2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-5327 | — | — | 1.6% | Sep 25, 2017 | Out-of-bounds memory read in the x509_decode_time function in x509_cert_parser.c in Linux kernels 4.3-rc1 and after. |
| CVE-2015-5263 | — | — | 0.9% | Sep 25, 2017 | pulp-consumer-client 2.4.0 through 2.6.3 does not check the server's TLS certificate signatures when retrieving the serv... |
| CVE-2015-5184 | HIGH | 7.5 | 1.2% | Sep 25, 2017 | Console: CORS headers set to allow all in Red Hat AMQ. |
| CVE-2015-5183 | HIGH | 7.5 | 2.2% | Sep 25, 2017 | Console: HTTPOnly and Secure attributes not set on cookies in Red Hat AMQ. |
| CVE-2015-5182 | HIGH | 8.8 | 0.6% | Sep 25, 2017 | Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ. |
| CVE-2015-5181 | — | — | 0.8% | Sep 25, 2017 | The JBoss console in A-MQ allows remote attackers to execute arbitrary JavaScript. |
| CVE-2015-5169 | — | — | 8.0% | Sep 25, 2017 | Cross-site scripting (XSS) vulnerability in Apache Struts before 2.3.20. |
| CVE-2015-7318 | — | — | 1.7% | Sep 25, 2017 | Plone 3.3.0 through 3.3.6 allows remote attackers to inject headers into HTTP responses. |
| CVE-2015-7317 | — | — | 1.6% | Sep 25, 2017 | Kupu 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, and 4.2.0 through 4.2.7 allows remote authenticated... |
| CVE-2015-7316 | — | — | 1.2% | Sep 25, 2017 | Cross-site scripting (XSS) vulnerability in Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 ... |
| CVE-2015-7315 | — | — | 2.0% | Sep 25, 2017 | Plone 3.3.0 through 3.3.6, 4.0.0 through 4.0.10, 4.1.0 through 4.1.6, 4.2.0 through 4.2.7, 4.3.0 through 4.3.6, and 5.0r... |
| CVE-2015-6748 | MEDIUM | 6.1 | 2.2% | Sep 25, 2017 | Cross-site scripting (XSS) vulnerability in jsoup before 1.8.3. |
| CVE-2015-5282 | — | — | 1.0% | Sep 25, 2017 | Cross-site scripting (XSS) vulnerability in Foreman 1.7.0 and after. |
| CVE-2015-5237 | HIGH | 8.8 | 5.1% | Sep 25, 2017 | protobuf allows remote authenticated attackers to cause a heap-based buffer overflow. |
| CVE-2015-4669 | — | — | 1.1% | Sep 25, 2017 | The MySQL "root" user in Xsuite 2.x does not have a password set, which allows local users to access databases on the sy... |
| CVE-2015-4668 | — | — | 6.7% | Sep 25, 2017 | Open redirect vulnerability in Xsuite 2.4.4.5 and earlier allows remote attackers to redirect users to arbitrary web sit... |
| CVE-2015-4667 | — | — | 11.1% | Sep 25, 2017 | Multiple hardcoded credentials in Xsuite 2.x. |
| CVE-2015-3887 | — | — | 0.5% | Sep 21, 2017 | Untrusted search path vulnerability in ProxyChains-NG before 4.9 allows local users to gain privileges via a Trojan hors... |
| CVE-2015-1187 | CRITICAL | 9.8 | 82.9% | Sep 21, 2017 | The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_addr... |
| CVE-2015-8559 | HIGH | 7.5 | 1.9% | Sep 21, 2017 | The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/... |
| CVE-2015-5284 | — | — | 1.0% | Sep 21, 2017 | ipa-kra-install in FreeIPA before 4.2.2 puts the CA agent certificate and private key in /etc/httpd/alias/kra-agent.pem,... |
| CVE-2015-4706 | — | — | 1.6% | Sep 21, 2017 | Cross-site scripting (XSS) vulnerability in IPython 3.x before 3.2 allows remote attackers to inject arbitrary web scrip... |
| CVE-2015-3296 | — | — | 1.3% | Sep 21, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in NodeBB before 0.7 allow remote attackers to inject arbitrary web ... |
| CVE-2015-0276 | — | — | 0.7% | Sep 21, 2017 | Cross-site request forgery (CSRF) vulnerability in Kallithea before 0.2. |
| CVE-2015-9232 | — | — | 0.9% | Sep 20, 2017 | The Good for Enterprise application 3.0.0.415 for Android does not use signature protection for its Authentication Deleg... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now