2015 CVE Vulnerabilities

8,787 CVEs published in 2015.

Filter:UNKNOWNClear
CVE IDSeverityCVSSDescription
CVE-2015-4596——Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges.
CVE-2015-3220——The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception an...
CVE-2015-9097——The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF seq...
CVE-2015-9096——Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM comm...
CVE-2015-3913——The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot...
CVE-2015-3634——The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2.8 through 2.2.21 for W...
CVE-2015-2692——AdBlock before 2.21 allows remote attackers to block arbitrary resources on arbitrary websites and to disable arbitrary ...
CVE-2015-1786——Cross-site request forgery (CSRF) vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or ...
CVE-2015-1588——Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server 6 and OX AppSuite before 7.4.2-rev43, 7.6.0-r...
CVE-2015-1379——The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of serv...
CVE-2015-2800——The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH...
CVE-2015-2255——Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service (board res...
CVE-2015-2253——The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated use...
CVE-2015-2252——Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary co...
CVE-2015-2251——The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to...
CVE-2015-7346——SQL injection vulnerability in ZCMS 1.1.
CVE-2015-3295——markdown-it before 4.1.0 does not block data: URLs.
CVE-2015-8235——Directory traversal vulnerability in Spiffy before 5.4.
CVE-2015-6959——Cross-site scripting (XSS) vulnerability in Vindula 1.9.
CVE-2015-6540——Cross-site scripting (XSS) vulnerability in Intellect Design Arena Intellect Core banking software.
CVE-2015-6240——The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environme...
CVE-2015-5202——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-5233. Reason: This candidate is a reservation du...
CVE-2015-5175——Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of ...
CVE-2015-8326——The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user.
CVE-2015-7888——Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remot...

Check if your code is affected by 2015 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now