# Vulnerabilities published in 2015 - [CVE-2015-8415](https://insights.sbomify.com/CVE-2015-8415/): Memory corruption in n/a (critical 10.0) - [CVE-2015-8414](https://insights.sbomify.com/CVE-2015-8414/): Use after free in n/a (critical 10.0) - [CVE-2015-8413](https://insights.sbomify.com/CVE-2015-8413/): Use after free in n/a (critical 10.0) - [CVE-2015-8412](https://insights.sbomify.com/CVE-2015-8412/): Use after free in n/a (critical 10.0) - [CVE-2015-8411](https://insights.sbomify.com/CVE-2015-8411/): Use after free in n/a (critical 10.0) - [CVE-2015-8410](https://insights.sbomify.com/CVE-2015-8410/): Use after free in n/a (critical 10.0) - [CVE-2015-8409](https://insights.sbomify.com/CVE-2015-8409/): Security feature bypass in n/a (critical 10.0) - [CVE-2015-8408](https://insights.sbomify.com/CVE-2015-8408/): Memory corruption in n/a (critical 10.0) - [CVE-2015-8407](https://insights.sbomify.com/CVE-2015-8407/): Memory corruption in n/a (critical 10.0) - [CVE-2015-8406](https://insights.sbomify.com/CVE-2015-8406/): Use after free in n/a (critical 10.0) - [CVE-2015-8405](https://insights.sbomify.com/CVE-2015-8405/): Use after free in n/a (critical 10.0) - [CVE-2015-8404](https://insights.sbomify.com/CVE-2015-8404/): Use after free in n/a (critical 10.0) - [CVE-2015-8403](https://insights.sbomify.com/CVE-2015-8403/): Use after free in n/a (critical 10.0) - [CVE-2015-8402](https://insights.sbomify.com/CVE-2015-8402/): Use after free in n/a (critical 10.0) - [CVE-2015-8401](https://insights.sbomify.com/CVE-2015-8401/): Use after free in n/a (critical 10.0) - [CVE-2015-8400](https://insights.sbomify.com/CVE-2015-8400/): Security feature bypass in n/a (high 7.4) - [CVE-2015-8399](https://insights.sbomify.com/CVE-2015-8399/): Path traversal in n/a (medium 4.3) - [CVE-2015-8398](https://insights.sbomify.com/CVE-2015-8398/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-8397](https://insights.sbomify.com/CVE-2015-8397/): Information disclosure in n/a (high 8.2) - [CVE-2015-8396](https://insights.sbomify.com/CVE-2015-8396/): Integer overflow in n/a (critical 10.0) - [CVE-2015-8395](https://insights.sbomify.com/CVE-2015-8395/): Denial of service in n/a (high 7.5) - [CVE-2015-8394](https://insights.sbomify.com/CVE-2015-8394/): Integer overflow in n/a (critical 9.8) - [CVE-2015-8393](https://insights.sbomify.com/CVE-2015-8393/): Information disclosure in n/a (high 7.5) - [CVE-2015-8392](https://insights.sbomify.com/CVE-2015-8392/): Memory corruption in n/a (high 7.5) - [CVE-2015-8391](https://insights.sbomify.com/CVE-2015-8391/): Denial of service in n/a (critical 9.8) - [CVE-2015-8390](https://insights.sbomify.com/CVE-2015-8390/): Denial of service in n/a (critical 9.8) - [CVE-2015-8389](https://insights.sbomify.com/CVE-2015-8389/): Denial of service in n/a (critical 9.8) - [CVE-2015-8388](https://insights.sbomify.com/CVE-2015-8388/): Memory corruption in n/a (high 7.5) - [CVE-2015-8387](https://insights.sbomify.com/CVE-2015-8387/): Integer overflow in n/a (high 7.3) - [CVE-2015-8386](https://insights.sbomify.com/CVE-2015-8386/): Memory corruption in n/a (critical 9.8) - [CVE-2015-8385](https://insights.sbomify.com/CVE-2015-8385/): Memory corruption in n/a (high 7.5) - [CVE-2015-8384](https://insights.sbomify.com/CVE-2015-8384/): Memory corruption in n/a (high 7.5) - [CVE-2015-8383](https://insights.sbomify.com/CVE-2015-8383/): Memory corruption in n/a (critical 9.8) - [CVE-2015-8382](https://insights.sbomify.com/CVE-2015-8382/): Information disclosure in n/a (medium 