2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-1600 | — | — | 2.8% | Aug 28, 2017 | Information disclosure vulnerability in Netatmo Indoor Module firmware 100 and earlier. |
| CVE-2015-1554 | — | — | 1.5% | Aug 28, 2017 | kgb-bot 1.33-2 allows remote attackers to cause a denial of service (crash). |
| CVE-2015-0233 | — | — | 0.4% | Aug 28, 2017 | Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38. |
| CVE-2015-3976 | — | — | 1.2% | Aug 28, 2017 | Cross-site scripting (XSS) vulnerability in GE Multilink ML810/3000/3100 series switch 5.2.0 and earlier, and GE Multili... |
| CVE-2015-2046 | — | — | 1.9% | Aug 28, 2017 | Cross-site scripting (XSS) vulnerability in MantisBT 1.2.13 and later before 1.2.20. |
| CVE-2015-1876 | — | — | 3.1% | Aug 28, 2017 | Directory traversal vulnerability in ES File Explorer 3.2.4.1. |
| CVE-2015-1445 | — | — | 1.8% | Aug 28, 2017 | HTTP header injection in the httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30. |
| CVE-2015-1443 | — | — | 3.5% | Aug 28, 2017 | The httpd package in fli4l before 3.10.1 and 4.0 before 2015-01-30 allows remote attackers to execute arbitrary code. |
| CVE-2015-1430 | — | — | 1.2% | Aug 28, 2017 | Buffer overflow in xymon 4.3.17-1. |
| CVE-2015-1401 | — | — | 2.9% | Aug 28, 2017 | Improper Authentication vulnerability in the "LDAP / SSO Authentication" (ig_ldap_sso_auth) extension 2.0.0 for TYPO3. |
| CVE-2015-1386 | — | — | 2.7% | Aug 28, 2017 | Directory traversal vulnerability in unshield 1.0-1. |
| CVE-2015-1199 | — | — | 2.5% | Aug 28, 2017 | Directory traversal vulnerability in ppmd 10.1-5. |
| CVE-2015-1198 | — | — | 3.3% | Aug 28, 2017 | Multiple directory traversal vulnerabilities in ha 0.999p+dfsg-5. |
| CVE-2015-1177 | — | — | 1.5% | Aug 28, 2017 | Cross-site scripting (XSS) vulnerability in Exponent CMS 2.3.2. |
| CVE-2015-0974 | — | — | 0.5% | Aug 28, 2017 | Untrusted search path vulnerability in ZTE Datacard MF19 0V1.0.0B04 allows local users to gain privilege by modifying th... |
| CVE-2015-0928 | HIGH | 7.5 | 2.3% | Aug 28, 2017 | libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference). |
| CVE-2015-0210 | — | — | 0.9% | Aug 28, 2017 | wpa_supplicant 2.0-16 does not properly check certificate subject name, which allows remote attackers to cause a man-in-... |
| CVE-2015-0114 | — | — | 0.4% | Aug 28, 2017 | Stack-based buffer overflow in IBM V5R4, and IBM i Access for Windows 6.1 and 7.1. |
| CVE-2015-0101 | — | — | 0.7% | Aug 28, 2017 | Cross-site scripting (XSS) vulnerability in IBM Business Process Manager Standard 7.5.x before 7.5, 8.0.x before 8.0.1, ... |
| CVE-2015-5701 | — | — | 0.4% | Aug 25, 2017 | mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files... |
| CVE-2015-5700 | — | — | 0.4% | Aug 25, 2017 | mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via... |
| CVE-2015-4181 | — | — | 11.6% | Aug 25, 2017 | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.5 allows remote attackers to read arbi... |
| CVE-2015-4180 | — | — | 2.9% | Aug 25, 2017 | Directory traversal vulnerability in get_file.php in phpMyBackupPro 2.1 through 2.4 allows remote attackers to read arbi... |
| CVE-2015-4017 | — | — | 1.0% | Aug 25, 2017 | Salt before 2014.7.6 does not verify certificates when connecting via the aliyun, proxmox, and splunk modules. |
| CVE-2015-3257 | — | — | 0.9% | Aug 25, 2017 | Zend/Diactoros/Uri::filterPath in zend-diactoros before 1.0.4 does not properly sanitize path input, which allows remote... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now