2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-1810 | — | — | 1.6% | Oct 16, 2015 | The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved... |
| CVE-2015-1808 | — | — | 1.6% | Oct 16, 2015 | Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plu... |
| CVE-2015-1807 | — | — | 1.8% | Oct 16, 2015 | Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with ... |
| CVE-2015-1806 | — | — | 2.5% | Oct 16, 2015 | The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users wi... |
| CVE-2015-6334 | — | — | 2.0% | Oct 16, 2015 | Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of... |
| CVE-2015-6333 | — | — | 0.4% | Oct 16, 2015 | Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involvi... |
| CVE-2015-6003 | — | — | 4.1% | Oct 16, 2015 | Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is... |
| CVE-2015-5660 | — | — | 1.0% | Oct 16, 2015 | Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authenti... |
| CVE-2015-4948 | — | — | 0.4% | Oct 16, 2015 | netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain pr... |
| CVE-2015-7840 | — | — | 4.2% | Oct 15, 2015 | The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers... |
| CVE-2015-7839 | — | — | 6.9% | Oct 15, 2015 | SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a ... |
| CVE-2015-7838 | — | — | 4.8% | Oct 15, 2015 | ProcessFileUpload.jsp in SolarWinds Storage Manager before 6.2 allows remote attackers to upload and execute arbitrary f... |
| CVE-2015-7730 | — | — | 3.6% | Oct 15, 2015 | SAP BusinessObjects BI Platform 4.1, BusinessObjects Edge 4.0, and BusinessObjects XI (BOXI) 3.1 R3 allow remote attacke... |
| CVE-2015-7729 | — | — | 1.5% | Oct 15, 2015 | Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418... |
| CVE-2015-7728 | — | — | 1.0% | Oct 15, 2015 | Cross-site scripting (XSS) vulnerability in user creation in the Web-based Development Workbench in SAP HANA DB 1.00.73.... |
| CVE-2015-7727 | — | — | 1.3% | Oct 15, 2015 | Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 (NewDB100... |
| CVE-2015-7726 | — | — | 1.0% | Oct 15, 2015 | Cross-site scripting (XSS) vulnerability in role deletion in the Web-based Development Workbench in SAP HANA DB 1.00.091... |
| CVE-2015-7725 | — | — | 1.7% | Oct 15, 2015 | Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allo... |
| CVE-2015-7361 | — | — | 3.4% | Oct 15, 2015 | FortiOS 5.2.3, when configured to use High Availability (HA) and the dedicated management interface is enabled, does not... |
| CVE-2015-6507 | — | — | 0.5% | Oct 15, 2015 | The hdbsql client 1.00.091.00 Build 1418659308-1530 in SAP HANA allows local users to cause a denial of service (memory ... |
| CVE-2015-7834 | — | — | 0.9% | Oct 15, 2015 | Multiple unspecified vulnerabilities in Google V8 before 4.6.85.23, as used in Google Chrome before 46.0.2490.71, allow ... |
| CVE-2015-7645 | HIGH | 7.8 | 68.4% | Oct 15, 2015 | Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535... |
| CVE-2015-6763 | — | — | 7.0% | Oct 15, 2015 | Multiple unspecified vulnerabilities in Google Chrome before 46.0.2490.71 allow attackers to cause a denial of service o... |
| CVE-2015-6762 | — | — | 1.7% | Oct 15, 2015 | The CSSFontFaceSrcValue::fetch function in core/css/CSSFontFaceSrcValue.cpp in the Cascading Style Sheets (CSS) implemen... |
| CVE-2015-6761 | — | — | 1.1% | Oct 15, 2015 | The update_dimensions function in libavcodec/vp8.c in FFmpeg through 2.8.1, as used in Google Chrome before 46.0.2490.71... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now