2015 CVE Vulnerabilities
8,779 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-1463 | — | — | 2.7% | Feb 3, 2015 | ClamAV before 0.98.6 allows remote attackers to cause a denial of service (crash) via a crafted petite packer file, rela... |
| CVE-2015-1462 | — | — | 2.8% | Feb 3, 2015 | ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted upx packer file, related to a "hea... |
| CVE-2015-1461 | — | — | 2.8% | Feb 3, 2015 | ClamAV before 0.98.6 allows remote attackers to have unspecified impact via a crafted (1) Yoda's crypter or (2) mew pack... |
| CVE-2015-1460 | — | — | 1.1% | Feb 3, 2015 | Huawei Quidway switches with firmware before V200R005C00SPC300 allows remote attackers to gain privileges via a crafted ... |
| CVE-2015-1459 | — | — | 2.0% | Feb 3, 2015 | Cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator 3.0.0 allows remote attackers to inject arbitrar... |
| CVE-2015-1458 | — | — | 0.4% | Feb 3, 2015 | Fortinet FortiAuthenticator 3.0.0 allows local users to bypass intended restrictions and gain privileges by creating /tm... |
| CVE-2015-1457 | — | — | 0.5% | Feb 3, 2015 | Fortinet FortiAuthenticator 3.0.0 allows local users to read arbitrary files via the -f flag to the dig command. |
| CVE-2015-1456 | — | — | 1.4% | Feb 3, 2015 | Fortinet FortiAuthenticator 3.0.0 logs the PostgreSQL usernames and passwords in cleartext, which allows remote administ... |
| CVE-2015-1455 | — | — | 2.7% | Feb 3, 2015 | Fortinet FortiAuthenticator 3.0.0 has a password of (1) slony for the slony PostgreSQL user and (2) www-data for the www... |
| CVE-2015-1441 | — | — | 1.4% | Feb 3, 2015 | SQL injection vulnerability in Piwigo before 2.5.6, 2.6.x before 2.6.5, and 2.7.x before 2.7.3 allows remote attackers t... |
| CVE-2015-1433 | — | — | 3.3% | Feb 3, 2015 | program/lib/Roundcube/rcube_washtml.php in Roundcube before 1.0.5 does not properly quote strings, which allows remote a... |
| CVE-2015-1428 | — | — | 2.8% | Feb 3, 2015 | Multiple SQL injection vulnerabilities in Sefrengo before 1.6.2 allow (1) remote attackers to execute arbitrary SQL comm... |
| CVE-2015-1405 | — | — | 1.3% | Feb 3, 2015 | SQL injection vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remote attackers ... |
| CVE-2015-1404 | — | — | 1.2% | Feb 3, 2015 | Cross-site scripting (XSS) vulnerability in the Content Rating Extbase extension 2.0.3 and earlier for TYPO3 allows remo... |
| CVE-2015-1403 | — | — | 1.3% | Feb 3, 2015 | SQL injection vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attackers to execu... |
| CVE-2015-1402 | — | — | 1.2% | Feb 3, 2015 | Cross-site scripting (XSS) vulnerability in the Content Rating extension 1.0.3 and earlier for TYPO3 allows remote attac... |
| CVE-2015-1400 | — | — | 2.4% | Feb 3, 2015 | SQL injection vulnerability in search.php in NPDS Revolution 13 allows remote attackers to execute arbitrary SQL command... |
| CVE-2015-1384 | — | — | 2.0% | Feb 3, 2015 | Cross-site scripting (XSS) vulnerability in the Banner Effect Header plugin before 1.2.8 for WordPress allows remote att... |
| CVE-2015-1382 | — | — | 2.8% | Feb 3, 2015 | parsers.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (invalid read and crash) via vec... |
| CVE-2015-1381 | — | — | 2.8% | Feb 3, 2015 | Multiple unspecified vulnerabilities in pcrs.c in Privoxy before 3.0.23 allow remote attackers to cause a denial of serv... |
| CVE-2015-1380 | — | — | 3.4% | Feb 3, 2015 | jcc.c in Privoxy before 3.0.23 allows remote attackers to cause a denial of service (abort) via a crafted chunk-encoded ... |
| CVE-2015-1348 | — | — | 1.3% | Feb 3, 2015 | Heap-based buffer overflow in Aruba Instant (IAP) with firmware before 4.0.0.7 and 4.1.x before 4.1.1.2 allows remote at... |
| CVE-2015-0313 | CRITICAL | 9.8 | 95.7% | Feb 2, 2015 | Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows ... |
| CVE-2015-1454 | — | — | 0.7% | Feb 2, 2015 | Blue Coat ProxyClient before 3.3.3.3 and 3.4.x before 3.4.4.10 and Unified Agent before 4.1.3.151952 does not properly v... |
| CVE-2015-1453 | — | — | 0.8% | Feb 2, 2015 | The qm class in Fortinet FortiClient 5.2.3.091 for Android uses a hardcoded encryption key of FoRtInEt!AnDrOiD, which ma... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now