2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-8356 | — | — | 2.7% | Apr 14, 2017 | Multiple SQL injection vulnerabilities in the mcart.xls module 6.5.2 and earlier for Bitrix allow remote authenticated u... |
| CVE-2015-8619 | HIGH | 7.5 | 3.9% | Apr 13, 2017 | The Human Monitor Interface support in QEMU allows remote attackers to cause a denial of service (out-of-bounds write an... |
| CVE-2015-8567 | HIGH | 7.7 | 5.6% | Apr 13, 2017 | Memory leak in net/vmxnet3.c in QEMU allows remote attackers to cause a denial of service (memory consumption). |
| CVE-2015-8345 | MEDIUM | 6.5 | 0.4% | Apr 13, 2017 | The eepro100 emulator in QEMU qemu-kvm blank allows local guest users to cause a denial of service (application crash an... |
| CVE-2015-4646 | HIGH | 7.5 | 6.9% | Apr 13, 2017 | (1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attack... |
| CVE-2015-2947 | — | — | 1.5% | Apr 13, 2017 | KanColleViewer versions 3.8.1 and earlier operates as an open proxy which allows remote attackers to trigger outbound ne... |
| CVE-2015-8780 | — | — | 0.6% | Apr 13, 2017 | Samsung wssyncmlnps before 2015-10-31 allows directory traversal in a Kies restore, aka ZipFury. |
| CVE-2015-8864 | — | — | 2.7% | Apr 13, 2017 | Cross-site scripting (XSS) vulnerability in Roundcube Webmail before 1.0.9 and 1.1.x before 1.1.5 allows remote attacker... |
| CVE-2015-8284 | — | — | 4.2% | Apr 13, 2017 | SeaWell Networks Spectrum SDC 02.05.00 allows remote viewer users to perform administrative functions. |
| CVE-2015-8283 | — | — | 6.8% | Apr 13, 2017 | Directory traversal vulnerability in configure_manage.php in SeaWell Networks Spectrum SDC 02.05.00. |
| CVE-2015-8282 | — | — | 6.6% | Apr 13, 2017 | SeaWell Networks Spectrum SDC 02.05.00 has a default password of "admin" for the "admin" account. |
| CVE-2015-8272 | — | — | 2.7% | Apr 13, 2017 | RTMPDump 2.4 allows remote attackers to trigger a denial of service (NULL pointer dereference and process crash). |
| CVE-2015-8271 | — | — | 5.9% | Apr 13, 2017 | The AMF3CD_AddProp function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to execute arbitrary code. |
| CVE-2015-8270 | — | — | 3.2% | Apr 13, 2017 | The AMF3ReadString function in amf.c in RTMPDump 2.4 allows remote RTMP Media servers to cause a denial of service (inva... |
| CVE-2015-8223 | — | — | 0.2% | Apr 13, 2017 | Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B85, and P8 ALE-UL00 before ALE-UL00B211 allows local users ... |
| CVE-2015-8107 | — | — | 2.9% | Apr 13, 2017 | Format string vulnerability in GNU a2ps 4.14 allows remote attackers to execute arbitrary code. |
| CVE-2015-7740 | — | — | 0.2% | Apr 13, 2017 | Huawei P7 before P7-L00C17B851, P7-L05C00B851, and P7-L09C92B851 and P8 ALE-UL00 before ALE-UL00B211 allows local users ... |
| CVE-2015-7565 | — | — | 0.8% | Apr 13, 2017 | Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x through 1.10.x, 1.11.x before 1.11.4, 1.12.x before 1.12.2, 1... |
| CVE-2015-6674 | — | — | 2.3% | Apr 13, 2017 | Buffer underflow vulnerability in the Debian inspircd package before 2.0.5-1+deb7u1 for wheezy and before 2.0.16-1 for j... |
| CVE-2015-1839 | — | — | 0.4% | Apr 13, 2017 | modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp. |
| CVE-2015-1838 | — | — | 0.4% | Apr 13, 2017 | modules/serverdensity_device.py in SaltStack before 2014.7.4 does not properly handle files in /tmp. |
| CVE-2015-7564 | — | — | 3.4% | Apr 12, 2017 | Multiple SQL injection vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to execute arbitrary SQL co... |
| CVE-2015-7563 | HIGH | 8.8 | 3.1% | Apr 12, 2017 | Cross-site request forgery (CSRF) vulnerability in TeamPass 2.1.24 and earlier allows remote attackers to hijack the aut... |
| CVE-2015-7562 | — | — | 1.8% | Apr 12, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbi... |
| CVE-2015-8666 | HIGH | 7.9 | 0.4% | Apr 11, 2017 | Heap-based buffer overflow in QEMU, when built with the Q35-chipset-based PC system emulator. |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now