2015 CVEs (page 2)
Page 2 of 88 — CVEs published in 2015, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-10079 | Low | 3.5 | 2023-02-13 | A vulnerability was found in juju2143 WalrusIRC 0.0.2. It has been rated as problematic. This issue affects the function parseLinks of the file public/parser.j… |
CVE-2015-10078 | Low | 3.5 | 2023-02-12 | A vulnerability, which was classified as problematic, has been found in atwellpub Resend Welcome Email Plugin 1.0.1 on WordPress. This issue affects the functi… |
CVE-2015-10077 | Medium | 6.3 | 2023-02-10 | A vulnerability was found in webbuilders-group silverstripe-kapost-bridge 0.3.3. It has been declared as critical. Affected by this vulnerability is the functi… |
CVE-2015-10076 | Medium | 5.5 | 2023-02-09 | A vulnerability was found in dimtion Shaarlier up to 1.2.2. It has been declared as critical. Affected by this vulnerability is the function createTag of the f… |
CVE-2015-10075 | Low | 2.6 | 2023-02-07 | A vulnerability was found in Custom-Content-Width 1.0. It has been declared as problematic. Affected by this vulnerability is the function override_content_wid… |
CVE-2015-10074 | Low | 3.5 | 2023-02-07 | A vulnerability was found in OpenSeaMap online_chart 1.2. It has been classified as problematic. Affected is the function init of the file index.php. The manip… |
CVE-2015-10073 | Low | 3.5 | 2023-02-06 | A vulnerability, which was classified as problematic, was found in tinymighty WikiSEO 1.2.1 on MediaWiki. This affects the function modifyHTML of the file Wiki… |
CVE-2015-10072 | Low | 3.5 | 2023-02-04 | A vulnerability classified as problematic was found in NREL api-umbrella-web 0.7.1. This vulnerability affects unknown code of the component Flash Message Hand… |
CVE-2015-10071 | Low | 2.6 | 2023-01-19 | A vulnerability was found in gitter-badger ezpublish-modern-legacy. It has been rated as problematic. This issue affects some unknown processing of the file ke… |
CVE-2015-10070 | Medium | 6.3 | 2023-01-19 | A vulnerability was found in copperwall Twiddit. It has been rated as critical. This issue affects some unknown processing of the file index.php. The manipulat… |
CVE-2015-10069 | Medium | 5.5 | 2023-01-19 | A vulnerability was found in viakondratiuk cash-machine. It has been declared as critical. This vulnerability affects the function is_card_pin_at_session/updat… |
CVE-2015-10068 | Medium | 5.5 | 2023-01-18 | A vulnerability classified as critical was found in danynab movify-j. This vulnerability affects the function getByMovieId of the file app/business/impl/Review… |
CVE-2015-10067 | Medium | 4.6 | 2023-01-18 | A vulnerability was found in oznetmaster SSharpSmartThreadPool. It has been classified as problematic. This affects an unknown part of the file SSharpSmartThre… |
CVE-2015-10066 | Medium | 5.5 | 2023-01-18 | A vulnerability was found in tynx wuersch and classified as critical. Affected by this issue is the function packValue/getByCustomQuery of the file backend/bas… |
CVE-2015-10065 | Medium | 5.5 | 2023-01-17 | A vulnerability classified as critical was found in AenBleidd FiND. This vulnerability affects the function init_result of the file validator/my_validator.cpp… |
CVE-2015-10064 | Medium | 5.5 | 2023-01-17 | A vulnerability was found in VictorFerraresi pokemon-database-php. It has been declared as critical. Affected by this vulnerability is an unknown functionality… |
CVE-2015-10063 | High | 7.3 | 2023-01-17 | A vulnerability was found in saemorris TheRadSystem and classified as critical. This issue affects the function redirect of the file _login.php. The manipulati… |
CVE-2015-10062 | Medium | 5.5 | 2023-01-17 | A vulnerability, which was classified as problematic, was found in galaxy-data-resource up to 14.10.0. This affects an unknown part of the component Command Li… |
CVE-2015-10061 | Medium | 5.5 | 2023-01-17 | A vulnerability was found in evandro-machado Trabalho-Web2. It has been classified as critical. This affects an unknown part of the file src/java/br/com/magazi… |
