2015 CVE Vulnerabilities

8,787 CVEs published in 2015.

CVE IDSeverityCVSSDescription
CVE-2015-2245——Huawei Ascend P7 allows remote attackers to cause a denial of service (phone process crash).
CVE-2015-1795——Red Hat Gluster Storage RPM Package 3.2 allows local users to gain privileges and execute arbitrary code as root.
CVE-2015-1778——The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authe...
CVE-2015-1591——The kamailio build in kamailio before 4.2.0-2 process allows local users to gain privileges.
CVE-2015-0955——Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-0955. Reason: This candidate is a duplicate of...
CVE-2015-3315——Automatic Bug Reporting Tool (ABRT) allows local users to read, change the ownership of, or have other unspecified impac...
CVE-2015-3215——The NetKVM Windows Virtio driver allows remote attackers to cause a denial of service (guest crash) via a crafted length...
CVE-2015-3142——The kernel-invoked coredump processor in Automatic Bug Reporting Tool (ABRT) does not properly check the ownership of fi...
CVE-2015-1870——The event scripts in Automatic Bug Reporting Tool (ABRT) uses world-readable permission on a copy of sosreport file in p...
CVE-2015-9101MEDIUM5.5The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.98.4, 3.98.2, 3.98, 3.99, 3.99.1, 3.99.2, 3.99.3, ...
CVE-2015-9100——The fill_buffer_resample function in util.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of ...
CVE-2015-9099——The lame_init_params function in lame.c in libmp3lame.a in LAME 3.99.5 allows remote attackers to cause a denial of serv...
CVE-2015-9098CRITICAL9.8In Redgate SQL Monitor before 3.10 and 4.x before 4.2, a remote attacker can gain unauthenticated access to the Base Mon...
CVE-2015-3254——The client libraries in Apache Thrift before 0.9.3 might allow remote authenticated users to cause a denial of service (...
CVE-2015-9056——Kibana versions prior to 4.1.3 and 4.2.1 are vulnerable to a XSS attack.
CVE-2015-7732——The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext.
CVE-2015-9033——In all Android releases from CAF using the Linux kernel, a QTEE system call fails to validate a pointer.
CVE-2015-9032——In all Android releases from CAF using the Linux kernel, a DRM key was exposed to QTEE applications.
CVE-2015-9031——In all Android releases from CAF using the Linux kernel, a TZ memory address is exposed to HLOS by HDCP.
CVE-2015-9030——In all Android releases from CAF using the Linux kernel, the Hypervisor API could be misused to bypass authentication.
CVE-2015-9029——In all Android releases from CAF using the Linux kernel, a vulnerability exists in the access control settings of modem ...
CVE-2015-9028——In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a cryptographic routi...
CVE-2015-9027——In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVi...
CVE-2015-9026——In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in WideVi...
CVE-2015-9025——In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in a QTEE application.

Check if your code is affected by 2015 CVEs

Strix scans your code and infrastructure for known vulnerabilities automatically.

Scan your code now