2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-8605 | — | — | 76.4% | Jan 14, 2016 | ISC DHCP 4.x before 4.1-ESV-R12-P1, 4.2.x, and 4.3.x before 4.3.3-P1 allows remote attackers to cause a denial of servic... |
| CVE-2015-8607 | — | — | 3.1% | Jan 13, 2016 | The canonpath function in the File::Spec module in PathTools before 3.62, as used in Perl, does not properly preserve th... |
| CVE-2015-8466 | — | — | 2.0% | Jan 13, 2016 | Swift3 before 1.9 allows remote attackers to conduct replay attacks via an Authorization request that lacks a Date heade... |
| CVE-2015-6117 | MEDIUM | 6.1 | 6.9% | Jan 13, 2016 | Microsoft SharePoint Server 2013 SP1 and SharePoint Foundation 2013 SP1 allow remote authenticated users to bypass inten... |
| CVE-2015-8769 | — | — | 1.1% | Jan 12, 2016 | SQL injection vulnerability in Joomla! 3.x before 3.4.7 allows attackers to execute arbitrary SQL commands via unspecifi... |
| CVE-2015-8673 | — | — | 0.2% | Jan 12, 2016 | Huawei TE30, TE40, TE50, and TE60 multimedia video conferencing endpoints with software before V100R001C10SPC100 do not ... |
| CVE-2015-8672 | — | — | 0.9% | Jan 12, 2016 | The presentation transmission permission management mechanism in Huawei TE30, TE40, TE50, and TE60 multimedia video conf... |
| CVE-2015-8611 | — | — | 3.2% | Jan 12, 2016 | BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, DNS, Link Controller, and PEM 12.0.0 before HF1 on the 2000, 4000, 5000, 7000... |
| CVE-2015-8397 | HIGH | 8.2 | 3.6% | Jan 12, 2016 | The JPEGLSCodec::DecodeExtent function in MediaStorageAndFileFormat/gdcmJPEGLSCodec.cxx in Grassroots DICOM (aka GDCM) b... |
| CVE-2015-8396 | — | — | 16.8% | Jan 12, 2016 | Integer overflow in the ImageRegionReader::ReadIntoBuffer function in MediaStorageAndFileFormat/gdcmImageRegionReader.cx... |
| CVE-2015-7759 | — | — | 1.5% | Jan 12, 2016 | BIG-IP LTM, AAM, AFM, Analytics, APM, ASM, Link Controller, and PEM 12.0.0 before HF1, when the TCP profile for a virtua... |
| CVE-2015-7393 | — | — | 0.3% | Jan 12, 2016 | dcoep in BIG-IP LTM, Analytics, APM, ASM, and Link Controller 11.2.0 through 11.6.0 and 12.0.0 before 12.0.0 HF1, BIG-IP... |
| CVE-2015-8659 | — | — | 4.1% | Jan 12, 2016 | The idle stream handling in nghttp2 before 1.6.0 allows attackers to have unspecified impact via unknown vectors, aka a ... |
| CVE-2015-8603 | — | — | 1.2% | Jan 12, 2016 | Cross-site scripting (XSS) vulnerability in Serendipity before 2.0.3 allows remote attackers to inject arbitrary web scr... |
| CVE-2015-8400 | — | — | 2.0% | Jan 12, 2016 | The HTTPS fallback implementation in Shell In A Box (aka shellinabox) before 2.19 makes it easier for remote attackers t... |
| CVE-2015-8337 | — | — | 0.8% | Jan 12, 2016 | The HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B220SP01, GRA-CL00 before GRA-CL00C92B220, ... |
| CVE-2015-8306 | — | — | 1.1% | Jan 12, 2016 | Buffer overflow in the HIFI driver in Huawei P8 phones with software GRA-TL00 before GRA-TL00C01B230, GRA-CL00 before GR... |
| CVE-2015-8098 | — | — | 4.7% | Jan 12, 2016 | F5 BIG-IP APM 11.4.1 before 11.4.1 HF9, 11.5.x before 11.5.3, and 11.6.0 before 11.6.0 HF4 allow remote attackers to cau... |
| CVE-2015-8088 | — | — | 3.8% | Jan 12, 2016 | Heap-based buffer overflow in the HIFI driver in Huawei Mate 7 phones with software MT7-UL00 before MT7-UL00C17B354, MT7... |
| CVE-2015-7548 | — | — | 1.8% | Jan 12, 2016 | OpenStack Compute (Nova) before 2015.1.3 (kilo) and 12.0.x before 12.0.1 (liberty), when using libvirt to spawn instance... |
| CVE-2015-7242 | — | — | 1.5% | Jan 12, 2016 | Cross-site scripting (XSS) vulnerability in the Push-Service-Mails feature in AVM FRITZ!OS before 6.30 allows remote att... |
| CVE-2015-5471 | — | — | 32.7% | Jan 12, 2016 | Absolute path traversal vulnerability in include/user/download.php in the Swim Team plugin 1.44.10777 for WordPress allo... |
| CVE-2015-4703 | — | — | 2.9% | Jan 12, 2016 | Absolute path traversal vulnerability in mysqldump_download.php in the WordPress Rename plugin 1.0 for WordPress allows ... |
| CVE-2015-4671 | — | — | 1.5% | Jan 12, 2016 | Cross-site scripting (XSS) vulnerability in OpenCart before 2.1.0.2 allows remote attackers to inject arbitrary web scri... |
| CVE-2015-1779 | HIGH | 8.6 | 7.4% | Jan 12, 2016 | The VNC websocket frame decoder in QEMU allows remote attackers to cause a denial of service (memory and CPU consumption... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now