2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-1834 | MEDIUM | 6.5 | 1.7% | May 25, 2017 | A path traversal vulnerability was identified in the Cloud Foundry component Cloud Controller that affects cf-release ve... |
| CVE-2015-8477 | — | — | 1.5% | May 23, 2017 | Cross-site scripting (XSS) vulnerability in Redmine before 2.6.2 allows remote attackers to inject arbitrary web script ... |
| CVE-2015-8089 | — | — | 0.3% | May 23, 2017 | The GPU driver in Huawei P7 phones with software P7-L00 before P7-L00C17B851, P7-L05 before P7-L05C00B851, and P7-L09 be... |
| CVE-2015-6817 | — | — | 2.2% | May 23, 2017 | PgBouncer 1.6.x before 1.6.1, when configured with auth_user, allows remote attackers to gain login access as auth_user ... |
| CVE-2015-6586 | — | — | 1.3% | May 23, 2017 | The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote att... |
| CVE-2015-5682 | — | — | 1.9% | May 23, 2017 | upload.php in the Powerplay Gallery plugin 3.3 for WordPress allows remote attackers to create arbitrary directories via... |
| CVE-2015-5609 | — | — | 3.2% | May 23, 2017 | Absolute path traversal vulnerability in the Image Export plugin 1.1 for WordPress allows remote attackers to read and d... |
| CVE-2015-5469 | — | — | 10.1% | May 23, 2017 | Absolute path traversal vulnerability in the MDC YouTube Downloader plugin 2.1.0 for WordPress allows remote attackers t... |
| CVE-2015-5468 | — | — | 24.1% | May 23, 2017 | Directory traversal vulnerability in the WP e-Commerce Shop Styling plugin before 2.6 for WordPress allows remote attack... |
| CVE-2015-5401 | — | — | 2.3% | May 23, 2017 | Teradata Gateway before 15.00.03.02-1 and 15.10.x before 15.10.00.01-1 and TD Express before 15.00.02.08_Sles10 and 15.0... |
| CVE-2015-5383 | — | — | 3.8% | May 23, 2017 | Roundcube Webmail 1.1.x before 1.1.2 allows remote attackers to obtain sensitive information by reading files in the (1)... |
| CVE-2015-5382 | — | — | 3.3% | May 23, 2017 | program/steps/addressbook/photo.inc in Roundcube Webmail before 1.0.6 and 1.1.x before 1.1.2 allows remote authenticated... |
| CVE-2015-5381 | — | — | 2.5% | May 23, 2017 | Cross-site scripting (XSS) vulnerability in program/include/rcmail.php in Roundcube Webmail 1.1.x before 1.1.2 allows re... |
| CVE-2015-4704 | — | — | 5.3% | May 23, 2017 | Directory traversal vulnerability in the Download Zip Attachments plugin 1.0 for WordPress allows remote attackers to re... |
| CVE-2015-4455 | — | — | 41.5% | May 23, 2017 | Unrestricted file upload vulnerability in includes/upload.php in the Aviary Image Editor Add-on For Gravity Forms plugin... |
| CVE-2015-4054 | — | — | 4.1% | May 23, 2017 | PgBouncer before 1.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) by send... |
| CVE-2015-4046 | — | — | 2.7% | May 23, 2017 | The asset discovery scanner in AlienVault OSSIM before 5.0.1 allows remote authenticated users to execute arbitrary comm... |
| CVE-2015-4045 | — | — | 0.5% | May 23, 2017 | The sudoers file in the asset discovery scanner in AlienVault OSSIM before 5.0.1 allows local users to gain privileges v... |
| CVE-2015-1529 | — | — | 0.9% | May 23, 2017 | Integer overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a denial of service via u... |
| CVE-2015-5241 | — | — | 2.3% | May 19, 2017 | After logging into the portal, the logout jsp page redirects the browser back to the login page after. It is feasible fo... |
| CVE-2015-4070 | — | — | 1.4% | May 17, 2017 | Open redirect vulnerability in the proxyimages function in wowproxy.php in the Wow Moodboard Lite plugin 1.1.1.1 for Wor... |
| CVE-2015-3998 | — | — | 1.1% | May 17, 2017 | Cross-site scripting (XSS) vulnerability in phpwhois 4.2.5, as used in the adsense-click-fraud-monitoring plugin 1.7.5 f... |
| CVE-2015-9003 | — | — | 0.6% | May 16, 2017 | In TrustZone a cryptographic issue can potentially occur in all Android releases from CAF using the Linux kernel. |
| CVE-2015-9002 | — | — | 0.6% | May 16, 2017 | In TrustZone an out-of-range pointer offset vulnerability can potentially occur in a DRM routine in all Android releases... |
| CVE-2015-9001 | — | — | 0.5% | May 16, 2017 | In TrustZone an information exposure vulnerability can potentially occur in all Android releases from CAF using the Linu... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now