2015 CVE Vulnerabilities

8,787 CVEs published in 2015.

CVE IDSeverityCVSSDescription
CVE-2015-6846——EMC SourceOne Email Supervisor before 7.2 uses hardcoded encryption keys, which makes it easier for attackers to obtain ...
CVE-2015-6845——EMC SourceOne Email Supervisor before 7.2 does not properly employ random values for session IDs, which makes it easier ...
CVE-2015-6844——Cross-site scripting (XSS) vulnerability in Reviewer in EMC SourceOne Email Supervisor before 7.2 allows remote attacker...
CVE-2015-6843——Reviewer in EMC SourceOne Email Supervisor before 7.2 does not properly limit attempts to authenticate, which makes it e...
CVE-2015-7648——Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux all...
CVE-2015-7647——Adobe Flash Player before 18.0.0.255 and 19.x before 19.0.0.226 on Windows and OS X and before 11.2.202.540 on Linux all...
CVE-2015-7642——Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and ...
CVE-2015-7641——Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and ...
CVE-2015-7640——Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and ...
CVE-2015-7639——Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and ...
CVE-2015-7638——Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and ...
CVE-2015-7637——Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and ...
CVE-2015-7636——Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and ...
CVE-2015-7635——Use-after-free vulnerability in Adobe Flash Player before 18.0.0.252 and 19.x before 19.0.0.207 on Windows and OS X and ...
CVE-2015-7184——The fetch API implementation in Mozilla Firefox before 41.0.2 does not restrict access to the HTTP response body in cert...
CVE-2015-5662——Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files...
CVE-2015-5444——Multiple cross-site scripting (XSS) vulnerabilities in HP Smart Profile Server Data Analytics Layer (SPS DAL) 2.3 before...
CVE-2015-7856——OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access b...
CVE-2015-7683——Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administra...
CVE-2015-7682——Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for Wor...
CVE-2015-7377——Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for W...
CVE-2015-5742——VeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0 update 3 stores local administrator credentials in log file...
CVE-2015-1814——The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges ...
CVE-2015-1813——Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to injec...
CVE-2015-1812——Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to injec...

Check if your code is affected by 2015 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now