CVE-2015-10060 | Medium | 5.5 | 2023-01-17 | A vulnerability was found in MNBikeways database and classified as critical. This issue affects some unknown processing of the file Data/views.py. The manipula… |
CVE-2015-10059 | Low | 3.5 | 2023-01-17 | A vulnerability has been found in s134328 Webapplication-Veganguide and classified as problematic. This vulnerability affects unknown code of the file p05-inte… |
CVE-2015-10058 | Low | 3.5 | 2023-01-17 | A vulnerability, which was classified as problematic, was found in Wikisource Category Browser. This affects an unknown part of the file index.php. The manipul… |
CVE-2015-10057 | Medium | 4.6 | 2023-01-16 | A vulnerability was found in Little Apps Little Software Stats. It has been declared as critical. Affected by this vulnerability is an unknown functionality of… |
CVE-2015-10056 | Medium | 5.5 | 2023-01-16 | A vulnerability was found in 2071174A vinylmap. It has been classified as critical. Affected is the function contact of the file recordstoreapp/views.py. The m… |
CVE-2015-10055 | Medium | 5.5 | 2023-01-16 | A vulnerability was found in PictureThisWebServer and classified as critical. This issue affects the function router.post of the file routes/user.js. The manip… |
CVE-2015-10054 | Medium | 5.5 | 2023-01-16 | A vulnerability, which was classified as critical, was found in githuis P2Manage. This affects the function Execute of the file PTwoManage/Database.cs. The man… |
CVE-2015-10053 | Medium | 5.5 | 2023-01-16 | A vulnerability classified as critical has been found in prodigasistemas curupira up to 0.1.3. Affected is an unknown function of the file app/controllers/curu… |
CVE-2015-10052 | Medium | 4.6 | 2023-01-15 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as problematic, was found in calesanz gibb-modul-151. This affects the function bearbeite… |
CVE-2015-10051 | Medium | 5.5 | 2023-01-15 | A vulnerability, which was classified as critical, has been found in bony2023 Discussion-Board. Affected by this issue is the function display_all_replies of t… |
CVE-2015-10050 | Medium | 5.5 | 2023-01-15 | A vulnerability was found in brandonfire miRNA_Database_by_PHP_MySql. It has been declared as critical. This vulnerability affects the function __construct/sel… |
CVE-2015-10049 | Low | 3.5 | 2023-01-15 | A vulnerability was found in Overdrive Eletrônica course-builder up to 1.7.x and classified as problematic. Affected by this issue is some unknown functionalit… |
CVE-2015-10048 | Medium | 5.5 | 2023-01-15 | A vulnerability was found in bmattoso desafio_buzz_woody. It has been rated as critical. This issue affects some unknown processing. The manipulation leads to… |
CVE-2015-10047 | Medium | 5.5 | 2023-01-15 | A vulnerability was found in KYUUBl school-register. It has been classified as critical. This affects an unknown part of the file src/DBManager.java. The manip… |
CVE-2015-10046 | Medium | 5.5 | 2023-01-15 | A vulnerability has been found in lolfeedback and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to… |
CVE-2015-10045 | Medium | 5.5 | 2023-01-15 | A vulnerability, which was classified as critical, was found in tutrantta project_todolist. Affected is the function getAffectedRows/where/insert/update in the… |
CVE-2015-10044 | Medium | 5.5 | 2023-01-15 | A vulnerability classified as critical was found in gophergala sqldump. This vulnerability affects unknown code. The manipulation leads to sql injection. The p… |
CVE-2015-10043 | Medium | 5.5 | 2023-01-14 | A vulnerability, which was classified as critical, was found in abreen Apollo. This affects an unknown part. The manipulation of the argument file leads to pat… |
CVE-2015-10020 | Medium | 5.5 | 2023-01-14 | A vulnerability has been found in ssn2013 cis450Project and classified as critical. This vulnerability affects the function addUser of the file HeatMapServer/s… |
