2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-9258 | — | — | 1.1% | Mar 31, 2018 | In Docker Notary before 0.1, gotuf/signed/verify.go has a Signature Algorithm Not Matched to Key vulnerability. Because ... |
| CVE-2015-4953 | — | — | 0.3% | Mar 29, 2018 | IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 makes it easier for man-in-the-middle attacke... |
| CVE-2015-4952 | — | — | 1.9% | Mar 29, 2018 | The on-demand plugin in IBM Endpoint Manager for Remote Control 9.0.1 and 9.1.0 allows user-assisted remote attackers to... |
| CVE-2015-2020 | — | — | 2.8% | Mar 29, 2018 | The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method ... |
| CVE-2015-2009 | — | — | 0.5% | Mar 29, 2018 | Cross-site request forgery (CSRF) vulnerability in the xmlrpc.cgi service in IBM QRadar SIEM 7.1 before MR2 Patch 11 Int... |
| CVE-2015-2004 | — | — | 2.1% | Mar 29, 2018 | The GraceNote GNSDK SDK before SVN Changeset 1.1.7 for Android might allow attackers to execute arbitrary code by levera... |
| CVE-2015-2003 | — | — | 2.1% | Mar 29, 2018 | The PJSIP PJSUA2 SDK before SVN Changeset 51322 for Android might allow attackers to execute arbitrary code by leveragin... |
| CVE-2015-2002 | — | — | 2.3% | Mar 29, 2018 | The ESRI ArcGis Runtime SDK before 10.2.6-2 for Android might allow attackers to execute arbitrary code by leveraging a ... |
| CVE-2015-2001 | — | — | 2.1% | Mar 29, 2018 | The MetaIO SDK before 6.0.2.1 for Android might allow attackers to execute arbitrary code by leveraging a finalize metho... |
| CVE-2015-2000 | — | — | 2.1% | Mar 29, 2018 | The Jumio SDK before 1.5.0 for Android might allow attackers to execute arbitrary code by leveraging a finalize method i... |
| CVE-2015-5016 | — | — | 1.0% | Mar 27, 2018 | IBM Maximo Asset Management 7.1, 7.5, and 7.6; Maximo Asset Management Essentials 7.1 and 7.5; Control Desk 7.5 and 7.6;... |
| CVE-2015-4987 | — | — | 1.1% | Mar 27, 2018 | The search and replay servers in IBM Tealeaf Customer Experience 8.0 through 9.0.2 allow remote attackers to bypass auth... |
| CVE-2015-4954 | — | — | 0.7% | Mar 27, 2018 | IBM BigFix Remote Control before Interim Fix pack 9.1.2-TIV-IBRC912-IF0001 improperly allows self-signed certificates, w... |
| CVE-2015-7434 | — | — | 0.4% | Mar 26, 2018 | IBM Capacity Management Analytics 2.1.0.0 allows local users to discover encrypted usernames and passwords by leveraging... |
| CVE-2015-7433 | — | — | 0.4% | Mar 26, 2018 | IBM Capacity Management Analytics 2.1.0.0 allows local users to discover cleartext usernames and passwords by leveraging... |
| CVE-2015-7432 | — | — | 0.4% | Mar 26, 2018 | IBM Capacity Management Analytics 2.1.0.0 allows local users to decrypt usernames and passwords by leveraging access to ... |
| CVE-2015-7424 | — | — | 1.3% | Mar 26, 2018 | IBM InfoSphere Master Data Management (MDM) - Collaborative Edition 9.1, 10.1, 11.0, 11.3, 11.4, and 11.5 allow remote a... |
| CVE-2015-7423 | — | — | 1.2% | Mar 26, 2018 | Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management (MDM) - Collaborative Editi... |
| CVE-2015-7401 | — | — | 1.3% | Mar 26, 2018 | IBM Curam Social Program Management 6.1.x before 6.1.1.1 allows remote authenticated users to bypass intended access res... |
| CVE-2015-5045 | — | — | 0.3% | Mar 26, 2018 | The Administration and Reporting tool in IBM Rational License Key Server (RLKS) before 8.1.4.9 iFix 04 allows local user... |
| CVE-2015-5039 | — | — | 1.2% | Mar 26, 2018 | The Remote Client and change management integrations in IBM Rational ClearCase 7.1.x, 8.0.0.x before 8.0.0.18, and 8.0.1... |
| CVE-2015-9257 | — | — | 0.6% | Mar 24, 2018 | BMC Remedy Action Request (AR) System 9.0 before 9.0.00 Service Pack 2 hot fix 1 has persistent XSS. |
| CVE-2015-7461 | — | — | 1.3% | Mar 20, 2018 | XML external entity (XXE) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows remo... |
| CVE-2015-7460 | — | — | 0.7% | Mar 20, 2018 | Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows rem... |
| CVE-2015-7459 | — | — | 0.7% | Mar 20, 2018 | Cross-site scripting (XSS) vulnerability in IBM Connections 3.0.1.1 and earlier, 4.0, 4.5, and 5.0 before CR4 allows rem... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now