2015 CVE Vulnerabilities
8,786 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-2928 | HIGH | 7.5 | 1.4% | Jan 24, 2020 | The Hidden Service (HS) server implementation in Tor before 0.2.4.27, 0.2.5.x before 0.2.5.12, and 0.2.6.x before 0.2.6.... |
| CVE-2015-2689 | HIGH | 7.5 | 2.2% | Jan 24, 2020 | Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle pending-connection resolve states during period... |
| CVE-2015-2688 | HIGH | 7.5 | 2.2% | Jan 24, 2020 | buf_pullup in Tor before 0.2.4.26 and 0.2.5.x before 0.2.5.11 does not properly handle unexpected arrival times of buffe... |
| CVE-2015-1530 | HIGH | 7.8 | 0.4% | Jan 24, 2020 | media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary code with media_serve... |
| CVE-2015-1525 | MEDIUM | 5.5 | 0.3% | Jan 24, 2020 | audio/AudioPolicyManagerBase.cpp in Android before 5.1 allows attackers to cause a denial of service (audio_policy appli... |
| CVE-2015-4042 | CRITICAL | 9.8 | 2.3% | Jan 24, 2020 | Integer overflow in the keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 might allow attackers to ... |
| CVE-2015-4041 | HIGH | 7.8 | 0.5% | Jan 24, 2020 | The keycompare_mb function in sort.c in sort in GNU Coreutils through 8.23 on 64-bit platforms performs a size calculati... |
| CVE-2015-5333 | HIGH | 7.5 | 2.0% | Jan 23, 2020 | Memory leak in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of service (m... |
| CVE-2015-5745 | MEDIUM | 6.5 | 3.0% | Jan 23, 2020 | Buffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2.4.0 allows guest users ... |
| CVE-2015-5334 | CRITICAL | 9.8 | 3.5% | Jan 23, 2020 | Off-by-one error in the OBJ_obj2txt function in LibreSSL before 2.3.1 allows remote attackers to cause a denial of servi... |
| CVE-2015-5278 | MEDIUM | 6.5 | 2.3% | Jan 23, 2020 | The ne2000_receive function in hw/net/ne2000.c in QEMU before 2.4.0.1 allows attackers to cause a denial of service (inf... |
| CVE-2015-5239 | MEDIUM | 6.5 | 3.6% | Jan 23, 2020 | Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process c... |
| CVE-2015-2784 | CRITICAL | 9.8 | 1.8% | Jan 21, 2020 | The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input. |
| CVE-2015-1861 | — | — | — | Jan 21, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2015-6907 | — | — | — | Jan 21, 2020 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. No... |
| CVE-2015-6591 | MEDIUM | 5.5 | 0.6% | Jan 15, 2020 | Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and ea... |
| CVE-2015-1811 | HIGH | 7.5 | 1.4% | Jan 15, 2020 | XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers... |
| CVE-2015-1809 | HIGH | 7.5 | 1.4% | Jan 15, 2020 | XML external entity (XXE) vulnerability in CloudBees Jenkins before 1.600 and LTS before 1.596.1 allows remote attackers... |
| CVE-2015-5072 | MEDIUM | 6.5 | 1.7% | Jan 15, 2020 | The BIRT Engine servlet in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote... |
| CVE-2015-5071 | MEDIUM | 6.5 | 1.8% | Jan 15, 2020 | AR System Mid Tier in the AR System Mid Tier component before 9.0 SP1 for BMC Remedy AR System Server allows remote auth... |
| CVE-2015-6497 | HIGH | 8.8 | 7.4% | Jan 15, 2020 | The create function in app/code/core/Mage/Catalog/Model/Product/Api/V2.php in Magento Community Edition (CE) before 1.9.... |
| CVE-2015-5952 | CRITICAL | 9.8 | 3.4% | Jan 15, 2020 | Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary f... |
| CVE-2015-5230 | HIGH | 7.5 | 9.0% | Jan 15, 2020 | The DNS packet parsing/generation code in PowerDNS (aka pdns) Authoritative Server 3.4.x before 3.4.6 allows remote atta... |
| CVE-2015-7874 | CRITICAL | 9.8 | 13.9% | Jan 15, 2020 | Buffer overflow in the chat server in KiTTY Portable 0.65.0.2p and earlier allows remote attackers to execute arbitrary ... |
| CVE-2015-5484 | MEDIUM | 5.4 | 1.4% | Jan 15, 2020 | Cross-site scripting (XSS) vulnerability in the Plotly plugin before 1.0.3 for WordPress allows remote authenticated use... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now