2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-6540 | — | — | 0.8% | Jun 7, 2017 | Cross-site scripting (XSS) vulnerability in Intellect Design Arena Intellect Core banking software. |
| CVE-2015-6240 | — | — | 0.4% | Jun 7, 2017 | The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environme... |
| CVE-2015-5232 | HIGH | 8.1 | 1.7% | Jun 7, 2017 | Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197. |
| CVE-2015-5202 | — | — | — | Jun 7, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2015-5233. Reason: This candidate is a reservation du... |
| CVE-2015-5175 | — | — | 10.9% | Jun 7, 2017 | Application plugins in Apache CXF Fediz before 1.1.3 and 1.2.x before 1.2.1 allow remote attackers to cause a denial of ... |
| CVE-2015-8326 | — | — | 0.4% | Jun 7, 2017 | The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user. |
| CVE-2015-7888 | — | — | 4.0% | Jun 7, 2017 | Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remot... |
| CVE-2015-7724 | — | — | 0.6% | Jun 7, 2017 | AMD fglrx-driver before 15.9 allows local users to gain privileges via a symlink attack. NOTE: This vulnerability exist... |
| CVE-2015-7723 | — | — | 0.6% | Jun 7, 2017 | AMD fglrx-driver before 15.7 allows local users to gain privileges via a symlink attack. |
| CVE-2015-7514 | — | — | 1.6% | Jun 7, 2017 | OpenStack Ironic 4.2.0 through 4.2.1 does not "clean" the disk after use, which allows remote authenticated users to obt... |
| CVE-2015-7326 | — | — | 2.9% | Jun 7, 2017 | XML External Entity (XXE) vulnerability in Milton Webdav before 2.7.0.3. |
| CVE-2015-3830 | — | — | 0.5% | Jun 6, 2017 | The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows r... |
| CVE-2015-1207 | — | — | 0.8% | Jun 6, 2017 | Double-free vulnerability in libavformat/mov.c in FFMPEG in Google Chrome 41.0.2251.0 allows remote attackers to cause a... |
| CVE-2015-9007 | — | — | 0.5% | Jun 6, 2017 | In TrustZone in all Android releases from CAF using the Linux kernel, a Double Free vulnerability could potentially exis... |
| CVE-2015-9006 | — | — | 0.4% | Jun 6, 2017 | In Resource Power Manager (RPM) in all Android releases from CAF using the Linux kernel, an Improper Access Control vuln... |
| CVE-2015-9005 | — | — | 0.5% | Jun 6, 2017 | In TrustZone in all Android releases from CAF using the Linux kernel, an Integer Overflow to Buffer Overflow vulnerabili... |
| CVE-2015-6531 | — | — | 2.9% | Jun 1, 2017 | Palo Alto Networks Panorama VM Appliance with PAN-OS before 6.0.1 might allow remote attackers to execute arbitrary Pyth... |
| CVE-2015-5473 | — | — | 12.6% | Jun 1, 2017 | Multiple directory traversal vulnerabilities in Samsung SyncThru 6 before 1.0 allow remote attackers to delete arbitrary... |
| CVE-2015-0936 | CRITICAL | 9.8 | 78.1% | Jun 1, 2017 | Ceragon FibeAir IP-10 have a default SSH public key in the authorized_keys file for the mateidu user, which allows remot... |
| CVE-2015-9059 | — | — | 2.2% | May 28, 2017 | picocom before 2.0 has a command injection vulnerability in the 'send and receive file' command because the command line... |
| CVE-2015-0269 | — | — | 1.4% | May 26, 2017 | Directory traversal vulnerability in Contao before 3.2.19, and 3.4.x before 3.4.4 allows remote authenticated "back end"... |
| CVE-2015-5211 | CRITICAL | 9.6 | 2.6% | May 25, 2017 | Under some situations, the Spring Framework 4.2.0 to 4.2.1, 4.0.0 to 4.1.7, 3.2.0 to 3.2.14 and older unsupported versio... |
| CVE-2015-3191 | HIGH | 8.8 | 0.5% | May 25, 2017 | With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Clo... |
| CVE-2015-3190 | MEDIUM | 6.1 | 0.7% | May 25, 2017 | With Cloud Foundry Runtime cf-release versions v209 or earlier, UAA Standalone versions 2.2.6 or earlier and Pivotal Clo... |
| CVE-2015-3189 | LOW | 3.7 | 0.8% | May 25, 2017 | With Cloud Foundry Runtime cf-release versions v208 or earlier, UAA Standalone versions 2.2.5 or earlier and Pivotal Clo... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now