2015 CVE Vulnerabilities

8,786 CVEs published in 2015.

CVE IDSeverityCVSSDescription
CVE-2015-20110HIGH7.5JHipster generator-jhipster before 2.23.0 allows a timing attack against validateToken due to a string comparison that s...
CVE-2015-10126CRITICAL9.8A vulnerability classified as critical was found in Easy2Map Photos Plugin 1.0.1 on WordPress. This vulnerability affect...
CVE-2015-10125HIGH8.8A vulnerability classified as problematic has been found in WP Ultimate CSV Importer Plugin 3.7.2 on WordPress. This aff...
CVE-2015-10124CRITICAL9.8A vulnerability was found in Most Popular Posts Widget Plugin up to 0.8 on WordPress. It has been classified as critical...
CVE-2015-6964MEDIUM5.3MultiBit HD before 0.1.2 allows attackers to conduct bit-flipping attacks that insert unspendable Bitcoin addresses into...
CVE-2015-8371HIGH8.8Composer before 2016-02-10 allows cache poisoning from other projects built on the same host. This results in attacker-c...
CVE-2015-5467CRITICAL9.8web\ViewAction in Yii (aka Yii2) 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in...
CVE-2015-7118——Rejected reason: This candidate is unused by its CNA.
CVE-2015-5762——Rejected reason: This candidate is unused by its CNA.
CVE-2015-20002——Rejected reason: This candidate is unused by its CNA.
CVE-2015-1160——Rejected reason: This candidate is unused by its CNA.
CVE-2015-2202HIGH7.2Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows administrative users to escalate privileges to root on the und...
CVE-2015-2201HIGH7.2Aruba AirWave before 7.7.14.2 and 8.x before 8.0.7 allows VisualRF remote OS command execution and file disclosure by ad...
CVE-2015-1391HIGH8.8Aruba AirWave before 8.0.7 allows bypass of a CSRF protection mechanism.
CVE-2015-1390MEDIUM6.1Aruba AirWave before 8.0.7 allows XSS attacks agsinat an administrator.
CVE-2015-10122CRITICAL9.8A vulnerability was found in wp-donate Plugin up to 1.4 on WordPress. It has been classified as critical. This affects a...
CVE-2015-10121MEDIUM6.1A vulnerability has been found in Beeliked Microsite Plugin up to 1.0.1 on WordPress and classified as problematic. Affe...
CVE-2015-10120MEDIUM6.1A vulnerability, which was classified as problematic, was found in WDS Multisite Aggregate Plugin up to 1.0.0 on WordPre...
CVE-2015-10119MEDIUM6.1A vulnerability, which was classified as problematic, has been found in View All Posts Page Plugin up to 0.9.0 on WordPr...
CVE-2015-1313MEDIUM6.5JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the...
CVE-2015-20109MEDIUM5.5end_pattern (called from internal_fnmatch) in the GNU C Library (aka glibc or libc6) before 2.22 might allow context-dep...
CVE-2015-10118MEDIUM6.1A vulnerability classified as problematic was found in cchetanonline WP-CopyProtect up to 3.0.0. This vulnerability affe...
CVE-2015-10117MEDIUM6.1A vulnerability, which was classified as problematic, was found in Gravity Forms DPS PxPay Plugin up to 1.4.2 on WordPre...
CVE-2015-10116HIGH8.8A vulnerability classified as problematic has been found in RealFaviconGenerator Favicon Plugin up to 1.2.12 on WordPres...
CVE-2015-10115MEDIUM6.1A vulnerability, which was classified as problematic, was found in WooSidebars Sidebar Manager Converter Plugin up to 1....

Check if your code is affected by 2015 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now