2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-7876 | — | — | 2.5% | Oct 21, 2015 | The escapeLike function in sqlsrv/database.inc in the Drupal 7 driver for SQL Server and SQL Azure 7.x-1.x before 7.x-1.... |
| CVE-2015-7863 | — | — | 1.7% | Oct 19, 2015 | The default configuration of Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9... |
| CVE-2015-7862 | — | — | 1.5% | Oct 19, 2015 | Persistent Accelerite Radia Client Automation (formerly HP Client Automation) 7.9 through 9.1 before 2015-02-19 improper... |
| CVE-2015-7861 | — | — | 5.4% | Oct 19, 2015 | Persistent Accelerite Radia Client Automation (formerly HP Client Automation), possibly before 9.1, allows remote attack... |
| CVE-2015-7860 | — | — | 6.1% | Oct 19, 2015 | Stack-based buffer overflow in the agent in Persistent Accelerite Radia Client Automation (formerly HP Client Automation... |
| CVE-2015-7752 | — | — | 1.9% | Oct 19, 2015 | The SSH server in Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 befo... |
| CVE-2015-7751 | — | — | 0.4% | Oct 19, 2015 | Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R9, 12.3X48... |
| CVE-2015-7750 | — | — | 2.0% | Oct 19, 2015 | The L2TP packet processing functionality in Juniper Netscreen and ScreenOS Firewall products with ScreenOS before 6.3.0r... |
| CVE-2015-7749 | — | — | 2.2% | Oct 19, 2015 | The PFE daemon in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a den... |
| CVE-2015-7748 | — | — | 2.8% | Oct 19, 2015 | Juniper chassis with Trio (Trinity) chipset line cards and Junos OS 13.3 before 13.3R8, 14.1 before 14.1R6, 14.2 before ... |
| CVE-2015-7833 | — | — | 0.7% | Oct 19, 2015 | The usbvision driver in the Linux kernel package 3.10.0-123.20.1.el7 through 3.10.0-229.14.1.el7 in Red Hat Enterprise L... |
| CVE-2015-7799 | — | — | 0.7% | Oct 19, 2015 | The slhc_init function in drivers/net/slip/slhc.c in the Linux kernel through 4.2.3 does not ensure that certain slot nu... |
| CVE-2015-7613 | — | — | 0.4% | Oct 19, 2015 | Race condition in the IPC object implementation in the Linux kernel through 4.2.3 allows local users to gain privileges ... |
| CVE-2015-6937 | — | — | 0.5% | Oct 19, 2015 | The __rds_conn_create function in net/rds/connection.c in the Linux kernel through 4.2.3 allows local users to cause a d... |
| CVE-2015-6252 | — | — | 0.4% | Oct 19, 2015 | The vhost_dev_ioctl function in drivers/vhost/vhost.c in the Linux kernel before 4.1.5 allows local users to cause a den... |
| CVE-2015-5707 | — | — | 0.5% | Oct 19, 2015 | Integer overflow in the sg_start_req function in drivers/scsi/sg.c in the Linux kernel 2.6.x through 4.x before 4.1 allo... |
| CVE-2015-5283 | — | — | 0.5% | Oct 19, 2015 | The sctp_init function in net/sctp/protocol.c in the Linux kernel before 4.2.3 has an incorrect sequence of protocol-ini... |
| CVE-2015-5156 | — | — | 1.2% | Oct 19, 2015 | The virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to support a FRAGLIST fea... |
| CVE-2015-0275 | — | — | 0.5% | Oct 19, 2015 | The ext4_zero_range function in fs/ext4/extents.c in the Linux kernel before 4.1 allows local users to cause a denial of... |
| CVE-2015-7034 | — | — | 2.8% | Oct 18, 2015 | The Apple iWork application before 2.6 for iOS and Apple Pages before 5.6 allow remote attackers to execute arbitrary co... |
| CVE-2015-7033 | — | — | 2.9% | Oct 18, 2015 | The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers befo... |
| CVE-2015-7032 | — | — | 2.0% | Oct 18, 2015 | The Apple iWork application before 2.6 for iOS, Apple Keynote before 6.6, Apple Pages before 5.6, and Apple Numbers befo... |
| CVE-2015-6482 | — | — | 2.1% | Oct 18, 2015 | Runtime Toolkit before 2.4.7.48 in 3S-Smart CODESYS before 2.3.9.48 allows remote attackers to cause a denial of service... |
| CVE-2015-6477 | MEDIUM | 6.1 | 12.0% | Oct 18, 2015 | Multiple cross-site scripting (XSS) vulnerabilities in the Wind Farm Portal application in Nordex Control 2 (NC2) SCADA ... |
| CVE-2015-5661 | — | — | 0.9% | Oct 18, 2015 | The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers t... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now