2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-7487 | — | — | 0.3% | Jan 27, 2016 | IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 IFIX002, and 7.6.0 before 7.6.0.3 IFIX001; Maximo... |
| CVE-2015-7439 | — | — | 0.8% | Jan 27, 2016 | Cross-site scripting (XSS) vulnerability in InfoSphere Data Architect (IDA), as distributed in IBM Rational Software Arc... |
| CVE-2015-8379 | — | — | 1.4% | Jan 26, 2016 | CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method pa... |
| CVE-2015-7974 | HIGH | 7.7 | 5.7% | Jan 26, 2016 | NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating pac... |
| CVE-2015-6337 | — | — | 1.0% | Jan 26, 2016 | Cross-site scripting (XSS) vulnerability in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-E... |
| CVE-2015-7417 | — | — | 1.1% | Jan 23, 2016 | Cross-site scripting (XSS) vulnerability in IBM WebSphere Application Server 7.0 before 7.0.0.41, 8.0 before 8.0.0.12, a... |
| CVE-2015-6317 | — | — | 1.5% | Jan 23, 2016 | Cisco Identity Services Engine (ISE) before 2.0 allows remote authenticated users to bypass intended web-resource access... |
| CVE-2015-7744 | MEDIUM | 5.9 | 5.0% | Jan 22, 2016 | wolfSSL (formerly CyaSSL) before 3.6.8 does not properly handle faults associated with the Chinese Remainder Theorem (CR... |
| CVE-2015-6925 | — | — | 2.7% | Jan 22, 2016 | wolfSSL (formerly CyaSSL) before 3.6.8 allows remote attackers to cause a denial of service (resource consumption or tra... |
| CVE-2015-6015 | — | — | 8.4% | Jan 22, 2016 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.... |
| CVE-2015-6014 | — | — | 8.4% | Jan 22, 2016 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.... |
| CVE-2015-6013 | — | — | 8.4% | Jan 22, 2016 | Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.5.0, 8.5.1, and 8.... |
| CVE-2015-8362 | — | — | 4.7% | Jan 22, 2016 | The setUpSubtleUserAccount function in /bin/bw on Harman AMX devices before 2015-10-12 has a hardcoded password for the ... |
| CVE-2015-7909 | — | — | 1.1% | Jan 22, 2016 | Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A... |
| CVE-2015-6435 | — | — | 8.7% | Jan 22, 2016 | An unspecified CGI script in Cisco FX-OS before 1.1.2 on Firepower 9000 devices and Cisco Unified Computing System (UCS)... |
| CVE-2015-6412 | — | — | 2.4% | Jan 22, 2016 | Cisco Modular Encoding Platform D9036 Software before 02.04.70 has hardcoded (1) root and (2) guest passwords, which mak... |
| CVE-2015-8472 | — | — | 6.1% | Jan 21, 2016 | Buffer overflow in the png_set_PLTE function in libpng before 1.0.65, 1.1.x and 1.2.x before 1.2.55, 1.3.x, 1.4.x before... |
| CVE-2015-4926 | — | — | 1.5% | Jan 21, 2016 | Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2, 12.1, and... |
| CVE-2015-4925 | — | — | 1.7% | Jan 21, 2016 | Unspecified vulnerability in the Workspace Manager component in Oracle Database Server 11.2.0.4 allows remote authentica... |
| CVE-2015-4924 | — | — | 1.1% | Jan 21, 2016 | Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.... |
| CVE-2015-4923 | — | — | 1.5% | Jan 21, 2016 | Unspecified vulnerability in the XML Developer's Kit for C component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 1... |
| CVE-2015-4922 | — | — | 0.4% | Jan 21, 2016 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability via vectors related to Boot... |
| CVE-2015-4921 | — | — | 1.3% | Jan 21, 2016 | Unspecified vulnerability in the Database Vault component in Oracle Database Server 11.2.0.4, 12.1.0.1, and 12.1.0.2 all... |
| CVE-2015-4920 | — | — | 0.4% | Jan 21, 2016 | Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect integrity via vectors related to NDMP Ba... |
| CVE-2015-4919 | — | — | 1.8% | Jan 21, 2016 | Unspecified vulnerability in the JD Edwards EnterpriseOne Tools component in Oracle JD Edwards Products 9.1 and 9.2 allo... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now