2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-9024 | — | — | 0.5% | Jun 13, 2017 | In all Android releases from CAF using the Linux kernel, some interfaces were improperly exposed to QTEE applications. |
| CVE-2015-9023 | — | — | 0.6% | Jun 13, 2017 | In all Android releases from CAF using the Linux kernel, a buffer overflow vulnerability exists in the PlayReady API. |
| CVE-2015-9022 | — | — | 0.4% | Jun 13, 2017 | In all Android releases from CAF using the Linux kernel, time-of-check Time-of-use (TOCTOU) Race Conditions exist in sev... |
| CVE-2015-9021 | — | — | 0.5% | Jun 13, 2017 | In all Android releases from CAF using the Linux kernel, access control to SMEM memory was not enabled. |
| CVE-2015-9020 | — | — | 0.6% | Jun 13, 2017 | In all Android releases from CAF using the Linux kernel, an untrusted pointer dereference vulnerability exists in the un... |
| CVE-2015-4596 | — | — | 0.3% | Jun 13, 2017 | Lenovo Mouse Suite before 6.73 allows local users to run arbitrary code with administrator privileges. |
| CVE-2015-3220 | — | — | 3.2% | Jun 13, 2017 | The tlslite library before 0.4.9 for Python allows remote attackers to trigger a denial of service (runtime exception an... |
| CVE-2015-9097 | — | — | 3.4% | Jun 12, 2017 | The mail gem before 2.5.5 for Ruby (aka A Really Ruby Mail Library) is vulnerable to SMTP command injection via CRLF seq... |
| CVE-2015-9096 | — | — | 3.6% | Jun 12, 2017 | Net::SMTP in Ruby before 2.4.0 is vulnerable to SMTP command injection via CRLF sequences in a RCPT TO or MAIL FROM comm... |
| CVE-2015-3913 | — | — | 0.9% | Jun 8, 2017 | The IP stack in multiple Huawei Campus series switch models allows remote attackers to cause a denial of service (reboot... |
| CVE-2015-3634 | — | — | 3.5% | Jun 8, 2017 | The SlideshowPluginSlideshowStylesheet::loadStylesheetByAJAX function in the Slideshow plugin 2.2.8 through 2.2.21 for W... |
| CVE-2015-2692 | — | — | 2.1% | Jun 8, 2017 | AdBlock before 2.21 allows remote attackers to block arbitrary resources on arbitrary websites and to disable arbitrary ... |
| CVE-2015-1786 | — | — | 0.7% | Jun 8, 2017 | Cross-site request forgery (CSRF) vulnerability in Zend/Validator/Csrf in Zend Framework 2.3.x before 2.3.6 via null or ... |
| CVE-2015-1588 | — | — | 1.5% | Jun 8, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Open-Xchange Server 6 and OX AppSuite before 7.4.2-rev43, 7.6.0-r... |
| CVE-2015-1379 | — | — | 3.9% | Jun 8, 2017 | The signal handler implementations in socat before 1.7.3.0 and 2.0.0-b8 allow remote attackers to cause a denial of serv... |
| CVE-2015-2800 | — | — | 1.7% | Jun 8, 2017 | The user authentication module in Huawei Campus switches S5700, S5300, S6300, and S6700 with software before V200R001SPH... |
| CVE-2015-2255 | — | — | 0.7% | Jun 8, 2017 | Huawei AR1220 routers with software before V200R005SPH006 allow remote attackers to cause a denial of service (board res... |
| CVE-2015-2253 | — | — | 0.6% | Jun 8, 2017 | The XML interface in Huawei OceanStor UDS devices with software before V100R002C01SPC102 allows remote authenticated use... |
| CVE-2015-2252 | — | — | 2.2% | Jun 8, 2017 | Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to execute arbitrary co... |
| CVE-2015-2251 | — | — | 1.0% | Jun 8, 2017 | The DeviceManager in Huawei OceanStor UDS devices with software before V100R002C01SPC102 might allow remote attackers to... |
| CVE-2015-7346 | — | — | 3.7% | Jun 7, 2017 | SQL injection vulnerability in ZCMS 1.1. |
| CVE-2015-3295 | — | — | 1.3% | Jun 7, 2017 | markdown-it before 4.1.0 does not block data: URLs. |
| CVE-2015-8538 | MEDIUM | 6.5 | 1.2% | Jun 7, 2017 | dwarf_leb.c in libdwarf allows attackers to cause a denial of service (SIGSEGV). |
| CVE-2015-8235 | — | — | 3.1% | Jun 7, 2017 | Directory traversal vulnerability in Spiffy before 5.4. |
| CVE-2015-6959 | — | — | 0.5% | Jun 7, 2017 | Cross-site scripting (XSS) vulnerability in Vindula 1.9. |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now