CVE-2015-10042 | Medium | 5.5 | 2023-01-13 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical was found in Dovgalyuk AIBattle. Affected by this vulnerability is the function register… |
CVE-2015-10041 | Medium | 5.5 | 2023-01-13 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in Dovgalyuk AIBattle. Affected is the function sendComments of the file… |
CVE-2015-10040 | Medium | 5.4 | 2023-01-13 | A vulnerability was found in gitlearn. It has been declared as problematic. This vulnerability affects the function getGrade/getOutOf of the file scripts/confi… |
CVE-2015-10039 | Medium | 5.5 | 2023-01-11 | A vulnerability was found in dobos domino. It has been rated as critical. Affected by this issue is some unknown functionality in the library src/Complex.Domin… |
CVE-2015-10038 | Medium | 5.5 | 2023-01-11 | A vulnerability was found in nym3r0s pplv2. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulation lead… |
CVE-2015-10037 | Medium | 5.5 | 2023-01-11 | A vulnerability, which was classified as critical, was found in ACI_Escola. This affects an unknown part. The manipulation leads to sql injection. The identifi… |
CVE-2015-10036 | Medium | 5.5 | 2023-01-11 | A vulnerability was found in kylebebak dronfelipe. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The manipulati… |
CVE-2015-10035 | Medium | 5.5 | 2023-01-09 | A vulnerability was found in gperson angular-test-reporter and classified as critical. This issue affects the function getProjectTables/addTest of the file res… |
CVE-2015-10034 | Medium | 5.5 | 2023-01-09 | A vulnerability has been found in j-nowak workout-organizer and classified as critical. This vulnerability affects unknown code. The manipulation leads to sql… |
CVE-2015-10033 | Low | 3.5 | 2023-01-09 | A vulnerability, which was classified as problematic, was found in jvvlee MerlinsBoard. This affects an unknown part of the component Grade Handler. The manipu… |
CVE-2015-10032 | Low | 3.5 | 2023-01-09 | A vulnerability was found in HealthMateWeb. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file createa… |
CVE-2015-10031 | Medium | 5.5 | 2023-01-08 | A vulnerability classified as critical was found in purpleparrots 491-Project. This vulnerability affects unknown code of the file update.php of the component… |
CVE-2015-10030 | Medium | 5.5 | 2023-01-08 | A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php… |
CVE-2015-10029 | Medium | 5.5 | 2023-01-07 | A vulnerability classified as problematic was found in kelvinmo simplexrd up to 3.1.0. This vulnerability affects unknown code of the file simplexrd/simplexrd… |
CVE-2015-10028 | Low | 3.5 | 2023-01-07 | A vulnerability has been found in ss15-this-is-sparta and classified as problematic. This vulnerability affects unknown code of the file js/roomElement.js of t… |
CVE-2015-10027 | Medium | 5.5 | 2023-01-07 | A vulnerability, which was classified as problematic, has been found in hydrian TTRSS-Auth-LDAP. Affected by this issue is some unknown functionality of the co… |
CVE-2015-10026 | Medium | 5.5 | 2023-01-07 | A vulnerability was found in tiredtyrant flairbot. It has been declared as critical. This vulnerability affects unknown code of the file flair.py. The manipula… |
CVE-2015-10025 | Low | 3.5 | 2023-01-07 | A vulnerability has been found in luelista miniConf up to 1.7.6 and classified as problematic. Affected by this vulnerability is an unknown functionality of th… |
CVE-2015-10024 | Medium | 5.5 | 2023-01-07 | A vulnerability classified as critical was found in hoffie larasync. This vulnerability affects unknown code of the file repository/content/file_storage.go. Th… |
CVE-2015-10023 | Medium | 5.5 | 2023-01-07 | A vulnerability classified as critical has been found in Fumon trello-octometric. This affects the function main of the file metrics-ui/server/srv.go. The mani… |
