2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-0163 | — | — | — | Jul 17, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2015-0155 | — | — | — | Jul 17, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2015-0154 | — | — | — | Jul 17, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2015-0230 | — | — | — | Jul 9, 2018 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was... |
| CVE-2015-9260 | MEDIUM | 5.4 | 1.0% | Jul 5, 2018 | An issue was discovered in BEdita before 3.7.0. A cross-site scripting (XSS) attack occurs via a crafted pages/showObjec... |
| CVE-2015-4043 | — | — | 1.3% | Jun 19, 2018 | SQL injection vulnerability in ConnX ESP HR Management 4.4.0 allows remote attackers to execute arbitrary SQL commands v... |
| CVE-2015-4664 | — | — | 20.8% | Jun 18, 2018 | An improper input validation vulnerability in CA Privileged Access Manager 2.4.4.4 and earlier allows remote attackers t... |
| CVE-2015-9239 | HIGH | 7.5 | 1.2% | May 31, 2018 | ansi2html is vulnerable to regular expression denial of service (ReDoS) when certain types of user input is passed in. |
| CVE-2015-9238 | — | — | 1.5% | May 31, 2018 | secure-compare 3.0.0 and below do not actually compare two strings properly. compare was actually comparing the first ar... |
| CVE-2015-9236 | — | — | 1.5% | May 31, 2018 | Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsist... |
| CVE-2015-7610 | — | — | 1.2% | May 30, 2018 | Cross-site request forgery (CSRF) vulnerability in the login form in Zimbra Collaboration Suite (aka ZCS) before 8.6.0 P... |
| CVE-2015-9244 | CRITICAL | 9.8 | 2.4% | May 29, 2018 | Keys of objects in mysql node module v2.0.0-alpha7 and earlier are not escaped with `mysql.escape()` which could lead to... |
| CVE-2015-9243 | — | — | 1.0% | May 29, 2018 | When server level, connection level or route level CORS configurations in hapi node module before 11.1.4 are combined an... |
| CVE-2015-9242 | — | — | 2.1% | May 29, 2018 | Certain input strings when passed to new Date() or Date.parse() in ecstatic node module before 1.4.0 will cause v8 to ra... |
| CVE-2015-9241 | — | — | 2.1% | May 29, 2018 | Certain input passed into the If-Modified-Since or Last-Modified headers will cause an 'illegal access' exception to be ... |
| CVE-2015-9240 | — | — | 0.9% | May 29, 2018 | Due to a bug in the the default sign in functionality in the keystone node module before 0.3.16, incomplete email addres... |
| CVE-2015-9235 | — | — | 8.7% | May 29, 2018 | In jsonwebtoken node module before 4.2.2 it is possible for an attacker to bypass verification when a token digitally si... |
| CVE-2015-8094 | — | — | 1.5% | May 22, 2018 | Open redirect vulnerability in Cloudera HUE before 3.10.0 allows remote attackers to redirect users to arbitrary web sit... |
| CVE-2015-1503 | — | — | 58.7% | May 8, 2018 | Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary... |
| CVE-2015-1857 | MEDIUM | 5.3 | 1.7% | Apr 27, 2018 | The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveragin... |
| CVE-2015-9224 | — | — | 1.4% | Apr 18, 2018 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Automobile, Snapdragon Mobile, Snapd... |
| CVE-2015-9223 | — | — | 1.4% | Apr 18, 2018 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile MDM9615, MDM9625, MDM9635M, S... |
| CVE-2015-9222 | — | — | 4.4% | Apr 18, 2018 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear MSM8909W,... |
| CVE-2015-9221 | — | — | 1.3% | Apr 18, 2018 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile SD 400, SD 800, and SD 810, l... |
| CVE-2015-9220 | — | — | 1.3% | Apr 18, 2018 | In Android before 2018-04-05 or earlier security patch level on Qualcomm Snapdragon Mobile and Snapdragon Wear IPQ4019, ... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now