# Vulnerabilities published in 2015


- [CVE-2015-7382](https://insights.sbomify.com/CVE-2015-7382/): SQL injection in n/a (high 7.5)
- [CVE-2015-7381](https://insights.sbomify.com/CVE-2015-7381/): Code injection in n/a (high 7.5)
- [CVE-2015-7378](https://insights.sbomify.com/CVE-2015-7378/): Privilege escalation in n/a (high 7.8)
- [CVE-2015-7377](https://insights.sbomify.com/CVE-2015-7377/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7375](https://insights.sbomify.com/CVE-2015-7375/): Other in n/a (high 7.5)
- [CVE-2015-7374](https://insights.sbomify.com/CVE-2015-7374/): Code injection in n/a (high 7.5)
- [CVE-2015-7373](https://insights.sbomify.com/CVE-2015-7373/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7372](https://insights.sbomify.com/CVE-2015-7372/): Path traversal in n/a (high 7.5)
- [CVE-2015-7371](https://insights.sbomify.com/CVE-2015-7371/): Missing authorization in n/a (medium 5.0)
- [CVE-2015-7370](https://insights.sbomify.com/CVE-2015-7370/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7369](https://insights.sbomify.com/CVE-2015-7369/): Security feature bypass in n/a (high 7.5)
- [CVE-2015-7368](https://insights.sbomify.com/CVE-2015-7368/): Information disclosure in n/a (low 2.1)
- [CVE-2015-7367](https://insights.sbomify.com/CVE-2015-7367/): Auth bypass in n/a (high 7.5)
- [CVE-2015-7366](https://insights.sbomify.com/CVE-2015-7366/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-7365](https://insights.sbomify.com/CVE-2015-7365/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7364](https://insights.sbomify.com/CVE-2015-7364/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-7363](https://insights.sbomify.com/CVE-2015-7363/): Cross-site scripting in n/a (medium 5.4)
- [CVE-2015-7362](https://insights.sbomify.com/CVE-2015-7362/): Privilege escalation in n/a (high 7.8)
- [CVE-2015-7361](https://insights.sbomify.com/CVE-2015-7361/): Auth bypass in n/a (critical 9.3)
- [CVE-2015-7360](https://insights.sbomify.com/CVE-2015-7360/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-7359](https://insights.sbomify.com/CVE-2015-7359/): The (1) IsVolumeAccessibleByCurrentUser and (2) MountDevice methods in Ntdriver.c in TrueCrypt 7.0, VeraCrypt before 1.15, and CipherShed, w (high 7.8)
- [CVE-2015-7358](https://insights.sbomify.com/CVE-2015-7358/): Privilege escalation in n/a (high 7.8)
- [CVE-2015-7357](https://insights.sbomify.com/CVE-2015-7357/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-7349](https://insights.sbomify.com/CVE-2015-7349/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-7348](https://insights.sbomify.com/CVE-2015-7348/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7347](https://insights.sbomify.com/CVE-2015-7347/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2015-7346](https://insights.sbomify.com/CVE-2015-7346/): SQL injection vulnerability in ZCMS 1.1. (critical 9.8)
- [CVE-2015-7344](https://insights.sbomify.com/CVE-2015-7344/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2015-7343](https://insights.sbomify.com/CVE-2015-7343/): Cross-site scripting in n/a (medium 4.8)
- [CVE-2015-7342](https://insights.sbomify.com/CVE-2015-7342/): SQL injection in n/a (high 7.2)
- [CVE-2015-7341](https://insights.sbomify.com/CVE-2015-7341/): File upload in n/a (high 8.8)
- [CVE-2015-7340](https://insights.sbomify.com/CVE-2015-7340/): SQL injection in n/a (high 7.2)
- [CVE-2015-7339](https://insights.sbomify.com/CVE-2015-7339/): File upload in n/a (high 8.8)
- [CVE-2015-7338](https://insights.sbomify.com/CVE-2015-7338/): SQL injection in n/a (high 7.2)
