2015 CVE Vulnerabilities
8,779 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-4669 | — | — | 1.1% | Sep 25, 2017 | The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the sy... |
| CVE-2015-4668 | — | — | 6.7% | Sep 25, 2017 | Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sit... |
| CVE-2015-4667 | — | — | 11.1% | Sep 25, 2017 | Multiple hardcoded credentials in Xsuite 2.x. |
| CVE-2015-3887 | — | — | 0.5% | Sep 21, 2017 | Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan hors... |
| CVE-2015-5284 | — | — | 1.0% | Sep 21, 2017 | ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem,... |
| CVE-2015-4706 | — | — | 1.6% | Sep 21, 2017 | Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web scrip... |
| CVE-2015-3296 | — | — | 1.3% | Sep 21, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web ... |
| CVE-2015-0276 | — | — | 0.7% | Sep 21, 2017 | Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2. |
| CVE-2015-9232 | — | — | 0.9% | Sep 20, 2017 | The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Deleg... |
| CVE-2015-9231 | — | — | 2.2% | Sep 20, 2017 | iTerm2 3.x before 3.1.1 allows remote attackers to discover passwords by reading DNS queries. A new (default) feature wa... |
| CVE-2015-7347 | — | — | 1.1% | Sep 20, 2017 | Cross-site scripting (XSS) vulnerability in ZCMS JavaServer Pages Content Management System 1.1. |
| CVE-2015-6673 | — | — | 1.9% | Sep 20, 2017 | Use-after-free vulnerability in Decoder.cpp in libpgf before 6.15.32. |
| CVE-2015-5608 | — | — | 0.7% | Sep 20, 2017 | Open redirect vulnerability in Joomla! CMS 3.0.0 through 3.4.1. |
| CVE-2015-2927 | — | — | 5.0% | Sep 20, 2017 | node 0.3.2 and URONode before 1.0.5r3 allows remote attackers to cause a denial of service (bandwidth consumption). |
| CVE-2015-2826 | — | — | 12.8% | Sep 20, 2017 | WordPress Simple Ads Manager plugin 2.5.94 and 2.5.96 allows remote attackers to obtain sensitive information. |
| CVE-2015-1866 | — | — | 1.1% | Sep 20, 2017 | Cross-site scripting (XSS) vulnerability in Ember.js 1.10.x before 1.10.1 and 1.11.x before 1.11.2. |
| CVE-2015-0162 | — | — | 0.3% | Sep 20, 2017 | IBM Security SiteProtector System 3.0, 3.1, and 3.1.1 allows local users to gain privileges. |
| CVE-2015-8224 | — | — | 0.6% | Sep 20, 2017 | Huawei P8 before GRA-CL00C92B210, before GRA-L09C432B200, before GRA-TL00C01B210, and before GRA-UL00C00B210 allows remo... |
| CVE-2015-5607 | — | — | 1.2% | Sep 20, 2017 | Cross-site request forgery in the REST API in IPython 2 and 3. |
| CVE-2015-5248 | — | — | 0.9% | Sep 20, 2017 | Reflected file download vulnerability in Red Hat Feedhenry Enterprise Mobile Application Platform. |
| CVE-2015-5179 | — | — | 1.1% | Sep 20, 2017 | FreeIPA might display user data improperly via vectors involving non-printable characters. |
| CVE-2015-4074 | — | — | 56.5% | Sep 20, 2017 | Directory traversal vulnerability in the Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to read ar... |
| CVE-2015-4073 | — | — | 4.2% | Sep 20, 2017 | Multiple SQL injection vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote attackers to exe... |
| CVE-2015-4072 | — | — | 2.9% | Sep 20, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in the Helpdesk Pro plugin before 1.4.0 for Joomla! allow remote att... |
| CVE-2015-1329 | — | — | 4.6% | Sep 20, 2017 | Use-after-free vulnerability in oxide::qt::URLRequestDelegatedJob in oxide-qt in Ubuntu 15.04 and 14.04 LTS might allow ... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now