CVE-2015-10022 | Medium | 5.5 | 2023-01-07 | A vulnerability was found in IISH nlgis2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file scripts/etl/… |
CVE-2015-10021 | Low | 3.5 | 2023-01-07 | A vulnerability was found in ritterim definely. It has been classified as problematic. Affected is an unknown function of the file src/database.js. The manipul… |
CVE-2015-10019 | Low | 3.5 | 2023-01-07 | A vulnerability, which was classified as problematic, has been found in foxoverflow MySimplifiedSQL. This issue affects some unknown processing of the file MyS… |
CVE-2015-10018 | Medium | 5.5 | 2023-01-06 | A vulnerability has been found in DBRisinajumi d2files and classified as critical. Affected by this vulnerability is the function actionUpload/actionDownloadFi… |
CVE-2015-10017 | Medium | 5.5 | 2023-01-06 | A vulnerability has been found in HPI-Information-Systems ProLOD and classified as critical. This vulnerability affects unknown code. The manipulation of the a… |
CVE-2015-10016 | Medium | 5.5 | 2023-01-06 | A vulnerability, which was classified as critical, has been found in jeff-kelley opensim-utils. Affected by this issue is the function DatabaseForRegion of the… |
CVE-2015-10015 | Medium | 5.5 | 2023-01-05 | A vulnerability, which was classified as critical, has been found in glidernet ogn-live. This issue affects some unknown processing. The manipulation leads to… |
CVE-2015-10014 | Medium | 5.5 | 2023-01-05 | A vulnerability classified as critical has been found in arekk uke. This affects an unknown part of the file lib/uke/finder.rb. The manipulation leads to sql i… |
CVE-2015-10013 | Low | 3.5 | 2023-01-05 | A vulnerability was found in WebDevStudios taxonomy-switcher Plugin up to 1.0.3 on WordPress. It has been classified as problematic. Affected is the function t… |
CVE-2015-10012 | Low | 3.5 | 2023-01-03 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in sumocoders FrameworkUserBundle up to 1.3.x. It has been rated as problematic. Affected by this iss… |
CVE-2015-10011 | Medium | 4.6 | 2023-01-02 | A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipul… |
CVE-2015-10010 | Low | 3.1 | 2023-01-02 | A vulnerability was found in OpenDNS OpenResolve. It has been rated as problematic. Affected by this issue is the function get of the file resolverapi/endpoint… |
CVE-2015-10009 | Medium | 5.5 | 2023-01-02 | A vulnerability was found in nterchange up to 4.1.0. It has been rated as critical. This issue affects the function getContent of the file app/controllers/code… |
CVE-2015-10008 | Medium | 6.3 | 2023-01-02 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM. It has been classified as critical. This affects an unknown part. The manipulatio… |
CVE-2015-10007 | Low | 3.5 | 2023-01-02 | ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in 82Flex WEIPDCRM and classified as problematic. Affected by this issue is some unknown functionalit… |
CVE-2015-10006 | Low | 3.5 | 2023-01-01 | A vulnerability, which was classified as problematic, has been found in admont28 Ingnovarq. Affected by this issue is some unknown functionality of the file ap… |
CVE-2015-10004 | High | 7.5 | 2022-12-27 | Token validation methods are susceptible to a timing side-channel during HMAC comparison. With a large enough number of requests over a low latency connection… |
CVE-2015-10005 | Low | 3.5 | 2022-12-27 | A vulnerability was found in markdown-it up to 2.x. It has been classified as problematic. Affected is an unknown function of the file lib/common/html_re.js. T… |
CVE-2015-1931 | Medium | 5.5 | 2022-09-29 | IBM Java Security Components in IBM SDK, Java Technology Edition 8 before SR1 FP10, 7 R1 before SR3 FP10, 7 before SR9 FP10, 6 R1 before SR8 FP7, 6 before SR16… |
CVE-2015-8031 | Critical | 9.8 | 2022-07-18 | Hudson (aka org.jvnet.hudson.main:hudson-core) before 3.3.2 allows XXE attacks. |
CVE-2015-10003 | Medium | 4.3 | 2022-07-17 | A vulnerability, which was classified as problematic, was found in FileZilla Server up to 0.9.50. This affects an unknown part of the component PORT Handler. T… |