- [CVE-2015-7337](https://insights.sbomify.com/CVE-2015-7337/): Improper Input Validation in Jupyter Notebook (medium 6.8)
- [CVE-2015-7336](https://insights.sbomify.com/CVE-2015-7336/): Security feature bypass in n/a (high 7.5)
- [CVE-2015-7335](https://insights.sbomify.com/CVE-2015-7335/): Race condition in n/a (high 7.0)
- [CVE-2015-7334](https://insights.sbomify.com/CVE-2015-7334/): Privilege escalation in n/a (high 7.8)
- [CVE-2015-7333](https://insights.sbomify.com/CVE-2015-7333/): Privilege escalation in n/a (high 7.8)
- [CVE-2015-7331](https://insights.sbomify.com/CVE-2015-7331/): Command injection in n/a (medium 6.6)
- [CVE-2015-7330](https://insights.sbomify.com/CVE-2015-7330/): Security feature bypass in n/a (high 8.8)
- [CVE-2015-7328](https://insights.sbomify.com/CVE-2015-7328/): Information disclosure in n/a (medium 4.7)
- [CVE-2015-7327](https://insights.sbomify.com/CVE-2015-7327/): Information disclosure in n/a (medium 4.3)
- [CVE-2015-7326](https://insights.sbomify.com/CVE-2015-7326/): XML external entity in n/a (critical 9.8)
- [CVE-2015-7324](https://insights.sbomify.com/CVE-2015-7324/): Cross-site scripting in n/a (medium 6.1)
- [CVE-2015-7323](https://insights.sbomify.com/CVE-2015-7323/): Auth bypass in n/a (low 3.5)
- [CVE-2015-7322](https://insights.sbomify.com/CVE-2015-7322/): Information disclosure in n/a (medium 5.0)
- [CVE-2015-7320](https://insights.sbomify.com/CVE-2015-7320/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7319](https://insights.sbomify.com/CVE-2015-7319/): SQL injection in n/a (high 7.5)
- [CVE-2015-7318](https://insights.sbomify.com/CVE-2015-7318/): Plone Header Injection (high 7.5)
- [CVE-2015-7317](https://insights.sbomify.com/CVE-2015-7317/): Missing authorization in n/a (medium 6.8)
- [CVE-2015-7316](https://insights.sbomify.com/CVE-2015-7316/): Plone Cross-site Scripting Vulnerability (medium 6.1)
- [CVE-2015-7315](https://insights.sbomify.com/CVE-2015-7315/): Plone unauthorized member addition vulnerability (medium 5.9)
- [CVE-2015-7314](https://insights.sbomify.com/CVE-2015-7314/): Gollum Exposure of Sensitive Information (medium 4.3)
- [CVE-2015-7313](https://insights.sbomify.com/CVE-2015-7313/): Denial of service in n/a (medium 5.5)
- [CVE-2015-7312](https://insights.sbomify.com/CVE-2015-7312/): Race condition in n/a (medium 4.4)
- [CVE-2015-7311](https://insights.sbomify.com/CVE-2015-7311/): Security feature bypass in n/a (low 3.6)
- [CVE-2015-7310](https://insights.sbomify.com/CVE-2015-7310/): Command injection in n/a (medium 6.5)
- [CVE-2015-7309](https://insights.sbomify.com/CVE-2015-7309/): File upload in n/a (medium 6.5)
- [CVE-2015-7307](https://insights.sbomify.com/CVE-2015-7307/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7306](https://insights.sbomify.com/CVE-2015-7306/): Missing authorization in n/a (medium 4.9)
- [CVE-2015-7305](https://insights.sbomify.com/CVE-2015-7305/): Information disclosure in n/a (medium 5.0)
- [CVE-2015-7304](https://insights.sbomify.com/CVE-2015-7304/): Cross-site scripting in n/a (low 2.6)
- [CVE-2015-7303](https://insights.sbomify.com/CVE-2015-7303/): Use after free in n/a (critical 10.0)
- [CVE-2015-7299](https://insights.sbomify.com/CVE-2015-7299/): SQL injection in n/a (high 7.5)
- [CVE-2015-7298](https://insights.sbomify.com/CVE-2015-7298/): Security feature bypass in n/a (medium 5.1)
- [CVE-2015-7297](https://insights.sbomify.com/CVE-2015-7297/): SQL injection in n/a (high 7.5)
- [CVE-2015-7296](https://insights.sbomify.com/CVE-2015-7296/): Other in n/a (medium 4.3)
- [CVE-2015-7295](https://insights.sbomify.com/CVE-2015-7295/): Denial of service in n/a (medium 5.0)
