2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-8658 | HIGH | 8.8 | 7.2% | Mar 4, 2016 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on ... |
| CVE-2015-8657 | HIGH | 8.8 | 7.2% | Mar 4, 2016 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on ... |
| CVE-2015-8656 | HIGH | 8.8 | 7.2% | Mar 4, 2016 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on ... |
| CVE-2015-8655 | HIGH | 8.8 | 7.9% | Mar 4, 2016 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and ... |
| CVE-2015-8654 | HIGH | 8.8 | 6.3% | Mar 4, 2016 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on ... |
| CVE-2015-8653 | HIGH | 8.8 | 7.9% | Mar 4, 2016 | Use-after-free vulnerability in Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and ... |
| CVE-2015-8652 | HIGH | 8.8 | 6.3% | Mar 4, 2016 | Adobe Flash Player before 18.0.0.268 and 19.x and 20.x before 20.0.0.228 on Windows and OS X and before 11.2.202.554 on ... |
| CVE-2015-5351 | HIGH | 8.8 | 9.7% | Feb 25, 2016 | The (1) Manager and (2) Host Manager applications in Apache Tomcat 7.x before 7.0.68, 8.x before 8.0.31, and 9.x before ... |
| CVE-2015-5346 | HIGH | 8.1 | 10.6% | Feb 25, 2016 | Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when diff... |
| CVE-2015-8539 | HIGH | 7.8 | 0.4% | Feb 8, 2016 | The KEYS subsystem in the Linux kernel before 4.4 allows local users to gain privileges or cause a denial of service (BU... |
| CVE-2015-7546 | HIGH | 7.5 | 1.7% | Feb 3, 2016 | The identity service in OpenStack Identity (Keystone) before 2015.1.3 (Kilo) and 8.0.x before 8.0.2 (Liberty) and keysto... |
| CVE-2015-7974 | HIGH | 7.7 | 5.7% | Jan 26, 2016 | NTP 4.x before 4.2.8p6 and 4.3.x before 4.3.90 do not verify peer associations of symmetric keys when authenticating pac... |
| CVE-2015-6831 | HIGH | 7.3 | 7.1% | Jan 19, 2016 | Multiple use-after-free vulnerabilities in SPL in PHP before 5.4.44, 5.5.x before 5.5.28, and 5.6.x before 5.6.12 allow ... |
| CVE-2015-6527 | HIGH | 7.3 | 3.9% | Jan 19, 2016 | The php_str_replace_in_subject function in ext/standard/string.c in PHP 7.x before 7.0.0 allows remote attackers to exec... |
| CVE-2015-8397 | HIGH | 8.2 | 3.6% | Jan 12, 2016 | The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) b... |
| CVE-2015-1779 | HIGH | 8.6 | 7.4% | Jan 12, 2016 | The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption... |
| CVE-2015-8467 | HIGH | 7.5 | 3.1% | Dec 29, 2015 | The samldb_check_user_account_control_acl function in dsdb/samdb/ldb_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x ... |
| CVE-2015-7540 | HIGH | 7.5 | 7.1% | Dec 29, 2015 | The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful... |
| CVE-2015-5252 | HIGH | 7.2 | 13.3% | Dec 29, 2015 | vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with cert... |
| CVE-2015-8651 | HIGH | 8.8 | 67.9% | Dec 28, 2015 | Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and bef... |
| CVE-2015-8543 | HIGH | 7 | 1.2% | Dec 28, 2015 | The networking implementation in the Linux kernel through 4.3.3, as used in Android and other products, does not validat... |
| CVE-2015-8370 | HIGH | 7.4 | 1.1% | Dec 16, 2015 | Multiple integer underflows in Grub2 1.98 through 2.02 allow physically proximate attackers to bypass authentication, ob... |
| CVE-2015-6175 | HIGH | 7.8 | 5.2% | Dec 9, 2015 | The kernel in Microsoft Windows 10 Gold allows local users to gain privileges via a crafted application, aka "Windows Ke... |
| CVE-2015-3276 | HIGH | 7.5 | 5.3% | Dec 7, 2015 | The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyw... |
| CVE-2015-5287 | HIGH | 7.8 | 3.4% | Dec 7, 2015 | The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain perm... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now