2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-6623 | — | — | 0.6% | Dec 8, 2015 | Wi-Fi in Android 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by... |
| CVE-2015-6622 | — | — | 0.5% | Dec 8, 2015 | The Native Frameworks Library in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensit... |
| CVE-2015-6621 | — | — | 0.6% | Dec 8, 2015 | SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted ... |
| CVE-2015-6620 | — | — | 1.7% | Dec 8, 2015 | libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafte... |
| CVE-2015-6619 | — | — | 0.7% | Dec 8, 2015 | The kernel in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted ap... |
| CVE-2015-6618 | — | — | 0.4% | Dec 8, 2015 | Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to execute arbitrary code by ... |
| CVE-2015-6617 | — | — | 2.3% | Dec 8, 2015 | Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary cod... |
| CVE-2015-6616 | — | — | 1.9% | Dec 8, 2015 | mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code o... |
| CVE-2015-8482 | — | — | 0.3% | Dec 7, 2015 | Blue Coat Unified Agent before 4.6.2 does not prevent modification of its configuration files when running in local enfo... |
| CVE-2015-8213 | — | — | 4.3% | Dec 7, 2015 | The get_format function in utils/formats.py in Django before 1.7.x before 1.7.11, 1.8.x before 1.8.7, and 1.9.x before 1... |
| CVE-2015-8131 | — | — | 0.9% | Dec 7, 2015 | Cross-site request forgery (CSRF) vulnerability in Elasticsearch Kibana before 4.1.3 and 4.2.x before 4.2.1 allows remot... |
| CVE-2015-8125 | — | — | 2.5% | Dec 7, 2015 | Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, and 2.7.x before 2.7.7 might allow remote attackers to have unspecifie... |
| CVE-2015-8124 | — | — | 2.7% | Dec 7, 2015 | Session fixation vulnerability in the "Remember Me" login feature in Symfony 2.3.x before 2.3.35, 2.6.x before 2.6.12, a... |
| CVE-2015-8084 | — | — | 0.9% | Dec 7, 2015 | Huawei USG5500, USG2100, USG2200, and USG5100 unified security gateways with software before V300R001C10SPC600, when "DH... |
| CVE-2015-7348 | — | — | 1.9% | Dec 7, 2015 | Cross-site scripting (XSS) vulnerability in zTree 3.5.19.1 and possibly earlier allows remote attackers to inject arbitr... |
| CVE-2015-5309 | — | — | 3.5% | Dec 7, 2015 | Integer overflow in the terminal emulator in PuTTY before 0.66 allows remote attackers to cause a denial of service (mem... |
| CVE-2015-5006 | — | — | 0.5% | Dec 7, 2015 | IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR2, 7 R1 before SR3 FP20, 7 before SR9 FP20, ... |
| CVE-2015-4334 | — | — | 3.3% | Dec 7, 2015 | The default configuration of SGOS in Blue Coat ProxySG before 6.2.16.5, 6.5 before 6.5.7.1, and 6.6 before 6.6.2.1 forwa... |
| CVE-2015-3628 | — | — | 68.5% | Dec 7, 2015 | The iControl API in F5 BIG-IP LTM, AFM, Analytics, APM, ASM, Link Controller, and PEM 11.3.0 before 11.5.3 HF2 and 11.6.... |
| CVE-2015-3276 | HIGH | 7.5 | 5.3% | Dec 7, 2015 | The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyw... |
| CVE-2015-1344 | — | — | 0.4% | Dec 7, 2015 | The do_write_pids function in lxcfs.c in LXCFS before 0.12 does not properly check permissions, which allows local users... |
| CVE-2015-1342 | — | — | 0.5% | Dec 7, 2015 | LXCFS before 0.12 does not properly enforce directory escapes, which might allow local users to gain privileges by (1) q... |
| CVE-2015-5302 | — | — | 2.8% | Dec 7, 2015 | libreport 2.0.7 before 2.6.3 only saves changes to the first file when editing a crash report, which allows remote attac... |
| CVE-2015-5287 | HIGH | 7.8 | 3.4% | Dec 7, 2015 | The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain perm... |
| CVE-2015-5273 | — | — | 0.9% | Dec 7, 2015 | The abrt-action-install-debuginfo-to-abrt-cache help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows ... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now