# Vulnerabilities published in 2015 - [CVE-2015-7629](https://insights.sbomify.com/CVE-2015-7629/): Use after free in n/a (critical 9.3) - [CVE-2015-7628](https://insights.sbomify.com/CVE-2015-7628/): Information disclosure in n/a (medium 5.0) - [CVE-2015-7627](https://insights.sbomify.com/CVE-2015-7627/): Memory corruption in n/a (critical 10.0) - [CVE-2015-7626](https://insights.sbomify.com/CVE-2015-7626/): Memory corruption in n/a (critical 10.0) - [CVE-2015-7625](https://insights.sbomify.com/CVE-2015-7625/): Memory corruption in n/a (critical 10.0) - [CVE-2015-7624](https://insights.sbomify.com/CVE-2015-7624/): Information disclosure in n/a (medium 5.0) - [CVE-2015-7623](https://insights.sbomify.com/CVE-2015-7623/): Security feature bypass in n/a (medium 6.8) - [CVE-2015-7622](https://insights.sbomify.com/CVE-2015-7622/): Memory corruption in n/a (critical 10.0) - [CVE-2015-7621](https://insights.sbomify.com/CVE-2015-7621/): Use after free in n/a (medium 6.8) - [CVE-2015-7620](https://insights.sbomify.com/CVE-2015-7620/): Security feature bypass in n/a (medium 6.8) - [CVE-2015-7619](https://insights.sbomify.com/CVE-2015-7619/): Security feature bypass in n/a (medium 6.8) - [CVE-2015-7618](https://insights.sbomify.com/CVE-2015-7618/): Security feature bypass in n/a (medium 6.8) - [CVE-2015-7617](https://insights.sbomify.com/CVE-2015-7617/): Use after free in n/a (medium 6.8) - [CVE-2015-7616](https://insights.sbomify.com/CVE-2015-7616/): Security feature bypass in n/a (medium 6.8) - [CVE-2015-7615](https://insights.sbomify.com/CVE-2015-7615/): Use after free in n/a (medium 6.8) - [CVE-2015-7614](https://insights.sbomify.com/CVE-2015-7614/): Security feature bypass in n/a (medium 6.8) - [CVE-2015-7613](https://insights.sbomify.com/CVE-2015-7613/): Race condition in n/a (medium 6.9) - [CVE-2015-7612](https://insights.sbomify.com/CVE-2015-7612/): Cross-site request forgery in n/a (medium 6.8) - [CVE-2015-7611](https://insights.sbomify.com/CVE-2015-7611/): Apache James Server OS Command Injection (high 8.1) - [CVE-2015-7610](https://insights.sbomify.com/CVE-2015-7610/): Cross-site request forgery in n/a (high 8.8) - [CVE-2015-7609](https://insights.sbomify.com/CVE-2015-7609/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-7604](https://insights.sbomify.com/CVE-2015-7604/): Cross-site scripting in n/a (medium 4.3) - [CVE-2015-7603](https://insights.sbomify.com/CVE-2015-7603/): Path traversal in n/a (high 7.8) - [CVE-2015-7602](https://insights.sbomify.com/CVE-2015-7602/): Path traversal in n/a (high 7.8) - [CVE-2015-7601](https://insights.sbomify.com/CVE-2015-7601/): Path traversal in n/a (high 7.8) - [CVE-2015-7600](https://insights.sbomify.com/CVE-2015-7600/): Privilege escalation in n/a (high 7.2) - [CVE-2015-7599](https://insights.sbomify.com/CVE-2015-7599/): Integer overflow in n/a (high 8.1) - [CVE-2015-7598](https://insights.sbomify.com/CVE-2015-7598/): Privilege escalation in n/a (high 7.8) - [CVE-2015-7597](https://insights.sbomify.com/CVE-2015-7597/): Privilege escalation in n/a (high 7.8) - [CVE-2015-7596](https://insights.sbomify.com/CVE-2015-7596/): Privilege escalation in n/a (high 7.8) - [CVE-2015-7581](https://insights.sbomify.com/CVE-2015-7581/): actionpack is vulnerable to denial of service because of a wildcard controller route (high 7.5) - [CVE-2015-7580](https://insights.sbomify.com/CVE-2015-7580/): rails-html-sanitizer Cross-site Scripting vulnerability (medium 6.1) - [CVE-2015-7579](https://insights.sbomify.com/CVE-2015-7579/): rails-html-sanitizer Cross-site Scripting vulnerability (medium 6.1) - [CVE-2015-7578](https://insights.sbomify.com/CVE-2015-7578/): rails-html-sanitizer Cross-site Scripting vulnerability (medium 6.1) - [CVE-2015-7577](https://insights.sbomify.com/CVE-2015-7577/): Active