# Vulnerabilities published in 2015


- [CVE-2015-5736](https://insights.sbomify.com/CVE-2015-5736/): Privilege escalation in fortinet:forticlient (high 7.2)
- [CVE-2015-5735](https://insights.sbomify.com/CVE-2015-5735/): Memory corruption in fortinet:forticlient (high 7.2)
- [CVE-2015-5734](https://insights.sbomify.com/CVE-2015-5734/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2015-5733](https://insights.sbomify.com/CVE-2015-5733/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2015-5732](https://insights.sbomify.com/CVE-2015-5732/): Cross-site scripting in wordpress:wordpress (medium 4.3)
- [CVE-2015-5731](https://insights.sbomify.com/CVE-2015-5731/): Cross-site request forgery in wordpress:wordpress (medium 6.8)
- [CVE-2015-5730](https://insights.sbomify.com/CVE-2015-5730/): Information disclosure in wordpress:wordpress (medium 5.0)
- [CVE-2015-5729](https://insights.sbomify.com/CVE-2015-5729/): Weak cryptography in samsung:m288ofw firmware (critical 9.8)
- [CVE-2015-5727](https://insights.sbomify.com/CVE-2015-5727/): Denial of service in botan project:botan (high 7.5)
- [CVE-2015-5726](https://insights.sbomify.com/CVE-2015-5726/): Denial of service in botan project:botan (high 7.5)
- [CVE-2015-5725](https://insights.sbomify.com/CVE-2015-5725/): SQL injection in codeigniter:codeigniter (critical 9.8)
- [CVE-2015-5723](https://insights.sbomify.com/CVE-2015-5723/): Doctrine Security Misconfiguration Vulnerability (high 7.8)
- [CVE-2015-5722](https://insights.sbomify.com/CVE-2015-5722/): Denial of service in apple:mac os x server (high 7.8)
- [CVE-2015-5721](https://insights.sbomify.com/CVE-2015-5721/): Deserialization in misp-project:misp (critical 9.8)
- [CVE-2015-5720](https://insights.sbomify.com/CVE-2015-5720/): Cross-site scripting in misp-project:misp (medium 6.1)
- [CVE-2015-5719](https://insights.sbomify.com/CVE-2015-5719/): Path traversal in misp-project:misp (critical 9.8)
- [CVE-2015-5718](https://insights.sbomify.com/CVE-2015-5718/): Memory corruption in websense:content gateway (medium 4.0)
- [CVE-2015-5717](https://insights.sbomify.com/CVE-2015-5717/): Weak cryptography in siemens:compas (medium 5.8)
- [CVE-2015-5715](https://insights.sbomify.com/CVE-2015-5715/): Missing authorization in wordpress:wordpress (medium 4.3)
- [CVE-2015-5714](https://insights.sbomify.com/CVE-2015-5714/): Cross-site scripting in wordpress:wordpress (medium 6.1)
- [CVE-2015-5713](https://insights.sbomify.com/CVE-2015-5713/): Information disclosure in tibco:spotfire analytics platform for aws (medium 5.0)
- [CVE-2015-5712](https://insights.sbomify.com/CVE-2015-5712/): Information disclosure in tibco:spotfire analytics platform for aws (medium 4.0)
- [CVE-2015-5711](https://insights.sbomify.com/CVE-2015-5711/): Information disclosure in tibco:managed file transfer command center (medium 4.0)
- [CVE-2015-5707](https://insights.sbomify.com/CVE-2015-5707/): Integer overflow in canonical:ubuntu linux (medium 4.6)
- [CVE-2015-5706](https://insights.sbomify.com/CVE-2015-5706/): Use after free in canonical:ubuntu linux (medium 4.6)
- [CVE-2015-5705](https://insights.sbomify.com/CVE-2015-5705/): Path traversal in devscripts devel team:devscripts (high 7.5)
- [CVE-2015-5704](https://insights.sbomify.com/CVE-2015-5704/): Command injection in devscripts devel team:devscripts (high 7.8)
- [CVE-2015-5703](https://insights.sbomify.com/CVE-2015-5703/): SQL injection in open-xchange ox guard:open-xchange ox guard (medium 6.5)
- [CVE-2015-5701](https://insights.sbomify.com/CVE-2015-5701/): Path traversal in tug:texlive (medium 6.1)
- [CVE-2015-5700](https://insights.sbomify.com/CVE-2015-5700/): Path traversal in tug:texlive (medium 6.1)
- [CVE-2015-5699](https://insights.sbomify.com/CVE-2015-5699/): Command injection in cumulusnetworks:cumulus linux (high 7.8)
- [CVE-2015-5698](https://insights.sbomify.com/CVE-2015-5698/): Cross-site request forgery in siemens:simatic s7 1200 cpu (high 7.5)
- [CVE-2015-5697](https://insights.sbomify.com/CVE-2015-5697/): Information disclosure in linux:linux kernel (low 2.1)
