2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-5182 | HIGH | 8.8 | 0.6% | Sep 25, 2017 | Cross-site request forgery (CSRF) vulnerability in the jolokia API in A-MQ. |
| CVE-2015-5237 | HIGH | 8.8 | 5.1% | Sep 25, 2017 | protobuf allows remote authenticated attackers to cause a heap-based buffer overflow. |
| CVE-2015-8559 | HIGH | 7.5 | 1.9% | Sep 21, 2017 | The knife bootstrap command in chef Infra client before version 15.4.45 leaks the validator.pem private RSA key to /var/... |
| CVE-2015-5395 | HIGH | 8.8 | 0.9% | Sep 20, 2017 | Cross-site request forgery (CSRF) vulnerability in SOGo before 3.1.0. |
| CVE-2015-3890 | HIGH | 7.5 | 1.1% | Sep 20, 2017 | Use-after-free vulnerability in Open Litespeed before 1.3.10. |
| CVE-2015-4075 | HIGH | 8.1 | 7.4% | Sep 20, 2017 | The Helpdesk Pro plugin before 1.4.0 for Joomla! allows remote attackers to write to arbitrary .ini files via a crafted ... |
| CVE-2015-7294 | HIGH | 7.5 | 2.1% | Sep 6, 2017 | ldapauth-fork before 2.3.3 allows remote attackers to perform LDAP injection attacks via a crafted username. |
| CVE-2015-5947 | HIGH | 8.1 | 2.7% | Sep 6, 2017 | SuiteCRM before 7.2.3 allows remote attackers to execute arbitrary code. |
| CVE-2015-0853 | HIGH | 8.8 | 3.3% | Sep 6, 2017 | svn-workbench 1.6.2 and earlier on a system with xeyes installed allows local users to execute arbitrary commands by usi... |
| CVE-2015-5958 | HIGH | 8.8 | 27.4% | Aug 31, 2017 | phpFileManager 0.9.8 allows remote attackers to execute arbitrary commands via a crafted URL. |
| CVE-2015-3655 | HIGH | 8.8 | 0.7% | Aug 29, 2017 | Cross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before... |
| CVE-2015-0928 | HIGH | 7.5 | 2.3% | Aug 28, 2017 | libhtp 0.5.15 allows remote attackers to cause a denial of service (NULL pointer dereference). |
| CVE-2015-5258 | HIGH | 8.8 | 0.8% | Aug 22, 2017 | Cross-site request forgery (CSRF) vulnerability in springframework-social before 1.1.3. |
| CVE-2015-3649 | HIGH | 7.8 | 0.4% | Aug 18, 2017 | The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp contain... |
| CVE-2015-2291 | HIGH | 7.8 | 9.0% | Aug 9, 2017 | (1) IQVW32.sys before 1.3.1.0 and (2) IQVW64.sys before 1.3.1.0 in the Intel Ethernet diagnostics driver for Windows all... |
| CVE-2015-7764 | HIGH | 7.5 | 1.5% | Aug 9, 2017 | Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode. |
| CVE-2015-7854 | HIGH | 8.8 | 14.6% | Aug 7, 2017 | Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows rem... |
| CVE-2015-7849 | HIGH | 8.8 | 16.8% | Aug 7, 2017 | Use-after-free vulnerability in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated us... |
| CVE-2015-7704 | HIGH | 7.5 | 10.9% | Aug 7, 2017 | The ntpd client in NTP 4.x before 4.2.8p4 and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service v... |
| CVE-2015-7701 | HIGH | 7.5 | 6.5% | Aug 7, 2017 | Memory leak in the CRYPTO_ASSOC function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote atta... |
| CVE-2015-7692 | HIGH | 7.5 | 7.3% | Aug 7, 2017 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a... |
| CVE-2015-7691 | HIGH | 7.5 | 7.2% | Aug 7, 2017 | The crypto_xmit function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a... |
| CVE-2015-7703 | HIGH | 7.5 | 3.9% | Jul 24, 2017 | The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configur... |
| CVE-2015-5219 | HIGH | 7.5 | 5.9% | Jul 21, 2017 | The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value... |
| CVE-2015-5232 | HIGH | 8.1 | 1.7% | Jun 7, 2017 | Race conditions in opa-fm before 10.4.0.0.196 and opa-ff before 10.4.0.0.197. |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now