# Vulnerabilities published in 2015 - [CVE-2015-9358](https://insights.sbomify.com/CVE-2015-9358/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9357](https://insights.sbomify.com/CVE-2015-9357/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9356](https://insights.sbomify.com/CVE-2015-9356/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9355](https://insights.sbomify.com/CVE-2015-9355/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9354](https://insights.sbomify.com/CVE-2015-9354/): Cross-site scripting in n/a (medium 4.8) - [CVE-2015-9353](https://insights.sbomify.com/CVE-2015-9353/): SQL injection in n/a (high 7.2) - [CVE-2015-9352](https://insights.sbomify.com/CVE-2015-9352/): The wp-polls plugin before 2.72 for WordPress has SQL injection. (critical 9.8) - [CVE-2015-9351](https://insights.sbomify.com/CVE-2015-9351/): Code injection in n/a (critical 9.8) - [CVE-2015-9350](https://insights.sbomify.com/CVE-2015-9350/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9349](https://insights.sbomify.com/CVE-2015-9349/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9348](https://insights.sbomify.com/CVE-2015-9348/): Business logic in n/a (high 7.5) - [CVE-2015-9347](https://insights.sbomify.com/CVE-2015-9347/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9346](https://insights.sbomify.com/CVE-2015-9346/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9345](https://insights.sbomify.com/CVE-2015-9345/): Other in n/a (high 7.5) - [CVE-2015-9344](https://insights.sbomify.com/CVE-2015-9344/): SQL injection in n/a (critical 9.8) - [CVE-2015-9343](https://insights.sbomify.com/CVE-2015-9343/): Cross-site request forgery in n/a (high 8.8) - [CVE-2015-9342](https://insights.sbomify.com/CVE-2015-9342/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9341](https://insights.sbomify.com/CVE-2015-9341/): File upload in n/a (high 7.5) - [CVE-2015-9340](https://insights.sbomify.com/CVE-2015-9340/): File upload in n/a (high 7.5) - [CVE-2015-9339](https://insights.sbomify.com/CVE-2015-9339/): File upload in n/a (high 7.5) - [CVE-2015-9338](https://insights.sbomify.com/CVE-2015-9338/): File upload in n/a (high 7.5) - [CVE-2015-9337](https://insights.sbomify.com/CVE-2015-9337/): Missing authorization in n/a (high 7.5) - [CVE-2015-9336](https://insights.sbomify.com/CVE-2015-9336/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9335](https://insights.sbomify.com/CVE-2015-9335/): SQL injection in n/a (critical 9.8) - [CVE-2015-9334](https://insights.sbomify.com/CVE-2015-9334/): SQL injection in n/a (critical 9.8) - [CVE-2015-9333](https://insights.sbomify.com/CVE-2015-9333/): SQL injection in n/a (critical 9.8) - [CVE-2015-9332](https://insights.sbomify.com/CVE-2015-9332/): Cross-site request forgery in n/a (medium 6.5) - [CVE-2015-9331](https://insights.sbomify.com/CVE-2015-9331/): Missing authorization in n/a (high 7.5) - [CVE-2015-9330](https://insights.sbomify.com/CVE-2015-9330/): SQL injection in n/a (critical 9.8) - [CVE-2015-9329](https://insights.sbomify.com/CVE-2015-9329/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9328](https://insights.sbomify.com/CVE-2015-9328/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9327](https://insights.sbomify.com/CVE-2015-9327/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9326](https://insights.sbomify.com/CVE-2015-9326/): SQL injection in n/a (critical 9.8) - [CVE-2015-9325](https://insights.sbomify.com/CVE-2015-9325/): SQL injection in n/a (critical 9.8) - [CVE-2015-9324](https://insights.sbomify.com/CVE-2015-9324/): SQL injection in n/a (critical 9.8) - [CVE-2015-9323](https://insights.sbomify.com/CVE-2015-9323/): SQL injection in n/a (critical 9.8) - [CVE-2015-9322](https://insights.sbomify.com/CVE-2015-9322/): Cross-site request forgery in n/a (high 8.8) - [CVE-2015-9321](https://insights.sbomify.com/CVE-2015-9321/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9320](https://insights.sbomify.com/CVE-2015-9320/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9319](https://insights.sbomify.com/CVE-2015-9319/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9318](https://insights.sbomify.com/CVE-2015-9318/): Cross-site scripting in n/a (high 7.5) - [CVE-2015-9317](https://insights.sbomify.com/CVE-2015-9317/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9316](https://insights.sbomify.com/CVE-2015-9316/): SQL injection in n/a (critical 9.8) - [CVE-2015-9315](https://insights.sbomify.com/CVE-2015-9315/): SQL injection in n/a (critical 9.8) - [CVE-2015-9314](https://insights.sbomify.com/CVE-2015-9314/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9313](https://insights.sbomify.com/CVE-2015-9313/): SQL injection in n/a (critical 9.8) - [CVE-2015-9312](https://insights.sbomify.com/CVE-2015-9312/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9311](https://insights.sbomify.com/CVE-2015-9311/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9310](https://insights.sbomify.com/CVE-2015-9310/): SQL injection in n/a (critical 9.8) - [CVE-2015-9309](https://insights.sbomify.com/CVE-2015-9309/): Cross-site request forgery in n/a (high 8.8) - [CVE-2015-9308](https://insights.sbomify.com/CVE-2015-9308/): Cross-site request forgery in n/a (high 8.8) - [CVE-2015-9307](https://insights.sbomify.com/CVE-2015-9307/): Cross-site