2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-7031 | — | — | 2.0% | Oct 23, 2015 | The Web Service component in Apple OS X Server before 5.0.15 omits an unspecified HTTP header configuration, which allow... |
| CVE-2015-7030 | — | — | 1.6% | Oct 23, 2015 | The Swift implementation in Apple Xcode before 7.1 mishandles type conversion, which has unspecified impact and attack v... |
| CVE-2015-7022 | — | — | 1.3% | Oct 23, 2015 | The Telephony subsystem in Apple iOS before 9.1 allows attackers to obtain sensitive call-status information via a craft... |
| CVE-2015-7017 | — | — | 3.6% | Oct 23, 2015 | CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbit... |
| CVE-2015-7005 | — | — | 2.2% | Oct 23, 2015 | WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service ... |
| CVE-2015-7004 | — | — | 1.6% | Oct 23, 2015 | The kernel in Apple iOS before 9.1 allows attackers to cause a denial of service via a crafted app. |
| CVE-2015-7000 | — | — | 0.4% | Oct 23, 2015 | Notification Center in Apple iOS before 9.1 mishandles changes to "Show on Lock Screen" settings, which allows physicall... |
| CVE-2015-6999 | — | — | 1.2% | Oct 23, 2015 | The OCSP client in Apple iOS before 9.1 does not check for certificate expiry, which allows remote attackers to spoof a ... |
| CVE-2015-6997 | — | — | 0.9% | Oct 23, 2015 | The X.509 certificate-trust implementation in Apple iOS before 9.1 does not recognize that the kSecRevocationRequirePosi... |
| CVE-2015-6992 | — | — | 3.7% | Oct 23, 2015 | CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbit... |
| CVE-2015-6986 | — | — | 2.5% | Oct 23, 2015 | com.apple.driver.AppleVXD393 in the Graphics Driver subsystem in Apple iOS before 9.1 allows attackers to execute arbitr... |
| CVE-2015-6982 | — | — | 2.2% | Oct 23, 2015 | WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service ... |
| CVE-2015-6981 | — | — | 2.2% | Oct 23, 2015 | WebKit, as used in Apple iOS before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service ... |
| CVE-2015-6979 | — | — | 2.7% | Oct 23, 2015 | GasGauge in Apple iOS before 9.1 allows attackers to execute arbitrary code in a privileged context or cause a denial of... |
| CVE-2015-6975 | — | — | 3.7% | Oct 23, 2015 | CoreText in Apple iOS before 9.1, OS X before 10.11.1, and iTunes before 12.3.1 allows remote attackers to execute arbit... |
| CVE-2015-4917 | — | — | 1.2% | Oct 22, 2015 | Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote au... |
| CVE-2015-4916 | — | — | 3.7% | Oct 22, 2015 | Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via... |
| CVE-2015-4915 | — | — | 3.1% | Oct 22, 2015 | Unspecified vulnerability in the Integrated Lights Out Manager (ILOM) component in Oracle Sun Systems Products Suite 3.0... |
| CVE-2015-4914 | — | — | 1.3% | Oct 22, 2015 | Unspecified vulnerability in the Oracle HTTP Server component in Oracle Fusion Middleware 10.1.3.5, 11.1.1.7, 11.1.1.9, ... |
| CVE-2015-4913 | — | — | 3.5% | Oct 22, 2015 | Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier and 5.6.26 and earlier allows remote authenticated u... |
| CVE-2015-4912 | — | — | 1.7% | Oct 22, 2015 | Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.2.2 and 11.1.2.3 allow... |
| CVE-2015-4911 | — | — | 4.5% | Oct 22, 2015 | Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60; Java SE Embedded 8u51; and JRockit R28.3.7 allows rem... |
| CVE-2015-4910 | — | — | 2.0% | Oct 22, 2015 | Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availabi... |
| CVE-2015-4909 | — | — | 1.6% | Oct 22, 2015 | Unspecified vulnerability in the Oracle JDeveloper component in Oracle Fusion Middleware 11.1.2.4.0, 12.1.2.0.0, and 12.... |
| CVE-2015-4908 | — | — | 3.0% | Oct 22, 2015 | Unspecified vulnerability in Oracle Java SE 8u60 and JavaFX 2.2.85 allows remote attackers to affect confidentiality via... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now