2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-3211 | — | — | 0.4% | Aug 25, 2017 | php-fpm allows local users to write to or create arbitrary files via a symlink attack. |
| CVE-2015-3206 | — | — | 2.3% | Aug 25, 2017 | The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allow... |
| CVE-2015-1395 | — | — | 11.2% | Aug 25, 2017 | Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote atta... |
| CVE-2015-1325 | — | — | 0.9% | Aug 25, 2017 | Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ub... |
| CVE-2015-1324 | — | — | 0.4% | Aug 25, 2017 | Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before... |
| CVE-2015-8355 | — | — | 1.7% | Aug 24, 2017 | Multiple SQL injection vulnerabilities in the orion.extfeedbackform module before 2.1.3 for Bitrix allow remote authenti... |
| CVE-2015-8352 | — | — | 15.6% | Aug 24, 2017 | Directory traversal vulnerability in Zen Cart 1.5.4 allows remote attackers to include and execute arbitrary local files... |
| CVE-2015-4699 | — | — | 1.8% | Aug 24, 2017 | Cross-site scripting (XSS) vulnerability in the Splash Portal in Cloud4Wi before 5.9.7 allows remote attackers to inject... |
| CVE-2015-8308 | — | — | 0.4% | Aug 24, 2017 | LXDM before 0.5.2 did not start X server with -auth, which allows local users to bypass authentication with X connection... |
| CVE-2015-7896 | — | — | 7.0% | Aug 24, 2017 | LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memor... |
| CVE-2015-7516 | — | — | 3.7% | Aug 24, 2017 | ONOS before 1.5.0 when using the ifwd app allows remote attackers to cause a denial of service (NULL pointer dereference... |
| CVE-2015-7259 | — | — | 9.5% | Aug 24, 2017 | ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow user accounts to have multiple valid ... |
| CVE-2015-7258 | — | — | 12.9% | Aug 24, 2017 | ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated users to obtain ... |
| CVE-2015-7257 | — | — | 6.7% | Aug 24, 2017 | ZTE ADSL ZXV10 W300 modems W300V2.1.0f_ER7_PE_O57 and W300V2.1.0h_ER7_PE_O57 allow remote authenticated non-administrato... |
| CVE-2015-5293 | — | — | 1.9% | Aug 24, 2017 | Red Hat Enterprise Virtualization Manager 3.6 and earlier gives valid SLAAC IPv6 addresses to interfaces when "boot prot... |
| CVE-2015-5146 | — | — | 4.1% | Aug 24, 2017 | ntpd in ntp before 4.2.8p3 with remote configuration enabled allows remote authenticated users with knowledge of the con... |
| CVE-2015-1801 | — | — | 3.9% | Aug 24, 2017 | The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to cause a ... |
| CVE-2015-1800 | — | — | 2.8% | Aug 24, 2017 | The samsung_extdisp driver in the Samsung S4 (GT-I9500) I9500XXUEMK8 kernel 3.4 and earlier allows attackers to potentia... |
| CVE-2015-5224 | CRITICAL | 9.8 | 4.5% | Aug 23, 2017 | The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name coll... |
| CVE-2015-6473 | — | — | 3.5% | Aug 22, 2017 | WAGO IO 750-849 01.01.27 and WAGO IO 750-881 01.02.05 do not contain privilege separation. |
| CVE-2015-6472 | — | — | 2.9% | Aug 22, 2017 | WAGO IO 750-849 01.01.27 and 01.02.05, WAGO IO 750-881, and WAGO IO 758-870 have weak credential management. |
| CVE-2015-5258 | HIGH | 8.8 | 0.8% | Aug 22, 2017 | Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3. |
| CVE-2015-3617 | — | — | 0.4% | Aug 22, 2017 | Fortinet FortiManager 5.0 before 5.0.11 and 5.2 before 5.2.2 allow local users to gain privileges via crafted CLI comman... |
| CVE-2015-2857 | CRITICAL | 9.8 | 84.2% | Aug 22, 2017 | Accellion File Transfer Appliance before FTA_9_11_210 allows remote attackers to execute arbitrary code via shell metach... |
| CVE-2015-9073 | — | — | 0.8% | Aug 18, 2017 | In all Qualcomm products with Android releases from CAF using the Linux kernel, an untrusted pointer dereference can occ... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now