Record Improper Access Control (medium 5.3) - [CVE-2015-7576](https://insights.sbomify.com/CVE-2015-7576/): actionpack is vulnerable to remote bypass authentication (low 3.7) - [CVE-2015-7575](https://insights.sbomify.com/CVE-2015-7575/): Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozilla Firefox before 43.0.2 and Firefox ESR 38.x before 38.5.2, does not (medium 5.9) - [CVE-2015-7571](https://insights.sbomify.com/CVE-2015-7571/): File upload in n/a (high 7.8) - [CVE-2015-7570](https://insights.sbomify.com/CVE-2015-7570/): Server-side request forgery in n/a (high 7.2) - [CVE-2015-7569](https://insights.sbomify.com/CVE-2015-7569/): SQL injection in n/a (high 8.8) - [CVE-2015-7568](https://insights.sbomify.com/CVE-2015-7568/): SQL injection in n/a (critical 9.8) - [CVE-2015-7567](https://insights.sbomify.com/CVE-2015-7567/): SQL injection in Yeager CMS (critical 9.8) - [CVE-2015-7566](https://insights.sbomify.com/CVE-2015-7566/): Null dereference in n/a (medium 4.6) - [CVE-2015-7565](https://insights.sbomify.com/CVE-2015-7565/): ember-source Cross-site Scripting vulnerability (medium 6.1) - [CVE-2015-7564](https://insights.sbomify.com/CVE-2015-7564/): TeamPass vulnerable to SQL Injection (critical 9.8) - [CVE-2015-7563](https://insights.sbomify.com/CVE-2015-7563/): Cross-site request forgery in n/a (high 8.8) - [CVE-2015-7562](https://insights.sbomify.com/CVE-2015-7562/): TeamPass vulnerable to Cross-site Scripting (medium 6.1) - [CVE-2015-7561](https://insights.sbomify.com/CVE-2015-7561/): Kubernetes in OpenShift3 Access Control Misconfiguration (low 3.1) - [CVE-2015-7560](https://insights.sbomify.com/CVE-2015-7560/): Missing authorization in n/a (medium 6.5) - [CVE-2015-7559](https://insights.sbomify.com/CVE-2015-7559/): Improper Input Validation and Missing Authentication for Critical Function in Apache ActiveMQ (low 2.7) - [CVE-2015-7558](https://insights.sbomify.com/CVE-2015-7558/): librsvg DoS via Cyclic References (high 7.5) - [CVE-2015-7557](https://insights.sbomify.com/CVE-2015-7557/): Denial of service in n/a (high 7.5) - [CVE-2015-7556](https://insights.sbomify.com/CVE-2015-7556/): Privilege escalation in DeleGate (high 7.8) - [CVE-2015-7555](https://insights.sbomify.com/CVE-2015-7555/): Memory corruption in n/a (medium 5.5) - [CVE-2015-7554](https://insights.sbomify.com/CVE-2015-7554/): Memory corruption in n/a (critical 9.8) - [CVE-2015-7553](https://insights.sbomify.com/CVE-2015-7553/): Race condition in n/a (medium 4.7) - [CVE-2015-7552](https://insights.sbomify.com/CVE-2015-7552/): Memory corruption in n/a (high 7.8) - [CVE-2015-7551](https://insights.sbomify.com/CVE-2015-7551/): Code injection in n/a (high 8.4) - [CVE-2015-7550](https://insights.sbomify.com/CVE-2015-7550/): Race condition in n/a (medium 5.5) - [CVE-2015-7549](https://insights.sbomify.com/CVE-2015-7549/): Null dereference in n/a (medium 6.0) - [CVE-2015-7548](https://insights.sbomify.com/CVE-2015-7548/): Information disclosure in n/a (low 3.5) - [CVE-2015-7547](https://insights.sbomify.com/CVE-2015-7547/): Memory corruption in n/a (high 8.1) - [CVE-2015-7546](https://insights.sbomify.com/CVE-2015-7546/): OpenStack Identity Keystone and keystonemiddleware Insufficiently Protected Credentials (high 7.5) - [CVE-2015-7545](https://insights.sbomify.com/CVE-2015-7545/): Command injection in n/a (critical 9.8) - [CVE-2015-7544](https://insights.sbomify.com/CVE-2015-7544/): Command injection in n/a (critical 9.1) - [CVE-2015-7543](https://insights.sbomify.com/CVE-2015-7543/): Race condition in n/a (high 7.0) - [CVE-2015-7542](https://insights.sbomify.com/CVE-2015-7542/): Weak cryptography in libgwenhywfar (medium 5.3) - [CVE-2015-7541](https://insights.sbomify.com/CVE-2015-7541/): colorscore