2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-5325 | — | — | 1.8% | Nov 25, 2015 | Jenkins before 1.638 and LTS before 1.625.2 allow attackers to bypass intended slave-to-master access restrictions by le... |
| CVE-2015-5324 | — | — | 2.1% | Nov 25, 2015 | Jenkins before 1.638 and LTS before 1.625.2 allow remote attackers to obtain sensitive information via a direct request ... |
| CVE-2015-5323 | — | — | 1.5% | Nov 25, 2015 | Jenkins before 1.638 and LTS before 1.625.2 do not properly restrict access to API tokens which might allow remote admin... |
| CVE-2015-5322 | — | — | 3.2% | Nov 25, 2015 | Directory traversal vulnerability in Jenkins before 1.638 and LTS before 1.625.2 allows remote attackers to list directo... |
| CVE-2015-5321 | — | — | 2.1% | Nov 25, 2015 | The sidepanel widgets in the CLI command overview and help pages in Jenkins before 1.638 and LTS before 1.625.2 allow re... |
| CVE-2015-5320 | — | — | 2.1% | Nov 25, 2015 | Jenkins before 1.638 and LTS before 1.625.2 do not properly verify the shared secret used in JNLP slave connections, whi... |
| CVE-2015-5319 | — | — | 2.3% | Nov 25, 2015 | XML external entity (XXE) vulnerability in the create-job CLI command in Jenkins before 1.638 and LTS before 1.625.2 all... |
| CVE-2015-5318 | — | — | 1.1% | Nov 25, 2015 | Jenkins before 1.638 and LTS before 1.625.2 uses a publicly accessible salt to generate CSRF protection tokens, which ma... |
| CVE-2015-5306 | — | — | 1.6% | Nov 25, 2015 | OpenStack Ironic Inspector (aka ironic-inspector or ironic-discoverd), when debug mode is enabled, might allow remote at... |
| CVE-2015-5242 | — | — | 2.2% | Nov 25, 2015 | OpenStack Swift-on-File (aka Swiftonfile) does not properly restrict use of the pickle Python module when loading metada... |
| CVE-2015-8342 | — | — | — | Nov 25, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2015-8135 | — | — | — | Nov 25, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7265. Reason: This candidate is a reservation du... |
| CVE-2015-8134 | — | — | — | Nov 25, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2015-8133 | — | — | — | Nov 25, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7264. Reason: This candidate is a reservation du... |
| CVE-2015-8132 | — | — | — | Nov 25, 2015 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-7263. Reason: This candidate is a reservation du... |
| CVE-2015-7288 | — | — | 1.7% | Nov 25, 2015 | CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 allow remote attackers to modify the configuration via... |
| CVE-2015-7287 | — | — | 3.2% | Nov 25, 2015 | CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 use the same 001984 default PIN across different custo... |
| CVE-2015-7286 | — | — | 2.1% | Nov 25, 2015 | CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 rely on a polyalphabetic substitution cipher with hard... |
| CVE-2015-7285 | — | — | 1.5% | Nov 25, 2015 | CSL DualCom GPRS CS2300-R devices with firmware 1.25 through 3.53 do not require authentication from Alarm Receiving Cen... |
| CVE-2015-6379 | — | — | 1.5% | Nov 25, 2015 | The XML parser in the management interface in Cisco Adaptive Security Appliance (ASA) Software 8.4 allows remote authent... |
| CVE-2015-8330 | — | — | 3.0% | Nov 24, 2015 | The PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of service (memory corruption an... |
| CVE-2015-8329 | — | — | 1.0% | Nov 24, 2015 | SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which all... |
| CVE-2015-8328 | — | — | 0.4% | Nov 24, 2015 | Unspecified vulnerability in the NVAPI support layer in the NVIDIA GPU graphics driver R340 before 341.92, R352 before 3... |
| CVE-2015-8229 | — | — | 0.7% | Nov 24, 2015 | Huawei eSpace U2980 unified gateway with software before V100R001C10 and U2990 with software before V200R001C10 allow re... |
| CVE-2015-8228 | — | — | 1.1% | Nov 24, 2015 | Directory traversal vulnerability in the SFTP server in Huawei AR 120, 150, 160, 200, 500, 1200, 2200, 3200, and 3600 ro... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now