2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-3400 | — | — | 1.6% | Oct 18, 2017 | sharenfs 0.6.4, when built with commits bcdd594 and 7d08880 from the zfs repository, provides world readable access to t... |
| CVE-2015-2156 | — | — | 5.4% | Oct 18, 2017 | Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play F... |
| CVE-2015-7806 | — | — | 6.0% | Oct 17, 2017 | Eval injection vulnerability in the fm_saveHelperGatherItems function in ajax.php in the Form Manager plugin before 1.7.... |
| CVE-2015-7504 | HIGH | 8.8 | 0.6% | Oct 16, 2017 | Heap-based buffer overflow in the pcnet_receive function in hw/net/pcnet.c in QEMU allows guest OS administrators to cau... |
| CVE-2015-7687 | — | — | 4.1% | Oct 16, 2017 | Use-after-free vulnerability in OpenSMTPD before 5.7.2 allows remote attackers to cause a denial of service (crash) or e... |
| CVE-2015-4650 | — | — | 6.0% | Oct 16, 2017 | Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access... |
| CVE-2015-3229 | — | — | 2.0% | Oct 16, 2017 | fedora-cloud-atomic.ks in spin-kickstarts allows remote attackers to conduct man-in-the-middle attacks by leveraging use... |
| CVE-2015-2780 | — | — | 15.1% | Oct 16, 2017 | Unrestricted file upload vulnerability in Berta CMS allows remote attackers to execute arbitrary code by uploading a cra... |
| CVE-2015-6358 | — | — | 1.3% | Oct 12, 2017 | Multiple Cisco embedded devices use hardcoded X.509 certificates and SSH host keys embedded in the firmware, which allow... |
| CVE-2015-8239 | — | — | 0.5% | Oct 10, 2017 | The SHA-2 digest support in the sudoers plugin in sudo after 1.8.7 allows local users with write permissions to parts of... |
| CVE-2015-7778 | — | — | 1.0% | Oct 10, 2017 | Gurunavi App for iOS before 6.0.0 does not verify SSL certificates which could allow remote attackers to perform man-in-... |
| CVE-2015-7503 | — | — | 1.4% | Oct 10, 2017 | Zend Framework before 2.4.9, zend-framework/zend-crypt 2.4.x before 2.4.9, and 2.5.x before 2.5.2 allows remote attacker... |
| CVE-2015-7384 | — | — | 8.0% | Oct 10, 2017 | Node.js 4.0.0, 4.1.0, and 4.1.1 allows remote attackers to cause a denial of service. |
| CVE-2015-6918 | — | — | 1.2% | Oct 10, 2017 | salt before 2015.5.5 leaks git usernames and passwords to the log. |
| CVE-2015-6521 | — | — | 0.7% | Oct 10, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in ATutor LMS version 2.2. |
| CVE-2015-5675 | — | — | 0.6% | Oct 10, 2017 | The sys_amd64 IRET Handler in the kernel in FreeBSD 9.3 and 10.1 allows local users to gain privileges or cause a denial... |
| CVE-2015-5639 | — | — | 0.9% | Oct 10, 2017 | niconico App for iOS before 6.38 does not verify SSL certificates which could allow remote attackers to execute man-in-t... |
| CVE-2015-2988 | — | — | 1.0% | Oct 10, 2017 | Rakuten card App for iOS 5.2.0 through 5.2.4 does not verify SSL certificates which might allow remote attackers to exec... |
| CVE-2015-2856 | — | — | 56.6% | Oct 10, 2017 | Directory traversal vulnerability in the template function in function.inc in Accellion File Transfer Appliance devices ... |
| CVE-2015-7842 | — | — | 0.7% | Oct 10, 2017 | Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V3 with software before V100R... |
| CVE-2015-2673 | — | — | 18.9% | Oct 6, 2017 | The ec_ajax_update_option and ec_ajax_clear_all_taxrates functions in inc/admin/admin_ajax_functions.php in the WP EasyC... |
| CVE-2015-2148 | — | — | 0.6% | Oct 6, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.2 allow remote attackers to... |
| CVE-2015-2147 | — | — | 1.6% | Oct 6, 2017 | Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbi... |
| CVE-2015-2146 | — | — | 1.4% | Oct 6, 2017 | Multiple SQL injection vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to execute arbi... |
| CVE-2015-2145 | — | — | 1.5% | Oct 6, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attackers to... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now