6.4) - [CVE-2015-8381](https://insights.sbomify.com/CVE-2015-8381/): Memory corruption in n/a (high 7.5) - [CVE-2015-8380](https://insights.sbomify.com/CVE-2015-8380/): Memory corruption in n/a (high 7.5) - [CVE-2015-8379](https://insights.sbomify.com/CVE-2015-8379/): CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter (high 8.8) - [CVE-2015-8378](https://insights.sbomify.com/CVE-2015-8378/): Information disclosure in n/a (high 7.5) - [CVE-2015-8377](https://insights.sbomify.com/CVE-2015-8377/): SQL injection in n/a (medium 6.5) - [CVE-2015-8376](https://insights.sbomify.com/CVE-2015-8376/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-8375](https://insights.sbomify.com/CVE-2015-8375/): Cross-site scripting in n/a (medium 5.4) - [CVE-2015-8374](https://insights.sbomify.com/CVE-2015-8374/): Information disclosure in n/a (medium 4.0) - [CVE-2015-8373](https://insights.sbomify.com/CVE-2015-8373/): Denial of service in n/a (medium 6.8) - [CVE-2015-8371](https://insights.sbomify.com/CVE-2015-8371/): Composer allows cache poisoning from other projects built on the same host (high 8.8) - [CVE-2015-8370](https://insights.sbomify.com/CVE-2015-8370/): Integer overflow in n/a (high 7.4) - [CVE-2015-8369](https://insights.sbomify.com/CVE-2015-8369/): SQL injection in n/a (high 7.5) - [CVE-2015-8368](https://insights.sbomify.com/CVE-2015-8368/): Privilege escalation in n/a (medium 6.0) - [CVE-2015-8367](https://insights.sbomify.com/CVE-2015-8367/): Memory corruption in n/a (critical 9.8) - [CVE-2015-8366](https://insights.sbomify.com/CVE-2015-8366/): Integer overflow in n/a (critical 9.8) - [CVE-2015-8365](https://insights.sbomify.com/CVE-2015-8365/): Memory corruption in n/a (medium 6.8) - [CVE-2015-8364](https://insights.sbomify.com/CVE-2015-8364/): Integer overflow in n/a (medium 6.8) - [CVE-2015-8363](https://insights.sbomify.com/CVE-2015-8363/): Memory corruption in n/a (medium 6.8) - [CVE-2015-8362](https://insights.sbomify.com/CVE-2015-8362/): Hardcoded credentials in n/a (critical 9.8) - [CVE-2015-8361](https://insights.sbomify.com/CVE-2015-8361/): Missing authorization in n/a (critical 9.1) - [CVE-2015-8360](https://insights.sbomify.com/CVE-2015-8360/): Deserialization in n/a (critical 9.8) - [CVE-2015-8358](https://insights.sbomify.com/CVE-2015-8358/): Path traversal in n/a (critical 9.0) - [CVE-2015-8357](https://insights.sbomify.com/CVE-2015-8357/): Path traversal in n/a (medium 6.5) - [CVE-2015-8356](https://insights.sbomify.com/CVE-2015-8356/): SQL injection in n/a (high 8.0) - [CVE-2015-8355](https://insights.sbomify.com/CVE-2015-8355/): SQL injection in n/a (high 8.8) - [CVE-2015-8354](https://insights.sbomify.com/CVE-2015-8354/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-8353](https://insights.sbomify.com/CVE-2015-8353/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-8352](https://insights.sbomify.com/CVE-2015-8352/): Path traversal in n/a (critical 9.8) - [CVE-2015-8351](https://insights.sbomify.com/CVE-2015-8351/): Code injection in n/a (critical 9.0) - [CVE-2015-8350](https://insights.sbomify.com/CVE-2015-8350/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-8349](https://insights.sbomify.com/CVE-2015-8349/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-8346](https://insights.sbomify.com/CVE-2015-8346/): Information disclosure in n/a (medium 5.3) - [CVE-2015-8345](https://insights.sbomify.com/CVE-2015-8345/): Denial of service in n/a (medium 6.5) - [CVE-2015-8341](https://insights.sbomify.com/CVE-2015-8341/): Denial of service in n/a (high 7.8) - [CVE-2015-8340](https://insights.sbomify.com/CVE-2015-8340/): Denial of service in n/a (medium 4.7) - [CVE-2015-8339](https://insights.sbomify.com/CVE-2015-8339/): Denial of service in n/a (medium 4.7) - [CVE-2015-8338](https://insights.sbomify.com/CVE-2015-8338/): Denial of service in n/a (high 7.2) - [CVE-2015-8337](https://insights.sbomify.com/CVE-2015-8337/): Null dereference in n/a (medium 5.5) - [CVE-2015-8336](https://insights.sbomify.com/CVE-2015-8336/): Information disclosure in n/a (medium 4.3) - [CVE-2015-8335](https://insights.sbomify.com/CVE-2015-8335/): Information disclosure in n/a (medium 6.5) - [CVE-2015-8334](https://insights.sbomify.com/CVE-2015-8334/): SQL injection in n/a (high 8.8) - [CVE-2015-8333](https://insights.sbomify.com/CVE-2015-8333/): Missing authorization in n/a (high 7.1) - [CVE-2015-8332](https://insights.sbomify.com/CVE-2015-8332/): Privilege escalation in n/a (high 8.8) - [CVE-2015-8331](https://insights.sbomify.com/CVE-2015-8331/): Auth bypass in n/a (high 7.4) - [CVE-2015-8330](https://insights.sbomify.com/CVE-2015-8330/): Memory corruption in n/a (high 7.8) - [CVE-2015-8329](https://insights.sbomify.com/CVE-2015-8329/): Weak cryptography in n/a (medium 5.0) - [CVE-2015-8328](https://insights.sbomify.com/CVE-2015-8328/): Information disclosure in n/a (medium 6.6) - [CVE-2015-8327](https://insights.sbomify.com/CVE-2015-8327/): Command injection in n/a (high 7.5) - [CVE-2015-8326](https://insights.sbomify.com/CVE-2015-8326/): Path traversal in n/a (medium 5.5) - [CVE-2015-8325](https://insights.sbomify.com/CVE-2015-8325/): Privilege escalation in n/a (high 7.8) - [CVE-2015-8324](https://insights.sbomify.com/CVE-2015-8324/): Null dereference in n/a (medium 4.6) - [CVE-2015-8322](https://insights.sbomify.com/CVE-2015-8322/): Code injection in n/a (high 8.8) - [CVE-2015-8320](https://insights.sbomify.com/CVE-2015-8320/): Weak cryptography in n/a (medium 5.0) - [CVE-2015-8319](https://insights.sbomify.com/CVE-2015-8319/): Memory corruption in n/a (high 7.8) - [CVE-2015-8318](https://insights.sbomify.com/CVE-2015-8318/): Memory corruption in n/a (high 7.8) - [CVE-2015-8317](https://insights.sbomify.com/CVE-2015-8317/): Information disclosure in n/a (medium 5.0) - [CVE-2015-8316](https://insights.sbomify.com/CVE-2015-8316/): Denial of service in n/a (medium 5.9) - [CVE-2015-8315](https://insights.sbomify.com/CVE-2015-8315/): Regular Expression Denial of Service in ms (high 7.5) - [CVE-2015-8314](https://insights.sbomify.com/CVE-2015-8314/): Devise Gem for Ruby Unauthorized Access Using "Remember Me" Cookie (high 7.5) - [CVE-2015-8313](https://insights.sbomify.com/CVE-2015-8313/): Other in n/a (medium 5.9) - [CVE-2015-8312](https://insights.sbomify.com/CVE-2015-8312/): Off-by-one error in afs_pioctl.c in OpenAFS before 1.6.16 might allow local users to cause a denial of service (memory overwrite and system (high 7.8) - [CVE-2015-8310](https://insights.sbomify.com/CVE-2015-8310/): Cherry Music Cross-site Scripting (XSS) vulnerability (medium 5.4) - [CVE-2015-8309](https://insights.sbomify.com/CVE-2015-8309/): Cherry Music directory traversal vulnerability (medium 4.3) - [CVE-2015-8308](https://insights.sbomify.com/CVE-2015-8308/): Auth bypass in n/a (high 7.8) - [CVE-2015-8307](https://insights.sbomify.com/CVE-2015-8307/): Privilege escalation in n/a (high 7.8) - [CVE-2015-8306](https://insights.sbomify.com/CVE-2015-8306/): Memory corruption in n/a (high 7.8) --- From sbomify Insights: https://insights.sbomify.com/years/2015/page/11/