2015 CVE Vulnerabilities
8,779 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-2695 | — | — | 6.2% | Nov 9, 2015 | lib/gssapi/spnego/spnego_mech.c in MIT Kerberos 5 (aka krb5) before 1.14 relies on an inappropriate context handle, whic... |
| CVE-2015-7412 | — | — | 1.0% | Nov 8, 2015 | The GatewayScript modules on IBM DataPower Gateways with software 7.2.0.x before 7.2.0.1, when the GatewayScript decrypt... |
| CVE-2015-5044 | — | — | 0.5% | Nov 8, 2015 | The Flow Collector in IBM Security QRadar QFLOW 7.1.x before 7.1 MR2 Patch 11 IF3 and 7.2.x before 7.2.5 Patch 4 IF3 all... |
| CVE-2015-5043 | — | — | 0.3% | Nov 8, 2015 | diag in IBM Security Guardium 8.2 before p6015, 9.0 before p6015, 9.1, 9.5, and 10.0 before p6015 allows local users to ... |
| CVE-2015-5019 | — | — | 0.9% | Nov 8, 2015 | IBM Sterling Integrator 5.1 before 5010004_8 and Sterling B2B Integrator 5.2 before 5020500_9 allow remote authenticated... |
| CVE-2015-5015 | — | — | 2.1% | Nov 8, 2015 | IBM WebSphere Commerce Enterprise 7.0.0.9 and 8.x before Feature Pack 8 allows remote attackers to obtain sensitive info... |
| CVE-2015-5005 | — | — | 1.7% | Nov 8, 2015 | CSPOC in IBM PowerHA SystemMirror on AIX 6.1 and 7.1 allows remote authenticated users to perform an "su root" action by... |
| CVE-2015-4966 | — | — | 1.5% | Nov 8, 2015 | IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.9 FP009, and 7.6.0 before 7.6.0.2 IFIX001; Maximo A... |
| CVE-2015-4963 | — | — | 3.3% | Nov 8, 2015 | IBM Security Access Manager for Web 7.x before 7.0.0.16 and 8.x before 8.0.1.3 mishandles WebSEAL HTTPTransformation req... |
| CVE-2015-4940 | — | — | 0.7% | Nov 8, 2015 | Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, stores a cleartext BigSheets password in... |
| CVE-2015-4928 | — | — | 2.8% | Nov 8, 2015 | Apache Ambari before 2.1, as used in IBM Infosphere BigInsights 4.x before 4.1, includes cleartext passwords on a Config... |
| CVE-2015-2017 | — | — | 1.9% | Nov 8, 2015 | CRLF injection vulnerability in IBM WebSphere Application Server (WAS) 6.1 through 6.1.0.47, 7.0 before 7.0.0.39, 8.0 be... |
| CVE-2015-1999 | — | — | 1.2% | Nov 8, 2015 | IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 places session IDs in https URLs, which allows remote ... |
| CVE-2015-1997 | — | — | 0.6% | Nov 8, 2015 | Cross-site request forgery (CSRF) vulnerability in IBM Security QRadar Vulnerability Manager 7.2.x before 7.2.5 Patch 5 ... |
| CVE-2015-1996 | — | — | 0.3% | Nov 8, 2015 | IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not prevent caching of HTTPS responses, which all... |
| CVE-2015-1995 | — | — | 1.0% | Nov 8, 2015 | Multiple cross-site scripting (XSS) vulnerabilities in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5... |
| CVE-2015-1994 | — | — | 1.2% | Nov 8, 2015 | IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not include the HTTPOnly flag in a Set-Cookie hea... |
| CVE-2015-1993 | — | — | 1.2% | Nov 8, 2015 | IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 does not set the secure flag for unspecified cookies i... |
| CVE-2015-1989 | — | — | 1.0% | Nov 8, 2015 | SQL injection vulnerability in IBM Security QRadar Incident Forensics 7.2.x before 7.2.5 Patch 5 allows remote authentic... |
| CVE-2015-7395 | — | — | 1.0% | Nov 8, 2015 | IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX005, and 7.6.0 before 7.6.0.2 FP002; Maximo A... |
| CVE-2015-7254 | — | — | 27.5% | Nov 7, 2015 | Directory traversal vulnerability on Huawei HG532e, HG532n, and HG532s devices allows remote attackers to read arbitrary... |
| CVE-2015-6476 | — | — | 2.3% | Nov 7, 2015 | Advantech EKI-122x-BE devices with firmware before 1.65, EKI-132x devices with firmware before 1.98, and EKI-136x device... |
| CVE-2015-8082 | — | — | 1.6% | Nov 6, 2015 | The Login Disable module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly load the user_lo... |
| CVE-2015-8081 | — | — | 1.2% | Nov 6, 2015 | The Field as Block module 7.x-1.x before 7.x-1.4 for Drupal might allow remote attackers to obtain sensitive field infor... |
| CVE-2015-7809 | — | — | 3.4% | Nov 6, 2015 | The displayBlock function Template.php in Sensio Labs Twig before 1.20.0, when Sandbox mode is enabled, allows remote at... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now