2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-3196 | — | — | 12.8% | Dec 6, 2015 | ssl/s3_clnt.c in OpenSSL 1.0.0 before 1.0.0t, 1.0.1 before 1.0.1p, and 1.0.2 before 1.0.2d, when used for a multi-thread... |
| CVE-2015-3195 | MEDIUM | 5.3 | 38.7% | Dec 6, 2015 | The ASN1_TFLG_COMBINE implementation in crypto/asn1/tasn_dec.c in OpenSSL before 0.9.8zh, 1.0.0 before 1.0.0t, 1.0.1 bef... |
| CVE-2015-3194 | HIGH | 7.5 | 44.0% | Dec 6, 2015 | crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial ... |
| CVE-2015-3193 | HIGH | 7.5 | 25.1% | Dec 6, 2015 | The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 pla... |
| CVE-2015-1794 | — | — | 6.2% | Dec 6, 2015 | The ssl3_get_key_exchange function in ssl/s3_clnt.c in OpenSSL 1.0.2 before 1.0.2e allows remote servers to cause a deni... |
| CVE-2015-8480 | — | — | 1.3% | Dec 6, 2015 | The VideoFramePool::PoolImpl::CreateFrame function in media/base/video_frame_pool.cc in Google Chrome before 47.0.2526.7... |
| CVE-2015-8479 | — | — | 0.6% | Dec 6, 2015 | Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc... |
| CVE-2015-8478 | — | — | 0.6% | Dec 6, 2015 | Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.73, allow ... |
| CVE-2015-6787 | — | — | 8.1% | Dec 6, 2015 | Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.73 allow attackers to cause a denial of service o... |
| CVE-2015-6786 | — | — | 1.7% | Dec 6, 2015 | The CSPSourceList::matches function in WebKit/Source/core/frame/csp/CSPSourceList.cpp in the Content Security Policy (CS... |
| CVE-2015-6785 | — | — | 1.7% | Dec 6, 2015 | The CSPSource::hostMatches function in WebKit/Source/core/frame/csp/CSPSource.cpp in the Content Security Policy (CSP) i... |
| CVE-2015-6784 | — | — | 1.7% | Dec 6, 2015 | The page serializer in Google Chrome before 47.0.2526.73 mishandles Mark of the Web (MOTW) comments for URLs containing ... |
| CVE-2015-6783 | — | — | 1.2% | Dec 6, 2015 | The FindStartOffsetOfFileInZipFile function in crazy_linker_zip.cpp in crazy_linker (aka Crazy Linker) in Android 5.x an... |
| CVE-2015-6782 | — | — | 1.1% | Dec 6, 2015 | The Document::open function in WebKit/Source/core/dom/Document.cpp in Google Chrome before 47.0.2526.73 does not ensure ... |
| CVE-2015-6781 | — | — | 1.6% | Dec 6, 2015 | Integer overflow in the FontData::Bound function in data/font_data.cc in Google sfntly, as used in Google Chrome before ... |
| CVE-2015-6780 | — | — | 1.1% | Dec 6, 2015 | Use-after-free vulnerability in the Infobars implementation in Google Chrome before 47.0.2526.73 allows remote attackers... |
| CVE-2015-6779 | — | — | 2.0% | Dec 6, 2015 | PDFium, as used in Google Chrome before 47.0.2526.73, does not properly restrict use of chrome: URLs, which allows remot... |
| CVE-2015-6778 | — | — | 1.7% | Dec 6, 2015 | The CJBig2_SymbolDict class in fxcodec/jbig2/JBig2_SymbolDict.cpp in PDFium, as used in Google Chrome before 47.0.2526.7... |
| CVE-2015-6777 | — | — | 1.6% | Dec 6, 2015 | Use-after-free vulnerability in the ContainerNode::notifyNodeInsertedInternal function in WebKit/Source/core/dom/Contain... |
| CVE-2015-6776 | — | — | 1.5% | Dec 6, 2015 | The opj_dwt_decode_1* functions in dwt.c in OpenJPEG, as used in PDFium in Google Chrome before 47.0.2526.73, allow remo... |
| CVE-2015-6775 | — | — | 2.1% | Dec 6, 2015 | fpdfsdk/src/jsapi/fxjs_v8.cpp in PDFium, as used in Google Chrome before 47.0.2526.73, does not use signatures, which al... |
| CVE-2015-6774 | — | — | 1.5% | Dec 6, 2015 | Use-after-free vulnerability in the GetLoadTimes function in renderer/loadtimes_extension_bindings.cc in the Extensions ... |
| CVE-2015-6773 | — | — | 1.7% | Dec 6, 2015 | The convolution implementation in Skia, as used in Google Chrome before 47.0.2526.73, does not properly constrain row le... |
| CVE-2015-6772 | — | — | 1.6% | Dec 6, 2015 | The DOM implementation in Blink, as used in Google Chrome before 47.0.2526.73, does not prevent javascript: URL navigati... |
| CVE-2015-6771 | — | — | 2.1% | Dec 6, 2015 | js/array.js in Google V8, as used in Google Chrome before 47.0.2526.73, improperly implements certain map and filter ope... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now