Vulnerabilities published in 2015
8,124 vulnerabilities were published in 2015: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 34 of 82.
- CVE-2015-5505 Security feature bypass in codfront labs:http strict transport security
- CVE-2015-5504 SQL injection in novalnet:novalnet payment module ubercart-
- CVE-2015-5503 Open redirect in chamilo integration project:chamilo integration
- CVE-2015-5502 Missing authorization in storage api project:storage api
- CVE-2015-5501 Code injection in aegirproject:hostmaster
- CVE-2015-5500 Cross-site scripting in navigate project:navigate
- CVE-2015-5499 Missing authorization in navigate project:navigate
- CVE-2015-5498 Missing authorization in shipwire api project:shipwire api
- CVE-2015-5497 Cross-site scripting in web links project:web links
- CVE-2015-5496 Missing authorization in pass2pdf project:pass2pdf
- CVE-2015-5495 Cross-site scripting in mobile sliding menu project:mobile sliding menu
- CVE-2015-5494 Cross-site scripting in webform matrix component project:webform matrix component
- CVE-2015-5493 Missing authorization in entityform block project:entityform block
- CVE-2015-5492 Cross-site scripting in video consultation project:video consultation
- CVE-2015-5491 Missing authorization in dynamic display block project:dynamic display block
- CVE-2015-5490 Information disclosure in views project:views
- CVE-2015-5489 Cross-site scripting in smart trim project:smart trim
- CVE-2015-5488 Cross-site scripting in thinkshout:mailchimp
- CVE-2015-5487 Cross-site scripting in techsmith:camtasia relay
- CVE-2015-5485 Cross-site scripting in theeventscalendar:eventbrite tickets
- CVE-2015-5484 Cross-site scripting in plot:plotly
- CVE-2015-5483 Cross-site request forgery in private only project:private only
- CVE-2015-5482 Path traversal in dev4press:gd bbpress attachments
- CVE-2015-5481 Cross-site scripting in dev4press:gd bbpress attachments
- CVE-2015-5479 Denial of service in libav:libav
- CVE-2015-5477 ISC BIND Data Processing Errors
- CVE-2015-5475 Cross-site scripting in bestpractical:request tracker
- CVE-2015-5474 Command injection in bittorrent:bittorrent
- CVE-2015-5473 Path traversal in samsung:syncthru 6
- CVE-2015-5472 Path traversal in ibs mappro project:ibs mappro
- CVE-2015-5471 Path traversal in swim team project:swim team
- CVE-2015-5470 Denial of service in powerdns:authoritative
- CVE-2015-5469 Path traversal in mdc youtube downloader project:mdc youtube downloader
- CVE-2015-5468 Path traversal in wpshopstyling:wp e-commerce shop styling
- CVE-2015-5467 Yii2 allows attackers to execute any local .php file via a relative path in the view parameter
- CVE-2015-5466 Privilege escalation in sis:xgi vga display manager
- CVE-2015-5465 Privilege escalation in sis:windows vga display manager
- CVE-2015-5464 Security feature bypass in gemalto:safenet luna g5
- CVE-2015-5463 Missing authorization in axiomsl:axiom
- CVE-2015-5462 Cross-site scripting in axiomsl:axiom
- CVE-2015-5461 Open redirect in stageshow project:stageshow
- CVE-2015-5460 Cross-site scripting in snorby project:snorby
- CVE-2015-5459 SQL injection in zohocorp:manageengine password manager pro
- CVE-2015-5458 Auth bypass in pivotx:pivotx
- CVE-2015-5457 File upload in pivotx:pivotx
- CVE-2015-5456 Cross-site scripting in pivotx:pivotx
- CVE-2015-5455 Cross-site scripting in qualiteam:x-cart
- CVE-2015-5454 Cross-site scripting in nucleuscms:nucleus cms
- CVE-2015-5453 Command injection in watchguard:xcs
- CVE-2015-5452 SQL injection in watchguard:xcs
- CVE-2015-5451 Cross-site request forgery in hp:operations orchestration
- CVE-2015-5448 Information disclosure in numara:asset manager
- CVE-2015-5447 Cross-site scripting in hp:storeonce backup system software
- CVE-2015-5446 Other in hp:storeonce backup system software
- CVE-2015-5445 Cross-site request forgery in hp:storeonce backup system software
- CVE-2015-5444 Cross-site scripting in hp:smart profile server data analytics layer
- CVE-2015-5443 Information disclosure in hp:3par service processor sp
- CVE-2015-5442 Privilege escalation in hp:software update
- CVE-2015-5441 Cross-site scripting in hp:archsight management center
- CVE-2015-5440 Information disclosure in hp:universal configuration management database
- CVE-2015-5436 Denial of service in HP Integrated Lights-Out 4 (iLO 4)
- CVE-2015-5435 Denial of service in hp:integrated lights-out 3 firmware
- CVE-2015-5434 Security feature bypass in hp:jc072b hp 12500 main processing unit
- CVE-2015-5433 Information disclosure in hp:virtual connect enterprise manager sdk
- CVE-2015-5432 Other in hp:virtual connect enterprise manager sdk
- CVE-2015-5431 Other in hp:matrix operating environment
- CVE-2015-5430 Information disclosure in hp:matrix operating environment
- CVE-2015-5429 Other in hp:matrix operating environment
- CVE-2015-5428 Other in hp:matrix operating environment
- CVE-2015-5427 Other in hp:matrix operating environment
- CVE-2015-5426 Privilege escalation in hp:loadrunner
- CVE-2015-5424 Other in hp:keyview
- CVE-2015-5423 Other in hp:keyview
- CVE-2015-5422 Other in hp:keyview
- CVE-2015-5421 Other in hp:keyview
- CVE-2015-5420 Other in hp:keyview
- CVE-2015-5419 Other in hp:keyview
- CVE-2015-5418 Other in hp:keyview
- CVE-2015-5417 Other in hp:keyview
- CVE-2015-5416 Other in hp:keyview
- CVE-2015-5413 Privilege escalation in hp:version control repository manager
- CVE-2015-5412 Cross-site request forgery in hp:version control repository manager
- CVE-2015-5411 Information disclosure in hp:version control repository manager
- CVE-2015-5410 Other in hp:version control repository manager
- CVE-2015-5409 Memory corruption in hp:version control repository manager
- CVE-2015-5408 Information disclosure in hp:centralview credit risk control
- CVE-2015-5407 Information disclosure in hp:centralview credit risk control
- CVE-2015-5406 Information disclosure in hp:centralview credit risk control
- CVE-2015-5405 Other in hp:systems insight manager
- CVE-2015-5404 Other in hp:systems insight manager
- CVE-2015-5403 Information disclosure in hp:systems insight manager
- CVE-2015-5402 Privilege escalation in hp:systems insight manager
- CVE-2015-5401 Denial of service in teradata:teradata express
- CVE-2015-5400 Security feature bypass in debian:debian linux
- CVE-2015-5399 Cross-site scripting in phpvibe:phpvibe
- CVE-2015-5397 Cross-site request forgery in joomla:joomla\!
- CVE-2015-5395 Cross-site request forgery in alinto:sogo
- CVE-2015-5386 Auth bypass in siemens:sicam mic firmware
- CVE-2015-5384 Auth bypass in axiomsl:axiom
- CVE-2015-5383 Information disclosure in roundcube:roundcube webmail