Command Injection vulnerability (critical 10.0) - [CVE-2015-7540](https://insights.sbomify.com/CVE-2015-7540/): Denial of service in n/a (high 7.5) - [CVE-2015-7539](https://insights.sbomify.com/CVE-2015-7539/): Jenkins does not Verify Checksums for Plugin Files (high 7.5) - [CVE-2015-7538](https://insights.sbomify.com/CVE-2015-7538/): Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack (high 8.8) - [CVE-2015-7537](https://insights.sbomify.com/CVE-2015-7537/): Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack (high 8.8) - [CVE-2015-7536](https://insights.sbomify.com/CVE-2015-7536/): Improper Neutralization of Input During Web Page Generation in Jenkins (medium 5.4) - [CVE-2015-7529](https://insights.sbomify.com/CVE-2015-7529/): SoSReport Predictable Tmp File Names (high 7.8) - [CVE-2015-7528](https://insights.sbomify.com/CVE-2015-7528/): Information Exposure in Kubernetes (medium 5.3) - [CVE-2015-7527](https://insights.sbomify.com/CVE-2015-7527/): Command injection in n/a (high 7.5) - [CVE-2015-7521](https://insights.sbomify.com/CVE-2015-7521/): High severity vulnerability that affects org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service (high 8.3) - [CVE-2015-7520](https://insights.sbomify.com/CVE-2015-7520/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-7519](https://insights.sbomify.com/CVE-2015-7519/): Phusion Passenger allows remote attackers to spoof headers (low 3.7) - [CVE-2015-7518](https://insights.sbomify.com/CVE-2015-7518/): Cross-site scripting in n/a (medium 4.3) - [CVE-2015-7517](https://insights.sbomify.com/CVE-2015-7517/): SQL injection in n/a (critical 9.8) - [CVE-2015-7516](https://insights.sbomify.com/CVE-2015-7516/): Null dereference in n/a (high 7.5) - [CVE-2015-7515](https://insights.sbomify.com/CVE-2015-7515/): Null dereference in n/a (medium 4.6) - [CVE-2015-7514](https://insights.sbomify.com/CVE-2015-7514/): Information disclosure in n/a (medium 6.5) - [CVE-2015-7513](https://insights.sbomify.com/CVE-2015-7513/): Denial of service in n/a (medium 6.5) - [CVE-2015-7512](https://insights.sbomify.com/CVE-2015-7512/): Memory corruption in n/a (critical 9.0) - [CVE-2015-7511](https://insights.sbomify.com/CVE-2015-7511/): Information disclosure in n/a (low 2.0) - [CVE-2015-7510](https://insights.sbomify.com/CVE-2015-7510/): Memory corruption in n/a (critical 9.8) - [CVE-2015-7509](https://insights.sbomify.com/CVE-2015-7509/): Denial of service in n/a (medium 4.4) - [CVE-2015-7508](https://insights.sbomify.com/CVE-2015-7508/): Memory corruption in Libnsbmp (high 8.8) - [CVE-2015-7507](https://insights.sbomify.com/CVE-2015-7507/): Denial of service in Libnsbmp (high 7.5) - [CVE-2015-7506](https://insights.sbomify.com/CVE-2015-7506/): Denial of service in Libnsgif (medium 6.5) - [CVE-2015-7505](https://insights.sbomify.com/CVE-2015-7505/): Memory corruption in Libnsgif (high 8.8) - [CVE-2015-7504](https://insights.sbomify.com/CVE-2015-7504/): Memory corruption in n/a (high 8.8) - [CVE-2015-7503](https://insights.sbomify.com/CVE-2015-7503/): Zend Framework Information Disclosure (high 7.5) - [CVE-2015-7502](https://insights.sbomify.com/CVE-2015-7502/): Information disclosure in n/a (medium 5.1) - [CVE-2015-7501](https://insights.sbomify.com/CVE-2015-7501/): Deserialization of Untrusted Data in Apache commons collections (critical 9.8) - [CVE-2015-7500](https://insights.sbomify.com/CVE-2015-7500/): Memory corruption in n/a (medium 5.0) - [CVE-2015-7499](https://insights.sbomify.com/CVE-2015-7499/): Heap-based buffer overflow in nokogiri (medium 5.0) - [CVE-2015-7498](https://insights.sbomify.com/CVE-2015-7498/): Memory corruption in n/a (medium 5.0) --- From sbomify Insights: https://insights.sbomify.com/years/2015/page/17/