2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-2424 | HIGH | 8.8 | 38.5% | Jul 14, 2015 | Microsoft PowerPoint 2007 SP3, Word 2007 SP3, PowerPoint 2010 SP2, Word 2010 SP2, PowerPoint 2013 SP1, Word 2013 SP1, an... |
| CVE-2015-2419 | HIGH | 8.8 | 44.5% | Jul 14, 2015 | JScript 9 in Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial o... |
| CVE-2015-1916 | HIGH | 7.5 | 2.7% | Jul 2, 2015 | Unspecified vulnerability in IBM Java 8 before SR1 allows remote attackers to cause a denial of service via unknown vect... |
| CVE-2015-2360 | HIGH | 8.8 | 15.0% | Jun 10, 2015 | win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server... |
| CVE-2015-1770 | HIGH | 8.8 | 35.1% | Jun 10, 2015 | Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office documen... |
| CVE-2015-3629 | HIGH | 7.8 | 0.6% | May 18, 2015 | Libcontainer 1.6.0, as used in Docker Engine, allows local users to escape containerization ("mount namespace breakout")... |
| CVE-2015-1671 | HIGH | 7.8 | 54.6% | May 13, 2015 | The Windows DirectWrite library, as used in Microsoft .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, and 4.5.2; Offi... |
| CVE-2015-3035 | HIGH | 7.5 | 83.8% | Apr 22, 2015 | Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before ... |
| CVE-2015-1701 | HIGH | 7.8 | 56.2% | Apr 21, 2015 | Win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows local ... |
| CVE-2015-0970 | HIGH | 8.8 | 1.0% | Apr 18, 2015 | Cross-site request forgery (CSRF) vulnerability in SearchBlox before 8.2 allows remote attackers to hijack the authentic... |
| CVE-2015-1641 | HIGH | 7.8 | 97.3% | Apr 14, 2015 | Microsoft Word 2007 SP3, Office 2010 SP2, Word 2010 SP2, Word 2013 SP1, Word 2013 RT SP1, Word for Mac 2011, Office Comp... |
| CVE-2015-1130 | HIGH | 7.8 | 9.9% | Apr 10, 2015 | The XPC implementation in Admin Framework in Apple OS X before 10.10.3 allows local users to bypass authentication and o... |
| CVE-2015-1098 | HIGH | 7.3 | 1.9% | Apr 10, 2015 | iWork in Apple iOS before 8.3 and Apple OS X before 10.10.3 allows remote attackers to execute arbitrary code or cause a... |
| CVE-2015-0666 | HIGH | 7.5 | 40.6% | Apr 3, 2015 | Directory traversal vulnerability in the fmserver servlet in Cisco Prime Data Center Network Manager (DCNM) before 7.1(1... |
| CVE-2015-2177 | HIGH | 7.5 | 34.4% | Mar 7, 2015 | Siemens SIMATIC S7-300 CPU devices allow remote attackers to cause a denial of service (defect-mode transition) via craf... |
| CVE-2015-2051 | HIGH | 8.8 | 97.1% | Feb 23, 2015 | The D-Link DIR-645 Wired/Wireless Router Rev. Ax with firmware 1.04b12 and earlier allows remote attackers to execute ar... |
| CVE-2015-0310 | HIGH | 7.8 | 15.2% | Jan 23, 2015 | Adobe Flash Player before 13.0.0.262 and 14.x through 16.x before 16.0.0.287 on Windows and OS X and before 11.2.202.438... |
| CVE-2015-0973 | HIGH | 8.8 | 4.3% | Jan 18, 2015 | Buffer overflow in the png_read_IDAT_data function in pngrutil.c in libpng before 1.5.21 and 1.6.x before 1.6.16 allows ... |
| CVE-2015-0016 | HIGH | 7.8 | 75.9% | Jan 13, 2015 | Directory traversal vulnerability in the TS WebProxy (aka TSWbPrxy) component in Microsoft Windows Vista SP2, Windows 7 ... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now