2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-7944 | — | — | 14.2% | Aug 18, 2017 | The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11... |
| CVE-2015-4082 | — | — | 2.5% | Aug 18, 2017 | attic before 0.15 does not confirm unencrypted backups with the user, which allows remote attackers with read and write ... |
| CVE-2015-3649 | HIGH | 7.8 | 0.4% | Aug 18, 2017 | The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp contain... |
| CVE-2015-1878 | — | — | 0.3% | Aug 18, 2017 | Thales nShield Connect hardware models 500, 1500, 6000, 500+, 1500+, and 6000+ before 11.72 allows physically proximate ... |
| CVE-2015-1817 | — | — | 2.2% | Aug 18, 2017 | Stack-based buffer overflow in the inet_pton function in network/inet_pton.c in musl libc 0.9.15 through 1.0.4, and 1.1.... |
| CVE-2015-3616 | — | — | 2.3% | Aug 11, 2017 | SQL injection vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to ... |
| CVE-2015-3615 | — | — | 1.2% | Aug 11, 2017 | Cross-site scripting (XSS) vulnerability in Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote ... |
| CVE-2015-3614 | — | — | 2.0% | Aug 11, 2017 | Fortinet FortiManager 5.0.x before 5.0.11, 5.2.x before 5.2.2 allows remote attackers to obtain arbitrary files via vect... |
| CVE-2015-3156 | — | — | 0.5% | Aug 11, 2017 | The _write_config function in trove/guestagent/datastore/experimental/mongodb/service.py, reset_configuration function i... |
| CVE-2015-1783 | — | — | 3.5% | Aug 11, 2017 | The prefix variable in the get_or_define_ns function in Lasso before commit 6d854cef4211cdcdbc7446c978f23ab859847cdd all... |
| CVE-2015-7894 | — | — | 8.9% | Aug 9, 2017 | The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allow... |
| CVE-2015-6816 | — | — | 3.6% | Aug 9, 2017 | ganglia-web before 3.7.1 allows remote attackers to bypass authentication. |
| CVE-2015-6498 | — | — | 2.2% | Aug 9, 2017 | Alcatel-Lucent Home Device Manager before 4.1.10, 4.2.x before 4.2.2 allows remote attackers to spoof and make calls as ... |
| CVE-2015-3277 | — | — | 2.5% | Aug 9, 2017 | The mod_nss module before 1.0.11 in Fedora allows remote attackers to obtain cipher lists due to incorrect parsing of mu... |
| CVE-2015-2687 | — | — | 0.3% | Aug 9, 2017 | OpenStack Compute (nova) Icehouse, Juno and Havana when live migration fails allows local users to access VM volumes tha... |
| CVE-2015-2674 | — | — | 1.4% | Aug 9, 2017 | Restkit allows man-in-the-middle attackers to spoof TLS servers by leveraging use of the ssl.wrap_socket function in Pyt... |
| CVE-2015-2313 | — | — | 1.9% | Aug 9, 2017 | Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.2, when an application invokes the totalSize method on an ob... |
| CVE-2015-2312 | — | — | 1.9% | Aug 9, 2017 | Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to cause a denial of service (CPU and ... |
| CVE-2015-2311 | — | — | 2.5% | Aug 9, 2017 | Integer underflow in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 might allow remote peers to cause a d... |
| CVE-2015-2310 | CRITICAL | 9.1 | 1.8% | Aug 9, 2017 | Integer overflow in layout.c++ in Sandstorm Cap'n Proto before 0.4.1.1 and 0.5.x before 0.5.1.1 allows remote peers to c... |
| CVE-2015-2291 | HIGH | 7.8 | 9.0% | Aug 9, 2017 | (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all... |
| CVE-2015-1820 | — | — | 4.3% | Aug 9, 2017 | REST client for Ruby (aka rest-client) before 1.8.0 allows remote attackers to conduct session fixation attacks or obtai... |
| CVE-2015-0786 | — | — | 23.6% | Aug 9, 2017 | Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration ... |
| CVE-2015-0785 | — | — | 6.5% | Aug 9, 2017 | com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remot... |
| CVE-2015-0784 | — | — | 6.6% | Aug 9, 2017 | Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged i... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now