- [CVE-2015-5696](https://insights.sbomify.com/CVE-2015-5696/): Denial of service in dell:netvault backup (medium 5.0)
- [CVE-2015-5695](https://insights.sbomify.com/CVE-2015-5695/): Designate mDNS DoS through incorrect handling of large RecordSets (medium 6.5)
- [CVE-2015-5694](https://insights.sbomify.com/CVE-2015-5694/): Designate does not enforce the DNS protocol limit concerning record set sizes (medium 6.5)
- [CVE-2015-5693](https://insights.sbomify.com/CVE-2015-5693/): Command injection in symantec:web gateway (high 7.9)
- [CVE-2015-5692](https://insights.sbomify.com/CVE-2015-5692/): Privilege escalation in symantec:web gateway (high 7.9)
- [CVE-2015-5691](https://insights.sbomify.com/CVE-2015-5691/): Cross-site scripting in symantec:web gateway (medium 4.3)
- [CVE-2015-5690](https://insights.sbomify.com/CVE-2015-5690/): Command injection in symantec:web gateway (high 8.5)
- [CVE-2015-5689](https://insights.sbomify.com/CVE-2015-5689/): Memory corruption in symantec:deployment solution (medium 6.8)
- [CVE-2015-5688](https://insights.sbomify.com/CVE-2015-5688/): Directory Traversal in geddy (medium 5.0)
- [CVE-2015-5687](https://insights.sbomify.com/CVE-2015-5687/): Deserialization in anchorcms:anchor cms (high 7.5)
- [CVE-2015-5686](https://insights.sbomify.com/CVE-2015-5686/): Cross-site request forgery in puppet:puppet enterprise (high 8.8)
- [CVE-2015-5685](https://insights.sbomify.com/CVE-2015-5685/): Memory corruption in bittorrent:bootstrap-dht (high 7.5)
- [CVE-2015-5684](https://insights.sbomify.com/CVE-2015-5684/): Memory corruption in lenovo:b50-10 firmware (critical 9.8)
- [CVE-2015-5682](https://insights.sbomify.com/CVE-2015-5682/): Path traversal in powerplay gallery project:powerplay gallery (high 7.5)
- [CVE-2015-5681](https://insights.sbomify.com/CVE-2015-5681/): File upload in wpslideshow:powerplay gallery (high 7.5)
- [CVE-2015-5677](https://insights.sbomify.com/CVE-2015-5677/): Information disclosure in freebsd:freebsd (medium 5.5)
- [CVE-2015-5675](https://insights.sbomify.com/CVE-2015-5675/): Privilege escalation in freebsd:freebsd (high 7.8)
- [CVE-2015-5674](https://insights.sbomify.com/CVE-2015-5674/): Denial of service in freebsd:freebsd (medium 6.5)
- [CVE-2015-5673](https://insights.sbomify.com/CVE-2015-5673/): Command injection in isucon:isucon 5 qualifier eventapp (medium 6.5)
- [CVE-2015-5672](https://insights.sbomify.com/CVE-2015-5672/): Command injection in typemoon:fate\/hollow ataraxia (critical 10.0)
- [CVE-2015-5671](https://insights.sbomify.com/CVE-2015-5671/): Missing authorization in techno project japan:enisys gw (medium 5.0)
- [CVE-2015-5670](https://insights.sbomify.com/CVE-2015-5670/): Cross-site scripting in techno project japan:enisys gw (medium 4.3)
- [CVE-2015-5669](https://insights.sbomify.com/CVE-2015-5669/): Other in techno project japan:enisys gw (medium 6.5)
- [CVE-2015-5668](https://insights.sbomify.com/CVE-2015-5668/): SQL injection in techno project japan:enisys gw (high 7.5)
- [CVE-2015-5667](https://insights.sbomify.com/CVE-2015-5667/): Cross-site scripting in html-scrubber project:html-scrubber (low 2.6)
- [CVE-2015-5666](https://insights.sbomify.com/CVE-2015-5666/): Security feature bypass in ana:all nippon airways (medium 5.9)
- [CVE-2015-5665](https://insights.sbomify.com/CVE-2015-5665/): Cross-site request forgery in lockon:ec-cube (medium 5.1)
- [CVE-2015-5664](https://insights.sbomify.com/CVE-2015-5664/): Cross-site scripting in qnap:qts (medium 6.1)
- [CVE-2015-5663](https://insights.sbomify.com/CVE-2015-5663/): Privilege escalation in rarlab:winrar (high 7.4)
- [CVE-2015-5662](https://insights.sbomify.com/CVE-2015-5662/): Path traversal in avast:avast antivirus (medium 6.4)
- [CVE-2015-5661](https://insights.sbomify.com/CVE-2015-5661/): Information disclosure in airdroid:airdroid (medium 4.3)
- [CVE-2015-5660](https://insights.sbomify.com/CVE-2015-5660/): Cross-site request forgery in extplorer:extplorer (medium 6.8)
- [CVE-2015-5659](https://insights.sbomify.com/CVE-2015-5659/): SQL injection in network applied communication laboratory:shimane prefecture cms (medium 6.5)
