2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-2144 | — | — | 0.6% | Oct 6, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authenticate... |
| CVE-2015-2143 | — | — | 1.8% | Oct 6, 2017 | Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote attac... |
| CVE-2015-2142 | — | — | 1.7% | Oct 6, 2017 | Multiple cross-site request forgery (CSRF) vulnerabilities in Issuetracker phpBugTracker before 1.7.0 allow remote authe... |
| CVE-2015-1828 | MEDIUM | 5.9 | 1.5% | Oct 6, 2017 | The Ruby http gem before 0.7.3 does not verify hostnames in SSL connections, which might allow remote attackers to obtai... |
| CVE-2015-1429 | HIGH | 7.5 | 2.0% | Oct 6, 2017 | Directory traversal vulnerability in Cybele Software Thinfinity Remote Desktop Workstation 3.0.0.3 32-bit and 64-bit all... |
| CVE-2015-0296 | — | — | 0.4% | Oct 6, 2017 | The pre-install script in texlive 3.1.20140525_r34255.fc21 as packaged in Fedora 21 and rpm, and texlive 6.20131226_r324... |
| CVE-2015-5246 | — | — | 1.4% | Oct 6, 2017 | The LDAP Authentication functionality in Foreman might allow remote attackers with knowledge of old passwords to gain ac... |
| CVE-2015-2297 | — | — | 1.8% | Oct 6, 2017 | nanohttp in libcsoap allows remote attackers to cause a denial of service (NULL pointer dereference and application cras... |
| CVE-2015-2158 | — | — | 2.8% | Oct 6, 2017 | Off-by-one error in the pngcrush_measure_idat function in pngcrush.c in pngcrush before 1.7.84 allows remote attackers t... |
| CVE-2015-1206 | — | — | 0.7% | Oct 6, 2017 | Heap-based buffer overflow in Google Chrome before M40 allows remote attackers to cause a denial of service (unpaged mem... |
| CVE-2015-7980 | — | — | 1.3% | Oct 3, 2017 | Cross-site scripting (XSS) vulnerability in the Compass Rose module 6.x-1.x before 6.x-1.1 for Drupal allows remote atta... |
| CVE-2015-7843 | — | — | 0.9% | Oct 3, 2017 | The management interface on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH2288H V... |
| CVE-2015-7841 | — | — | 2.1% | Oct 3, 2017 | The login page of the server on Huawei FusionServer rack servers RH2288 V3 with software before V100R003C00SPC603, RH228... |
| CVE-2015-7359 | — | — | 0.6% | Oct 3, 2017 | The (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.1... |
| CVE-2015-7358 | — | — | 1.2% | Oct 3, 2017 | The IsDriveLetterAvailable method in Driver/Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, when run... |
| CVE-2015-7357 | — | — | 1.9% | Oct 3, 2017 | Cross-site scripting (XSS) vulnerability in the uDesign (aka U-Design) theme 2.3.0 before 2.7.10 for WordPress allows re... |
| CVE-2015-6971 | — | — | 0.5% | Oct 3, 2017 | Lenovo System Update (formerly ThinkVantage System Update) before 5.07.0013 allows local users to submit commands to the... |
| CVE-2015-6576 | — | — | 3.6% | Oct 3, 2017 | Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execut... |
| CVE-2015-3321 | — | — | 0.3% | Oct 3, 2017 | Services and files in Lenovo Fingerprint Manager before 8.01.42 have incorrect ACLs, which allows local users to invalid... |
| CVE-2015-9234 | — | — | 2.0% | Sep 30, 2017 | The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has SQL injection vi... |
| CVE-2015-9233 | HIGH | 8.8 | 1.0% | Sep 30, 2017 | The cp-contact-form-with-paypal (aka CP Contact Form with PayPal) plugin before 1.1.6 for WordPress has CSRF with result... |
| CVE-2015-1027 | — | — | 1.2% | Sep 29, 2017 | The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HT... |
| CVE-2015-8249 | — | — | 73.6% | Sep 28, 2017 | The FileUploadServlet class in ManageEngine Desktop Central 9 before build 91093 allows remote attackers to upload and e... |
| CVE-2015-7349 | — | — | 1.3% | Sep 28, 2017 | Cross-site scripting (XSS) vulnerability in the sample feedback.inc file in VASCO DIGIPASS authentication plug-in for Ci... |
| CVE-2015-7256 | — | — | 0.8% | Sep 28, 2017 | ZyXEL NWA1100-N, NWA1100-NH, NWA1121-NI, NWA1123-AC, and NWA1123-NI access points; P-660HN-51, P-663HN-51, VMG1312-B10A,... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now