2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-9295 | — | — | 0.9% | Aug 13, 2019 | The contact-form-plugin plugin before 3.96 for WordPress has XSS. |
| CVE-2015-9294 | — | — | 0.9% | Aug 13, 2019 | The all-in-one-wp-security-and-firewall plugin before 3.9.5 for WordPress has XSS in add_query_arg and remove_query_arg ... |
| CVE-2015-9293 | — | — | 0.9% | Aug 13, 2019 | The all-in-one-wp-security-and-firewall plugin before 3.9.8 for WordPress has XSS in the unlock request feature. |
| CVE-2015-9303 | — | — | 1.0% | Aug 12, 2019 | The simple-share-buttons-adder plugin before 6.0.0 for WordPress has XSS. |
| CVE-2015-9306 | — | — | 1.0% | Aug 12, 2019 | The wp-ultimate-csv-importer plugin before 3.8.1 for WordPress has XSS. |
| CVE-2015-9305 | — | — | 0.9% | Aug 12, 2019 | The wp-google-map-plugin plugin before 2.3.7 for WordPress has XSS related to the add_query_arg() and remove_query_arg()... |
| CVE-2015-9292 | — | — | 0.6% | Aug 8, 2019 | 6kbbs 7.1 and 8.0 allows CSRF via portalchannel_ajax.php (id or code parameter) or admin.php (fileids parameter). |
| CVE-2015-9291 | — | — | 1.3% | Aug 1, 2019 | cPanel before 11.52.0.13 does not prevent arbitrary file-read operations via get_information_for_applications (CPANEL-12... |
| CVE-2015-9290 | — | — | 2.7% | Jul 30, 2019 | In FreeType before 2.6.1, a buffer over-read occurs in type1/t1parse.c on function T1_Get_Private_Dict where there is no... |
| CVE-2015-9288 | — | — | 0.9% | Jul 29, 2019 | The Unity Web Player plugin before 4.6.6f2 and 5.x before 5.0.3f2 allows attackers to read messages or access online ser... |
| CVE-2015-6253 | — | — | 0.5% | Jul 29, 2019 | edx-platform before 2015-08-17 allows XSS in the Studio listing of courses. |
| CVE-2015-5601 | — | — | 1.5% | Jul 29, 2019 | edx-platform before 2015-07-20 allows code execution by privileged users because the course import endpoint mishandles .... |
| CVE-2015-3907 | — | — | 1.6% | Jul 3, 2019 | CodeIgniter Rest Server (aka codeigniter-restserver) 2.7.1 allows XXE attacks. |
| CVE-2015-7609 | — | — | 1.3% | May 30, 2019 | Synacor Zimbra Mail Client 8.6 before 8.6.0 Patch 5 has XSS via the error/warning dialog and email body content in Zimbr... |
| CVE-2015-9287 | — | — | 2.0% | May 13, 2019 | Directory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The key identification fiel... |
| CVE-2015-1006 | — | — | 5.3% | May 10, 2019 | A vulnerable file in Opto 22 PAC Project Professional versions prior to R9.4006, PAC Project Basic versions prior to R9.... |
| CVE-2015-9286 | — | — | 1.4% | Apr 30, 2019 | Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS. |
| CVE-2015-9285 | — | — | 0.9% | Apr 29, 2019 | esoTalk 1.0.0g4 has XSS via the PATH_INFO to the conversations/ URI. |
| CVE-2015-5462 | — | — | 1.0% | Apr 3, 2019 | AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier allows remote attackers to inject HTML into the scoping dash... |
| CVE-2015-5384 | — | — | 1.3% | Apr 3, 2019 | AxiomSL's Axiom Google Web Toolkit module 9.5.3 and earlier is vulnerable to a Session Fixation attack. |
| CVE-2015-5463 | — | — | 2.0% | Apr 3, 2019 | AxiomSL's Axiom java applet module (used for editing uploaded Excel files and associated Java RMI services) 9.5.3 and ea... |
| CVE-2015-5606 | — | — | 1.7% | Apr 3, 2019 | Vordel XML Gateway (acquired by Axway) version 7.2.2 could allow remote attackers to cause a denial of service via a spe... |
| CVE-2015-1014 | — | — | 0.5% | Mar 25, 2019 | A successful exploit of these vulnerabilities requires the local user to load a crafted DLL file in the system directory... |
| CVE-2015-1012 | — | — | 0.8% | Mar 25, 2019 | Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, v... |
| CVE-2015-1007 | — | — | 2.7% | Mar 25, 2019 | A specially crafted configuration file could be used to cause a stack-based buffer overflow condition in the OPCTest.exe... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now