- [CVE-2015-5655](https://insights.sbomify.com/CVE-2015-5655/): Weak cryptography in adways:party track sdk (medium 5.8)
- [CVE-2015-5654](https://insights.sbomify.com/CVE-2015-5654/): Cross-Site Scripting in dojo (medium 4.3)
- [CVE-2015-5653](https://insights.sbomify.com/CVE-2015-5653/): Memory corruption in canarylabs:trendweb (high 7.5)
- [CVE-2015-5652](https://insights.sbomify.com/CVE-2015-5652/): Other in python:python (high 7.2)
- [CVE-2015-5651](https://insights.sbomify.com/CVE-2015-5651/): Cross-site scripting in dotclear:dotclear (medium 4.3)
- [CVE-2015-5650](https://insights.sbomify.com/CVE-2015-5650/): Path traversal in ajaxplorer:ajaxplorer (medium 5.0)
- [CVE-2015-5649](https://insights.sbomify.com/CVE-2015-5649/): Auth bypass in cybozu:garoon (high 7.0)
- [CVE-2015-5648](https://insights.sbomify.com/CVE-2015-5648/): SQL injection in loenshotel:phprechnung (medium 6.5)
- [CVE-2015-5647](https://insights.sbomify.com/CVE-2015-5647/): Code injection in cybozu:garoon (high 8.5)
- [CVE-2015-5646](https://insights.sbomify.com/CVE-2015-5646/): Code injection in cybozu:garoon (high 8.5)
- [CVE-2015-5645](https://insights.sbomify.com/CVE-2015-5645/): Privilege escalation in icz:matchasns (medium 6.5)
- [CVE-2015-5644](https://insights.sbomify.com/CVE-2015-5644/): Code injection in icz:matchasns (medium 6.8)
- [CVE-2015-5643](https://insights.sbomify.com/CVE-2015-5643/): Code injection in icz:matchasns (medium 6.8)
- [CVE-2015-5642](https://insights.sbomify.com/CVE-2015-5642/): SQL injection in icz:matchasns (medium 6.5)
- [CVE-2015-5641](https://insights.sbomify.com/CVE-2015-5641/): SQL injection in basercms:basercms (medium 6.5)
- [CVE-2015-5640](https://insights.sbomify.com/CVE-2015-5640/): baserCMS Access Control Bypass (medium 6.5)
- [CVE-2015-5639](https://insights.sbomify.com/CVE-2015-5639/): Security feature bypass in dwango:niconico (high 7.4)
- [CVE-2015-5638](https://insights.sbomify.com/CVE-2015-5638/): Path traversal in dena:h20 (medium 4.3)
- [CVE-2015-5637](https://insights.sbomify.com/CVE-2015-5637/): Security feature bypass in newphoria corporation:1.1 (medium 6.8)
- [CVE-2015-5636](https://insights.sbomify.com/CVE-2015-5636/): Security feature bypass in newphoria corporation:reversi (medium 6.8)
- [CVE-2015-5635](https://insights.sbomify.com/CVE-2015-5635/): Security feature bypass in newphoria corporation:koritore (medium 6.8)
- [CVE-2015-5634](https://insights.sbomify.com/CVE-2015-5634/): Security feature bypass in newphoria corporation:megaphone music (medium 6.8)
- [CVE-2015-5633](https://insights.sbomify.com/CVE-2015-5633/): Security feature bypass in newphoria corporation:auction camera (medium 6.8)
- [CVE-2015-5632](https://insights.sbomify.com/CVE-2015-5632/): Security feature bypass in newphoria corporation:applican (medium 6.8)
- [CVE-2015-5631](https://insights.sbomify.com/CVE-2015-5631/): Cross-site request forgery in canon:pixma mg7500 series inkjet printer (medium 6.8)
- [CVE-2015-5630](https://insights.sbomify.com/CVE-2015-5630/): Cross-site scripting in ntt-bp:japan connected-free wi-fi (medium 4.3)
- [CVE-2015-5629](https://insights.sbomify.com/CVE-2015-5629/): Security feature bypass in ntt-bp:japan connected-free wi-fi (medium 6.8)
- [CVE-2015-5628](https://insights.sbomify.com/CVE-2015-5628/): Memory corruption in B/M9000 VP (critical 9.8)
- [CVE-2015-5627](https://insights.sbomify.com/CVE-2015-5627/): Memory corruption in B/M9000 VP (critical 9.8)
- [CVE-2015-5626](https://insights.sbomify.com/CVE-2015-5626/): Memory corruption in B/M9000 VP (critical 9.8)
- [CVE-2015-5625](https://insights.sbomify.com/CVE-2015-5625/): Cross-site scripting in opendocman:opendocman (medium 4.3)
- [CVE-2015-5624](https://insights.sbomify.com/CVE-2015-5624/): Memory corruption in freebit:elphonebtnv6 activex control (medium 6.8)
- [CVE-2015-5623](https://insights.sbomify.com/CVE-2015-5623/): Missing authorization in debian:debian linux (medium 4.0)
- [CVE-2015-5622](https://insights.sbomify.com/CVE-2015-5622/): Cross-site scripting in debian:debian linux (low 3.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/32/