec 7, 2015 | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.... |
| CVE-2015-1344 | — | — | 0.4% | Dec 7, 2015 | The do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local users... |
| CVE-2015-1342 | — | — | 0.5% | Dec 7, 2015 | LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) q... |
| CVE-2015-5302 | — | — | 2.8% | Dec 7, 2015 | libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attac... |
| CVE-2015-5273 | — | — | 0.9% | Dec 7, 2015 | The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows ... |
| CVE-2015-3196 | — | — | 12.8% | Dec 6, 2015 | ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-thread... |
| CVE-2015-1794 | — | — | 6.2% | Dec 6, 2015 | The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a deni... |
| CVE-2015-8480 | — | — | 1.3% | Dec 6, 2015 | The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.7... |
| CVE-2015-8479 | — | — | 0.6% | Dec 6, 2015 | Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc... |
| CVE-2015-8478 | — | — | 0.6% | Dec 6, 2015 | Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow ... |
| CVE-2015-6787 | — | — | 8.1% | Dec 6, 2015 | Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o... |
| CVE-2015-6786 | — | — | 1.7% | Dec 6, 2015 | The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CS... |
| CVE-2015-6785 | — | — | 1.7% | Dec 6, 2015 | The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) i... |
| CVE-2015-6784 | — | — | 1.7% | Dec 6, 2015 | The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing ... |
| CVE-2015-6783 | — | — | 1.2% | Dec 6, 2015 | The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x an... |
| CVE-2015-6782 | — | — | 1.1% | Dec 6, 2015 | The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure ... |
| CVE-2015-6781 | — | — | 1.6% | Dec 6, 2015 | Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before ... |
| CVE-2015-6780 | — | — | 1.1% | Dec 6, 2015 | Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now