2015 CVE Vulnerabilities
8,779 CVEs published in 2015.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2015-6018 | — | — | 20.6% | Dec 31, 2015 | The diagnostic-ping implementation on ZyXEL PMG5318-B20A devices with firmware before 1.00(AANC.2)C0 allows remote attac... |
| CVE-2015-6017 | — | — | 2.1% | Dec 31, 2015 | Multiple cross-site scripting (XSS) vulnerabilities in Forms/rpAuth_1 on ZyXEL P-660HW-T1 2 devices with ZyNOS firmware ... |
| CVE-2015-6016 | — | — | 5.7% | Dec 31, 2015 | ZyXEL P-660HW-T1 2 devices with ZyNOS firmware 3.40(AXH.0), PMG5318-B20A devices with firmware 1.00AANC0b5, and NBG-418N... |
| CVE-2015-5996 | — | — | 1.4% | Dec 31, 2015 | Cross-site request forgery (CSRF) vulnerability on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 allo... |
| CVE-2015-5995 | — | — | 19.1% | Dec 31, 2015 | Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 and Tenda N3 Wireless N150 devices allow remote attacke... |
| CVE-2015-5994 | — | — | 1.3% | Dec 31, 2015 | The web management interface on Mediabridge Medialink MWN-WAPR300N devices with firmware 5.07.50 has a default password ... |
| CVE-2015-2918 | — | — | 0.8% | Dec 31, 2015 | The Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 does not properly restric... |
| CVE-2015-2913 | — | — | 1.9% | Dec 31, 2015 | server/network/protocol/http/OHttpSessionManager.java in the Studio component in OrientDB Server Community Edition befor... |
| CVE-2015-2912 | — | — | 1.3% | Dec 31, 2015 | The JSONP endpoint in the Studio component in OrientDB Server Community Edition before 2.0.15 and 2.1.x before 2.1.1 doe... |
| CVE-2015-2896 | — | — | 1.2% | Dec 31, 2015 | The up.time client in Idera Uptime Infrastructure Monitor through 7.6 allows remote attackers to obtain potentially sens... |
| CVE-2015-2895 | — | — | 1.9% | Dec 31, 2015 | Buffer overflow in the up.time client in Idera Uptime Infrastructure Monitor 7.4 might allow remote attackers to execute... |
| CVE-2015-2894 | — | — | 1.4% | Dec 31, 2015 | Format string vulnerability in the up.time client in Idera Uptime Infrastructure Monitor 6.0 and 7.2 allows remote attac... |
| CVE-2015-2876 | — | — | 2.8% | Dec 31, 2015 | Unrestricted file upload vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Pl... |
| CVE-2015-2875 | — | — | 3.2% | Dec 31, 2015 | Absolute path traversal vulnerability on Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plu... |
| CVE-2015-2874 | — | — | 4.2% | Dec 31, 2015 | Seagate GoFlex Satellite, Seagate Wireless Mobile Storage, Seagate Wireless Plus Mobile Storage, and LaCie FUEL devices ... |
| CVE-2015-8703 | — | — | 4.9% | Dec 30, 2015 | ZTE ZXHN H108N R1A devices before ZTE.bhs.ZXHNH108NR1A.k_PE and ZXV10 W300 devices W300V1.0.0f_ER1_PE allow remote authe... |
| CVE-2015-7794 | — | — | 1.6% | Dec 30, 2015 | Corega CG-WLNCM4G devices provide an open DNS resolver, which allows remote attackers to cause a denial of service (traf... |
| CVE-2015-7793 | — | — | 1.6% | Dec 30, 2015 | Corega CG-WLBARAGM devices provide an open proxy service, which allows remote attackers to trigger outbound network traf... |
| CVE-2015-7792 | — | — | 2.8% | Dec 30, 2015 | Corega CG-WLBARGS devices allow remote attackers to perform administrative operations via unspecified vectors. |
| CVE-2015-7790 | — | — | 1.0% | Dec 30, 2015 | Cross-site scripting (XSS) vulnerability on ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allows remote att... |
| CVE-2015-7789 | — | — | 0.6% | Dec 30, 2015 | ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to cause a denial of service via unspe... |
| CVE-2015-7788 | — | — | 2.2% | Dec 30, 2015 | ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to execute arbitrary commands via unsp... |
| CVE-2015-7787 | — | — | 0.6% | Dec 30, 2015 | ASUS Japan WL-330NUL devices with firmware before 3.0.0.42 allow remote attackers to discover the WPA2-PSK passphrase vi... |
| CVE-2015-7784 | — | — | 1.1% | Dec 30, 2015 | SQL injection vulnerability in the BOKUBLOCK (1) BbAdminViewsControl213 plugin before 1.1 and (2) BbAdminViewsControl pl... |
| CVE-2015-7782 | — | — | 0.8% | Dec 30, 2015 | Cross-site scripting (XSS) vulnerability in Let's PHP! Frame high-speed chat before 2015-09-22 allows remote attackers t... |
Check if your code is affected by 2015 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now