2015 CVE Vulnerabilities
8,786 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-7341 | HIGH | 8.8 | 1.1% | Mar 9, 2020 | JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .p... |
| CVE-2015-7340 | HIGH | 7.2 | 1.0% | Mar 9, 2020 | JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action. |
| CVE-2015-7339 | HIGH | 8.8 | 1.1% | Mar 9, 2020 | JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com... |
| CVE-2015-7338 | HIGH | 7.2 | 1.0% | Mar 9, 2020 | SQL Injection exists in AcyMailing Joomla Component before 4.9.5 via exportgeolocorder in a geolocation_longitude reques... |
| CVE-2015-7968 | MEDIUM | 4.3 | 0.6% | Mar 9, 2020 | nwbc_ext2int in SAP NetWeaver Application Server before Security Note 2183189 allows XXE attacks for local file inclusio... |
| CVE-2015-7344 | MEDIUM | 4.8 | 0.5% | Mar 9, 2020 | HikaShop Joomla Component before 2.6.0 has XSS via an injected payload[/caption]. |
| CVE-2015-7343 | MEDIUM | 4.8 | 0.5% | Mar 9, 2020 | JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter. |
| CVE-2015-1583 | HIGH | 8.8 | 1.2% | Mar 2, 2020 | Multiple cross-site request forgery (CSRF) vulnerabilities in ATutor 2.2 allow remote attackers to hijack the authentica... |
| CVE-2015-5361 | MEDIUM | 6.5 | 0.5% | Feb 28, 2020 | Background For regular, unencrypted FTP traffic, the FTP ALG can inspect the unencrypted control channel and open relate... |
| CVE-2015-3006 | MEDIUM | 6.5 | 0.8% | Feb 28, 2020 | On the QFX3500 and QFX3600 platforms, the number of bytes collected from the RANDOM_INTERRUPT entropy source when the de... |
| CVE-2015-2992 | MEDIUM | 6.1 | 7.2% | Feb 27, 2020 | Apache Struts before 2.3.20 has a cross-site scripting (XSS) vulnerability. |
| CVE-2015-5686 | HIGH | 8.8 | 0.5% | Feb 27, 2020 | Parts of the Puppet Enterprise Console 3.x were found to be susceptible to clickjacking and CSRF (Cross-Site Request For... |
| CVE-2015-5201 | HIGH | 7.5 | 1.5% | Feb 25, 2020 | VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x be... |
| CVE-2015-0565 | CRITICAL | 10 | 13.3% | Feb 25, 2020 | NaCl in 2015 allowed the CLFLUSH instruction, making rowhammer attacks possible. |
| CVE-2015-9542 | HIGH | 7.5 | 3.4% | Feb 24, 2020 | add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is ... |
| CVE-2015-4411 | HIGH | 7.5 | 6.4% | Feb 20, 2020 | The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attacker... |
| CVE-2015-4410 | HIGH | 7.5 | 5.7% | Feb 20, 2020 | The Moped::BSON::ObjecId.legal? method in rubygem-moped before commit dd5a7c14b5d2e466f7875d079af71ad19774609b allows re... |
| CVE-2015-2923 | MEDIUM | 6.5 | 1.4% | Feb 20, 2020 | The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD through 10.1 allows remote attackers to... |
| CVE-2015-7747 | HIGH | 8.8 | 8.8% | Feb 19, 2020 | Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted... |
| CVE-2015-2104 | — | — | — | Feb 19, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Fu... |
| CVE-2015-9543 | LOW | 3.3 | 0.4% | Feb 19, 2020 | An issue was discovered in OpenStack Nova before 18.2.4, 19.x before 19.1.0, and 20.x before 20.1.0. It can leak console... |
| CVE-2015-0749 | MEDIUM | 6.1 | 0.8% | Feb 19, 2020 | A vulnerability in Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to conduct a cro... |
| CVE-2015-7507 | HIGH | 7.5 | 2.0% | Feb 18, 2020 | libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a ... |
| CVE-2015-7567 | CRITICAL | 9.8 | 3.7% | Feb 18, 2020 | SQL injection vulnerability in Yeager CMS 1.2.1 allows remote attackers to execute arbitrary SQL commands via the "passw... |
| CVE-2015-7505 | HIGH | 8.8 | 2.8% | Feb 18, 2020 | Stack-based buffer overflow in the gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attack... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now