- [CVE-2015-7294](https://insights.sbomify.com/CVE-2015-7294/): LDAP Injection in ldapauth (high 7.5)
- [CVE-2015-7293](https://insights.sbomify.com/CVE-2015-7293/): Plone vulnerable to cross-site request forgery (high 8.8)
- [CVE-2015-7292](https://insights.sbomify.com/CVE-2015-7292/): Memory corruption in Amazon Fire OS before 2016-01-15 (critical 9.8)
- [CVE-2015-7291](https://insights.sbomify.com/CVE-2015-7291/): Cross-site request forgery in n/a (medium 6.8)
- [CVE-2015-7290](https://insights.sbomify.com/CVE-2015-7290/): Cross-site scripting in n/a (medium 4.3)
- [CVE-2015-7289](https://insights.sbomify.com/CVE-2015-7289/): Hardcoded credentials in n/a (critical 9.3)
- [CVE-2015-7288](https://insights.sbomify.com/CVE-2015-7288/): Missing authorization in n/a (medium 4.3)
- [CVE-2015-7287](https://insights.sbomify.com/CVE-2015-7287/): Hardcoded credentials in n/a (high 7.5)
- [CVE-2015-7286](https://insights.sbomify.com/CVE-2015-7286/): Weak cryptography in n/a (medium 6.4)
- [CVE-2015-7285](https://insights.sbomify.com/CVE-2015-7285/): Auth bypass in n/a (medium 5.8)
- [CVE-2015-7284](https://insights.sbomify.com/CVE-2015-7284/): Cross-site request forgery in n/a (high 8.0)
- [CVE-2015-7283](https://insights.sbomify.com/CVE-2015-7283/): Hardcoded credentials in n/a (high 8.1)
- [CVE-2015-7282](https://insights.sbomify.com/CVE-2015-7282/): Other in n/a (medium 5.8)
- [CVE-2015-7281](https://insights.sbomify.com/CVE-2015-7281/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2015-7280](https://insights.sbomify.com/CVE-2015-7280/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2015-7279](https://insights.sbomify.com/CVE-2015-7279/): Other in n/a (medium 5.3)
- [CVE-2015-7278](https://insights.sbomify.com/CVE-2015-7278/): Cross-site request forgery in n/a (high 8.8)
- [CVE-2015-7277](https://insights.sbomify.com/CVE-2015-7277/): Hardcoded credentials in n/a (critical 9.8)
- [CVE-2015-7276](https://insights.sbomify.com/CVE-2015-7276/): Hardcoded credentials in C2000T (medium 5.9)
- [CVE-2015-7275](https://insights.sbomify.com/CVE-2015-7275/): Cross-site scripting in Dell Integrated Remote Access Controller (iDRAC) (medium 6.1)
- [CVE-2015-7274](https://insights.sbomify.com/CVE-2015-7274/): Auth bypass in Dell Integrated Remote Access Controller (iDRAC) (high 8.8)
- [CVE-2015-7273](https://insights.sbomify.com/CVE-2015-7273/): XML external entity in Dell Integrated Remote Access Controller (iDRAC) (critical 9.8)
- [CVE-2015-7272](https://insights.sbomify.com/CVE-2015-7272/): Memory corruption in Dell Integrated Remote Access Controller (iDRAC) (critical 9.8)
- [CVE-2015-7271](https://insights.sbomify.com/CVE-2015-7271/): Other in Dell Integrated Remote Access Controller (iDRAC) (critical 9.8)
- [CVE-2015-7270](https://insights.sbomify.com/CVE-2015-7270/): Path traversal in Dell Integrated Remote Access Controller (iDRAC) (high 7.8)
- [CVE-2015-7269](https://insights.sbomify.com/CVE-2015-7269/): Security feature bypass in n/a (medium 4.2)
- [CVE-2015-7268](https://insights.sbomify.com/CVE-2015-7268/): Security feature bypass in n/a (medium 4.2)
- [CVE-2015-7267](https://insights.sbomify.com/CVE-2015-7267/): Security feature bypass in n/a (medium 4.2)
- [CVE-2015-7266](https://insights.sbomify.com/CVE-2015-7266/): Business logic in n/a (high 7.5)
- [CVE-2015-7265](https://insights.sbomify.com/CVE-2015-7265/): Security feature bypass in Facebook Proxygen before 2015-11-09 (high 7.5)
- [CVE-2015-7264](https://insights.sbomify.com/CVE-2015-7264/): Other in Facebook Proxygen before 2015-11-09 (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/19/