CVE-2015-5298 | Medium | 6.5 | 2022-07-07 | The Google Login Plugin (versions 1.0 and 1.1) allows malicious anonymous users to authenticate successfully against Jenkins instances that are supposed to be… |
CVE-2015-5236 | High | 7.5 | 2022-07-07 | It was discovered that the IcedTea-Web used codebase attribute of the <applet> tag on the HTML page that hosts Java applet in the Same Origin Policy (SOP) chec… |
CVE-2015-3207 | Medium | 5.3 | 2022-07-07 | In Openshift Origin 3 the cookies being set in console have no 'secure', 'HttpOnly' attributes. |
CVE-2015-1785 | Medium | 6.5 | 2022-07-07 | In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The… |
CVE-2015-1784 | High | 8.8 | 2022-07-07 | In nextgen-galery wordpress plugin before 2.0.77.3 there are two vulnerabilities which can allow an attacker to gain full access over the web application. The… |
CVE-2015-3173 | High | 7.2 | 2022-07-06 | custom-content-type-manager Wordpress plugin can be used by an administrator to achieve arbitrary PHP remote code execution. |
CVE-2015-3172 | Medium | 5.4 | 2022-07-06 | EidoGo is susceptible to Cross-Site Scripting (XSS) attacks via maliciously crafted SGF input. |
CVE-2015-20107 | High | 7.6 | 2022-04-13 | In Python (aka CPython) up to 3.10.8, the mailcap module does not add escape characters into commands discovered in the system mailcap file. This may allow att… |
CVE-2015-3298 | High | 8.8 | 2022-03-30 | Yubico ykneo-openpgp before 1.0.10 has a typo in which an invalid PIN can be used. When first powered up, a signature will be issued even though the PIN has no… |
CVE-2015-10002 | Medium | 5.3 | 2022-03-28 | A vulnerability classified as problematic has been found in Kiddoware Kids Place. This affects the Home Button Protection. A repeated pressing of the button ca… |
CVE-2015-20106 | Medium | 4.8 | 2021-12-02 | The ClickBank Affiliate Ads WordPress plugin through 1.20 does not escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks e… |
CVE-2015-20105 | Critical | 9.6 | 2021-12-02 | The ClickBank Affiliate Ads WordPress plugin through 1.20 does not have CSRF check when saving its settings, allowing attacker to make logged in admin change t… |
CVE-2015-20067 | High | 7.5 | 2021-11-01 | The WP Attachment Export WordPress plugin before 0.2.4 does not have proper access controls, allowing unauthenticated users to download the XML data that holds… |
CVE-2015-20019 | Medium | 5.4 | 2021-11-01 | The Content text slider on post WordPress plugin before 6.9 does not sanitise and escape the Title and Message/Content settings, which could lead to Cross-Site… |
CVE-2015-10001 | Medium | 4.3 | 2021-11-01 | The WP-Stats WordPress plugin before 2.52 does not have CSRF check when saving its settings, and did not escape some of them when outputting them, allowing att… |
CVE-2015-7731 | Medium | 5.5 | 2021-08-09 | SAP Mobile Platform 3.0 SP05 ClientHub allows attackers to obtain the keystream and other sensitive information via the DataVault, aka SAP Security Note 209483… |
CVE-2015-2074 | High | 7.5 | 2021-08-09 | The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka S… |
CVE-2015-2073 | High | 7.5 | 2021-08-09 | The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP N… |
CVE-2015-2100 | High | 8.8 | 2021-07-22 | Multiple stack-based buffer overflows in WebGate eDVR Manager and Control Center allow remote attackers to execute arbitrary code via unspecified vectors to th… |
CVE-2015-2099 | High | 8.8 | 2021-07-22 | Multiple buffer overflows in WebGate Control Center allow remote attackers to execute arbitrary code via unspecified vectors to the (1) GetRecFileInfo function… |
CVE-2015-2098 | High | 8.8 | 2021-07-22 | Multiple stack-based buffer overflows in WebGate eDVR Manager allow remote attackers to execute arbitrary code via unspecified vectors to the (1) Connect, (2)… |