2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-9292 | — | — | 0.6% | Aug 8, 2019 | 6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter). |
| CVE-2015-9291 | — | — | 1.3% | Aug 1, 2019 | cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-12... |
| CVE-2015-7559 | LOW | 2.7 | 2.0% | Aug 1, 2019 | It was found that the Apache ActiveMQ client before 5.14.5 exposed a remote shutdown command in the ActiveMQConnection c... |
| CVE-2015-5297 | MEDIUM | 6.7 | 1.5% | Jul 31, 2019 | An integer overflow issue has been reported in the general_composite_rect() function in pixman prior to version 0.32.8. ... |
| CVE-2015-9290 | — | — | 2.7% | Jul 30, 2019 | In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no... |
| CVE-2015-9288 | — | — | 0.9% | Jul 29, 2019 | The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online ser... |
| CVE-2015-6960 | MEDIUM | 6.1 | 0.6% | Jul 29, 2019 | edx-platform before 2015-09-17 allows XSS via a team name. |
| CVE-2015-6253 | — | — | 0.5% | Jul 29, 2019 | edx-platform before 2015-08-17 allows XSS in the Studio listing of courses. |
| CVE-2015-5601 | — | — | 1.5% | Jul 29, 2019 | edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .... |
| CVE-2015-9289 | MEDIUM | 5.5 | 0.4% | Jul 27, 2019 | In the Linux kernel before 4.1.4, a buffer overflow occurs when checking userspace params in drivers/media/dvb-frontends... |
| CVE-2015-7882 | HIGH | 8.1 | 1.8% | Jul 19, 2019 | Improper handling of LDAP authentication in MongoDB Server versions 3.0.0 to 3.0.6 allows an unauthenticated client to g... |
| CVE-2015-3907 | — | — | 1.6% | Jul 3, 2019 | CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks. |
| CVE-2015-7609 | — | — | 1.3% | May 30, 2019 | Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbr... |
| CVE-2015-2230 | MEDIUM | 6.1 | 0.8% | May 30, 2019 | Synacor Zimbra Collaboration Server 8.x before 8.7.0 has Reflected XSS in admin console. |
| CVE-2015-9287 | — | — | 2.0% | May 13, 2019 | Directory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The key identification fiel... |
| CVE-2015-1006 | — | — | 5.3% | May 10, 2019 | A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.... |
| CVE-2015-9286 | — | — | 1.4% | Apr 30, 2019 | Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS. |
| CVE-2015-9285 | — | — | 0.9% | Apr 29, 2019 | esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI. |
| CVE-2015-9284 | HIGH | 8.8 | 1.6% | Apr 26, 2019 | The request phase of the OmniAuth Ruby gem (1.9.1 and earlier) is vulnerable to Cross-Site Request Forgery when used as ... |
| CVE-2015-1343 | LOW | 2 | 0.8% | Apr 22, 2019 | All versions of unity-scope-gdrive logs search terms to syslog. |
| CVE-2015-1341 | HIGH | 7.4 | 0.4% | Apr 22, 2019 | Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and t... |
| CVE-2015-1340 | HIGH | 7 | 0.9% | Apr 22, 2019 | LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer() has an unsafe Chmod() call that races against the stat in the... |
| CVE-2015-1327 | LOW | 3.9 | 0.8% | Apr 22, 2019 | Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn... |
| CVE-2015-1326 | MEDIUM | 5.7 | 1.8% | Apr 22, 2019 | python-dbusmock before version 0.15.1 AddTemplate() D-Bus method call or DBusTestCase.spawn_server_template() method cou... |
| CVE-2015-1320 | MEDIUM | 5.5 | 0.9% | Apr 22, 2019 | The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now