2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-5686 | HIGH | 8.8 | 0.5% | Feb 27, 2020 | Parts of the Puppet Enterprise Console 3.x were found to be susceptible to clickjacking and CSRF (Cross-Site Request For... |
| CVE-2015-5201 | HIGH | 7.5 | 1.5% | Feb 25, 2020 | VDSM and libvirt in Red Hat Enterprise Virtualization Hypervisor (aka RHEV-H) 7-7.x before 7-7.2-20151119.0 and 6-6.x be... |
| CVE-2015-9542 | HIGH | 7.5 | 3.4% | Feb 24, 2020 | add_password in pam_radius_auth.c in pam_radius 1.4.0 does not correctly check the length of the input password, and is ... |
| CVE-2015-4411 | HIGH | 7.5 | 6.4% | Feb 20, 2020 | The Moped::BSON::ObjecId.legal? method in mongodb/bson-ruby before 3.0.4 as used in rubygem-moped allows remote attacker... |
| CVE-2015-4410 | HIGH | 7.5 | 5.7% | Feb 20, 2020 | The Moped::BSON::ObjecId.legal? method in rubygem-moped before commit dd5a7c14b5d2e466f7875d079af71ad19774609b allows re... |
| CVE-2015-7747 | HIGH | 8.8 | 8.8% | Feb 19, 2020 | Buffer overflow in the afReadFrames function in audiofile (aka libaudiofile and Audio File Library) allows user-assisted... |
| CVE-2015-7507 | HIGH | 7.5 | 2.0% | Feb 18, 2020 | libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attackers to cause a denial of service (out-of-bounds read) via a ... |
| CVE-2015-7505 | HIGH | 8.8 | 2.8% | Feb 18, 2020 | Stack-based buffer overflow in the gif_next_LZW function in libnsgif.c in Libnsgif 0.1.2 allows context-dependent attack... |
| CVE-2015-8751 | HIGH | 8.8 | 2.4% | Feb 17, 2020 | Integer overflow in the jas_matrix_create function in JasPer allows context-dependent attackers to have unspecified impa... |
| CVE-2015-0258 | HIGH | 8.8 | 3.8% | Feb 17, 2020 | Multiple incomplete blacklist vulnerabilities in the avatar upload functionality in manageuser.php in Collabtive before ... |
| CVE-2015-6589 | HIGH | 8.8 | 13.6% | Feb 13, 2020 | Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before ... |
| CVE-2015-3309 | HIGH | 7.5 | 2.3% | Feb 13, 2020 | Directory traversal vulnerability in node/utils/Minify.js in Etherpad 1.1.2 through 1.5.4 allows remote attackers to rea... |
| CVE-2015-7508 | HIGH | 8.8 | 2.8% | Feb 12, 2020 | Heap-based buffer overflow in the bmp_decode_rle function in libnsbmp.c in Libnsbmp 0.1.2 allows context-dependent attac... |
| CVE-2015-3423 | HIGH | 8.8 | 2.4% | Feb 8, 2020 | Multiple SQL injection vulnerabilities in NetCracker Resource Management System before 8.2 allow remote authenticated us... |
| CVE-2015-2062 | HIGH | 7.2 | 2.4% | Feb 8, 2020 | Multiple SQL injection vulnerabilities in the Huge-IT Slider (slider-image) plugin before 2.7.0 for WordPress allow remo... |
| CVE-2015-6000 | HIGH | 8.8 | 40.2% | Feb 6, 2020 | Unrestricted file upload vulnerability in the Settings_Vtiger_CompanyDetailsSave_Action class in modules/Settings/Vtiger... |
| CVE-2015-0102 | HIGH | 8.1 | 1.7% | Feb 5, 2020 | IBM Workflow for Bluemix does not set the secure flag for the session cookie in an https session, which makes it easier ... |
| CVE-2015-2802 | HIGH | 7.5 | 6.4% | Feb 4, 2020 | An Information Disclosure vulnerability exists in HP SiteScope 11.2 and 11.3 on Windows, Linux and Solaris, HP Asset Man... |
| CVE-2015-3611 | HIGH | 8.8 | 5.6% | Feb 4, 2020 | A Command Injection vulnerability exists in FortiManager 5.2.1 and earlier and FortiManager 5.0.10 and earlier via unspe... |
| CVE-2015-8851 | HIGH | 7.5 | 2.3% | Jan 30, 2020 | node-uuid before 1.4.4 uses insufficiently random data to create a GUID, which could make it easier for attackers to hav... |
| CVE-2015-0949 | HIGH | 7.8 | 0.4% | Jan 30, 2020 | The System Management Mode (SMM) implementation in Dell Latitude E6430 BIOS Revision A09, HP EliteBook 850 G1 BIOS revis... |
| CVE-2015-5483 | HIGH | 8.8 | 1.6% | Jan 28, 2020 | Multiple cross-site request forgery (CSRF) vulnerabilities in the Private Only plugin 3.5.1 for WordPress allow remote a... |
| CVE-2015-8012 | HIGH | 7.5 | 3.0% | Jan 28, 2020 | lldpd before 0.8.0 allows remote attackers to cause a denial of service (assertion failure and daemon crash) via a malfo... |
| CVE-2015-0294 | HIGH | 7.5 | 1.6% | Jan 27, 2020 | GnuTLS before 3.3.13 does not validate that the signature algorithms match when importing a certificate. |
| CVE-2015-0243 | HIGH | 8.8 | 5.1% | Jan 27, 2020 | Multiple buffer overflows in contrib/pgcrypto in PostgreSQL before 9.0.19, 9.1.x before 9.1.15, 9.2.x before 9.2.10, 9.3... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now