2015 CVE Vulnerabilities
8,787 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-7960 | — | — | — | Mar 6, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ... |
| CVE-2015-7959 | — | — | — | Mar 6, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ... |
| CVE-2015-7958 | — | — | — | Mar 6, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ... |
| CVE-2015-7957 | — | — | — | Mar 6, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ... |
| CVE-2015-7956 | — | — | — | Mar 6, 2017 | Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this ... |
| CVE-2015-8815 | — | — | 0.7% | Mar 3, 2017 | Multiple cross-site scripting (XSS) vulnerabilities in Umbraco before 7.4.0 allow remote attackers to inject arbitrary w... |
| CVE-2015-8814 | — | — | 0.6% | Mar 3, 2017 | Umbraco before 7.4.0 allows remote attackers to bypass anti-forgery security measures and conduct cross-site request for... |
| CVE-2015-8813 | — | — | 11.6% | Mar 3, 2017 | The Page_Load function in Umbraco.Web/umbraco.presentation/umbraco/dashboard/FeedProxy.aspx.cs in Umbraco before 7.4.0 a... |
| CVE-2015-2877 | LOW | 3.3 | 0.9% | Mar 3, 2017 | Kernel Samepage Merging (KSM) in the Linux kernel 2.6.32 through 4.x does not prevent use of a write-timing side channel... |
| CVE-2015-8994 | HIGH | 7.5 | 2.9% | Mar 2, 2017 | An issue was discovered in PHP 5.x and 7.x, when the configuration uses apache2handler/mod_php or php-fpm with OpCache e... |
| CVE-2015-8903 | MEDIUM | 6.5 | 2.0% | Feb 27, 2017 | The ReadVICARImage function in coders/vicar.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a ... |
| CVE-2015-8902 | MEDIUM | 6.5 | 2.0% | Feb 27, 2017 | The ReadBlobByte function in coders/pdb.c in ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a deni... |
| CVE-2015-8901 | MEDIUM | 6.5 | 2.0% | Feb 27, 2017 | ImageMagick 6.x before 6.9.0-5 Beta allows remote attackers to cause a denial of service (infinite loop) via a crafted M... |
| CVE-2015-8900 | MEDIUM | 5.5 | 1.7% | Feb 27, 2017 | The ReadHDRImage function in coders/hdr.c in ImageMagick 6.x and 7.x allows remote attackers to cause a denial of servic... |
| CVE-2015-4057 | HIGH | 7.5 | 1.5% | Feb 21, 2017 | The "Plug-in for VMware vCenter" in VCE Vision Intelligent Operations before 2.6.5 sends a cleartext HTTP response upon ... |
| CVE-2015-4056 | MEDIUM | 6.7 | 0.3% | Feb 21, 2017 | The System Library in VCE Vision Intelligent Operations before 2.6.5 does not properly implement cryptography, which mak... |
| CVE-2015-8979 | — | — | 3.9% | Feb 15, 2017 | Stack-based buffer overflow in the parsePresentationContext function in storescp in DICOM dcmtk-3.6.0 and earlier allows... |
| CVE-2015-8771 | — | — | 2.4% | Feb 13, 2017 | The generate_smb_nt_hash function in include/functions.inc in GOsa allows remote attackers to execute arbitrary commands... |
| CVE-2015-8768 | — | — | 2.7% | Feb 13, 2017 | click/install.py in click does not require files in package filesystem tarballs to start with ./ (dot slash), which allo... |
| CVE-2015-8750 | MEDIUM | 6.5 | 1.9% | Feb 13, 2017 | libdwarf 20151114 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and crash) ... |
| CVE-2015-8936 | — | — | 1.0% | Feb 9, 2017 | Cross-site scripting (XSS) vulnerability in squidGuard.cgi in squidGuard before 1.5 allows remote attackers to inject ar... |
| CVE-2015-8832 | — | — | 2.6% | Feb 9, 2017 | Multiple incomplete blacklist vulnerabilities in inc/core/class.dc.core.php in Dotclear before 2.8.2 allow remote authen... |
| CVE-2015-8831 | — | — | 2.1% | Feb 9, 2017 | Cross-site scripting (XSS) vulnerability in admin/comments.php in Dotclear before 2.8.2 allows remote attackers to injec... |
| CVE-2015-6024 | — | — | 26.1% | Feb 9, 2017 | ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot... |
| CVE-2015-6023 | — | — | 11.0% | Feb 9, 2017 | ping.cgi in NetCommWireless HSPA 3G10WVE wireless routers with firmware before 3G10WVE-L101-S306ETS-C01_R05 allows remot... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now