2015 CVE Vulnerabilities
8,779 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-3949 | — | — | 0.3% | Jun 13, 2015 | Sinapsi eSolar Light with firmware before 2.0.3970_schsl_2.2.85 allows attackers to discover cleartext passwords by read... |
| CVE-2015-2958 | — | — | 1.6% | Jun 13, 2015 | Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended acc... |
| CVE-2015-2953 | — | — | 1.4% | Jun 13, 2015 | Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to bypass intended acc... |
| CVE-2015-2952 | — | — | 1.2% | Jun 13, 2015 | The user-information management functionality in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earli... |
| CVE-2015-0344 | — | — | 2.2% | Jun 13, 2015 | Cross-site scripting (XSS) vulnerability in the web app in Adobe Connect before 9.4 allows remote attackers to inject ar... |
| CVE-2015-0343 | — | — | 3.2% | Jun 13, 2015 | Cross-site scripting (XSS) vulnerability in admin/home/homepage/search in the web app in Adobe Connect before 9.4 allows... |
| CVE-2015-3993 | — | — | 1.1% | Jun 13, 2015 | Actian Matrix 5.1.x through 5.1.2.4 and 5.2.x through 5.2.0.1 allows remote authenticated users to bypass intended write... |
| CVE-2015-2962 | — | — | 2.7% | Jun 13, 2015 | CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitra... |
| CVE-2015-2957 | — | — | 1.2% | Jun 13, 2015 | Cross-site scripting (XSS) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier al... |
| CVE-2015-2956 | — | — | 1.3% | Jun 13, 2015 | SQL injection vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote a... |
| CVE-2015-2955 | — | — | 1.6% | Jun 13, 2015 | Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and earlier allows remote attackers to execute arbitrary O... |
| CVE-2015-2954 | — | — | 0.7% | Jun 13, 2015 | Cross-site request forgery (CSRF) vulnerability in Igreks MilkyStep Light 0.94 and earlier and Professional 1.82 and ear... |
| CVE-2015-2341 | — | — | 1.9% | Jun 13, 2015 | VMware Workstation 10.x before 10.0.5, VMware Player 6.x before 6.0.6, and VMware Fusion 6.x before 6.0.6 and 7.x before... |
| CVE-2015-2340 | — | — | 0.7% | Jun 13, 2015 | TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before... |
| CVE-2015-2339 | — | — | 0.7% | Jun 13, 2015 | TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x befor... |
| CVE-2015-2338 | — | — | 0.7% | Jun 13, 2015 | TPview.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x befor... |
| CVE-2015-2337 | — | — | 0.7% | Jun 13, 2015 | TPInt.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x before... |
| CVE-2015-2336 | — | — | 0.7% | Jun 13, 2015 | TPView.dll in VMware Workstation 10.x before 10.0.6 and 11.x before 11.1.1, VMware Player 6.x before 6.0.6 and 7.x befor... |
| CVE-2015-4185 | — | — | 0.4% | Jun 13, 2015 | The TCL interpreter in Cisco IOS 15.2 does not properly maintain the vty state, which allows local users to gain privile... |
| CVE-2015-4184 | — | — | 3.5% | Jun 13, 2015 | The anti-spam scanner on Cisco Email Security Appliance (ESA) devices 3.3.1-09, 7.5.1-gpl-022, and 8.5.6-074 allows remo... |
| CVE-2015-1792 | — | — | 22.5% | Jun 12, 2015 | The do_free_upto function in crypto/cms/cms_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n,... |
| CVE-2015-1791 | — | — | 16.0% | Jun 12, 2015 | Race condition in the ssl3_get_new_session_ticket function in ssl/s3_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.... |
| CVE-2015-1790 | — | — | 22.9% | Jun 12, 2015 | The PKCS7_dataDecodefunction in crypto/pkcs7/pk7_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0... |
| CVE-2015-1789 | — | — | 74.5% | Jun 12, 2015 | The X509_cmp_time function in crypto/x509/x509_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n... |
| CVE-2015-1788 | — | — | 23.2% | Jun 12, 2015 | The BN_GF2m_mod_inv function in crypto/bn/bn_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, ... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now