request forgery in n/a (high 8.8) - [CVE-2015-9306](https://insights.sbomify.com/CVE-2015-9306/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9305](https://insights.sbomify.com/CVE-2015-9305/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9304](https://insights.sbomify.com/CVE-2015-9304/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9303](https://insights.sbomify.com/CVE-2015-9303/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9302](https://insights.sbomify.com/CVE-2015-9302/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9301](https://insights.sbomify.com/CVE-2015-9301/): SQL injection in n/a (critical 9.8) - [CVE-2015-9300](https://insights.sbomify.com/CVE-2015-9300/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9299](https://insights.sbomify.com/CVE-2015-9299/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9298](https://insights.sbomify.com/CVE-2015-9298/): Code injection in n/a (critical 9.8) - [CVE-2015-9297](https://insights.sbomify.com/CVE-2015-9297/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9296](https://insights.sbomify.com/CVE-2015-9296/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9295](https://insights.sbomify.com/CVE-2015-9295/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9294](https://insights.sbomify.com/CVE-2015-9294/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9293](https://insights.sbomify.com/CVE-2015-9293/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9292](https://insights.sbomify.com/CVE-2015-9292/): Cross-site request forgery in n/a (high 8.8) - [CVE-2015-9291](https://insights.sbomify.com/CVE-2015-9291/): Path traversal in n/a (high 7.5) - [CVE-2015-9290](https://insights.sbomify.com/CVE-2015-9290/): Memory corruption in n/a (critical 9.8) - [CVE-2015-9289](https://insights.sbomify.com/CVE-2015-9289/): Memory corruption in n/a (medium 5.5) - [CVE-2015-9288](https://insights.sbomify.com/CVE-2015-9288/): Information disclosure in n/a (medium 6.5) - [CVE-2015-9287](https://insights.sbomify.com/CVE-2015-9287/): Path traversal in n/a (critical 9.8) - [CVE-2015-9286](https://insights.sbomify.com/CVE-2015-9286/): Cross-site Scripting in NodeBB (medium 6.1) - [CVE-2015-9285](https://insights.sbomify.com/CVE-2015-9285/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9284](https://insights.sbomify.com/CVE-2015-9284/): OmniAuth Ruby gem Cross-site Request Forgery in request phase (high 8.8) - [CVE-2015-9282](https://insights.sbomify.com/CVE-2015-9282/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9281](https://insights.sbomify.com/CVE-2015-9281/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9280](https://insights.sbomify.com/CVE-2015-9280/): XML external entity in n/a (critical 10.0) - [CVE-2015-9279](https://insights.sbomify.com/CVE-2015-9279/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9278](https://insights.sbomify.com/CVE-2015-9278/): MailEnable before 8.60 allows Privilege Escalation because admin accounts could be created as a consequence of %0A mishandling in AUTH.TAB a (critical 9.8) - [CVE-2015-9277](https://insights.sbomify.com/CVE-2015-9277/): Path traversal in n/a (critical 9.1) - [CVE-2015-9276](https://insights.sbomify.com/CVE-2015-9276/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9275](https://insights.sbomify.com/CVE-2015-9275/): Path traversal in n/a (medium 5.3) - [CVE-2015-9274](https://insights.sbomify.com/CVE-2015-9274/): Denial of service in n/a (medium 6.5) - [CVE-2015-9273](https://insights.sbomify.com/CVE-2015-9273/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9272](https://insights.sbomify.com/CVE-2015-9272/): File upload in n/a (critical 9.8) - [CVE-2015-9271](https://insights.sbomify.com/CVE-2015-9271/): File upload in n/a (critical 9.8) - [CVE-2015-9270](https://insights.sbomify.com/CVE-2015-9270/): Cross-site scripting in n/a (medium 6.1) - [CVE-2015-9269](https://insights.sbomify.com/CVE-2015-9269/): Information disclosure in n/a (high 7.5) - [CVE-2015-9268](https://insights.sbomify.com/CVE-2015-9268/): Other in n/a (high 7.8) - [CVE-2015-9267](https://insights.sbomify.com/CVE-2015-9267/): Path traversal in n/a (medium 5.5) - [CVE-2015-9266](https://insights.sbomify.com/CVE-2015-9266/): Ubiquiti airOS HTTP(S) unauthenticated arbitrary file upload (critical 9.8) - [CVE-2015-9264](https://insights.sbomify.com/CVE-2015-9264/): Code injection in n/a (critical 9.8) - [CVE-2015-9263](https://insights.sbomify.com/CVE-2015-9263/): File upload in n/a (critical 9.8) - [CVE-2015-9262](https://insights.sbomify.com/CVE-2015-9262/): Memory corruption in n/a (critical 9.8) - [CVE-2015-9261](https://insights.sbomify.com/CVE-2015-9261/): Null dereference in n/a (medium 5.5) - [CVE-2015-9260](https://insights.sbomify.com/CVE-2015-9260/): Cross-site scripting in n/a (medium 5.4) - [CVE-2015-9259](https://insights.sbomify.com/CVE-2015-9259/): Security feature bypass in n/a (critical 9.8) - [CVE-2015-9258](https://insights.sbomify.com/CVE-2015-9258/): Docker Notary Signature Algorithm Not Matched to Key vulnerability (high 7.5) - [CVE-2015-9257](https://insights.sbomify.com/CVE-2015-9257/): Cross-site scripting in n/a (medium 6.1) --- From sbomify Insights: https://insights.sbomify.com/years/2015/page/3/