# Vulnerabilities published in 2015


- [CVE-2015-5505](https://insights.sbomify.com/CVE-2015-5505/): Security feature bypass in codfront labs:http strict transport security (medium 6.8)
- [CVE-2015-5504](https://insights.sbomify.com/CVE-2015-5504/): SQL injection in novalnet:novalnet payment module ubercart- (high 7.5)
- [CVE-2015-5503](https://insights.sbomify.com/CVE-2015-5503/): Open redirect in chamilo integration project:chamilo integration (medium 5.8)
- [CVE-2015-5502](https://insights.sbomify.com/CVE-2015-5502/): Missing authorization in storage api project:storage api (high 7.5)
- [CVE-2015-5501](https://insights.sbomify.com/CVE-2015-5501/): Code injection in aegirproject:hostmaster (high 7.5)
- [CVE-2015-5500](https://insights.sbomify.com/CVE-2015-5500/): Cross-site scripting in navigate project:navigate (low 3.5)
- [CVE-2015-5499](https://insights.sbomify.com/CVE-2015-5499/): Missing authorization in navigate project:navigate (medium 4.0)
- [CVE-2015-5498](https://insights.sbomify.com/CVE-2015-5498/): Missing authorization in shipwire api project:shipwire api (medium 5.0)
- [CVE-2015-5497](https://insights.sbomify.com/CVE-2015-5497/): Cross-site scripting in web links project:web links (low 3.5)
- [CVE-2015-5496](https://insights.sbomify.com/CVE-2015-5496/): Missing authorization in pass2pdf project:pass2pdf (medium 5.0)
- [CVE-2015-5495](https://insights.sbomify.com/CVE-2015-5495/): Cross-site scripting in mobile sliding menu project:mobile sliding menu (low 2.1)
- [CVE-2015-5494](https://insights.sbomify.com/CVE-2015-5494/): Cross-site scripting in webform matrix component project:webform matrix component (low 3.5)
- [CVE-2015-5493](https://insights.sbomify.com/CVE-2015-5493/): Missing authorization in entityform block project:entityform block (medium 5.0)
- [CVE-2015-5492](https://insights.sbomify.com/CVE-2015-5492/): Cross-site scripting in video consultation project:video consultation (medium 4.3)
- [CVE-2015-5491](https://insights.sbomify.com/CVE-2015-5491/): Missing authorization in dynamic display block project:dynamic display block (low 3.5)
- [CVE-2015-5490](https://insights.sbomify.com/CVE-2015-5490/): Information disclosure in views project:views (medium 5.0)
- [CVE-2015-5489](https://insights.sbomify.com/CVE-2015-5489/): Cross-site scripting in smart trim project:smart trim (low 3.5)
- [CVE-2015-5488](https://insights.sbomify.com/CVE-2015-5488/): Cross-site scripting in thinkshout:mailchimp (low 2.1)
- [CVE-2015-5487](https://insights.sbomify.com/CVE-2015-5487/): Cross-site scripting in techsmith:camtasia relay (medium 4.3)
- [CVE-2015-5485](https://insights.sbomify.com/CVE-2015-5485/): Cross-site scripting in theeventscalendar:eventbrite tickets (medium 4.3)
- [CVE-2015-5484](https://insights.sbomify.com/CVE-2015-5484/): Cross-site scripting in plot:plotly (medium 5.4)
- [CVE-2015-5483](https://insights.sbomify.com/CVE-2015-5483/): Cross-site request forgery in private only project:private only (high 8.8)
- [CVE-2015-5482](https://insights.sbomify.com/CVE-2015-5482/): Path traversal in dev4press:gd bbpress attachments (medium 4.0)
- [CVE-2015-5481](https://insights.sbomify.com/CVE-2015-5481/): Cross-site scripting in dev4press:gd bbpress attachments (medium 4.3)
- [CVE-2015-5479](https://insights.sbomify.com/CVE-2015-5479/): Denial of service in libav:libav (medium 6.5)
- [CVE-2015-5477](https://insights.sbomify.com/CVE-2015-5477/): ISC BIND Data Processing Errors (high 7.5, exploited in the wild)
- [CVE-2015-5475](https://insights.sbomify.com/CVE-2015-5475/): Cross-site scripting in bestpractical:request tracker (medium 4.3)
- [CVE-2015-5474](https://insights.sbomify.com/CVE-2015-5474/): Command injection in bittorrent:bittorrent (critical 9.3)
- [CVE-2015-5473](https://insights.sbomify.com/CVE-2015-5473/): Path traversal in samsung:syncthru 6 (critical 9.8)
- [CVE-2015-5472](https://insights.sbomify.com/CVE-2015-5472/): Path traversal in ibs mappro project:ibs mappro (high 7.8)
- [CVE-2015-5471](https://insights.sbomify.com/CVE-2015-5471/): Path traversal in swim team project:swim team (medium 5.3)
- [CVE-2015-5470](https://insights.sbomify.com/CVE-2015-5470/): Denial of service in powerdns:authoritative (high 7.8)
- [CVE-2015-5469](https://insights.sbomify.com/CVE-2015-5469/): Path traversal in mdc youtube downloader project:mdc youtube downloader (high 7.5)
- [CVE-2015-5468](https://insights.sbomify.com/CVE-2015-5468/): Path traversal in wpshopstyling:wp e-commerce shop styling (high 7.5)
- [CVE-2015-5467](https://insights.sbomify.com/CVE-2015-5467/): Yii2 allows attackers to execute any local .php file via a relative path in the view parameter (critical 9.8)
- [CVE-2015-5466](https://insights.sbomify.com/CVE-2015-5466/): Privilege escalation in sis:xgi vga display manager (high 7.8)
- [CVE-2015-5465](https://insights.sbomify.com/CVE-2015-5465/): Privilege escalation in sis:windows vga display manager (high 7.2)
- [CVE-2015-5464](https://insights.sbomify.com/CVE-2015-5464/): Security feature bypass in gemalto:safenet luna g5 (low 1.3)
- [CVE-2015-5463](https://insights.sbomify.com/CVE-2015-5463/): Missing authorization in axiomsl:axiom (critical 9.8)
- [CVE-2015-5462](https://insights.sbomify.com/CVE-2015-5462/): Cross-site scripting in axiomsl:axiom (medium 6.1)
- [CVE-2015-5461](https://insights.sbomify.com/CVE-2015-5461/): Open redirect in stageshow project:stageshow (medium 6.4)
- [CVE-2015-5460](https://insights.sbomify.com/CVE-2015-5460/): Cross-site scripting in snorby project:snorby (medium 4.3)
- [CVE-2015-5459](https://insights.sbomify.com/CVE-2015-5459/): SQL injection in zohocorp:manageengine password manager pro (medium 6.5)
- [CVE-2015-5458](https://insights.sbomify.com/CVE-2015-5458/): Auth bypass in pivotx:pivotx (medium 6.8)
- [CVE-2015-5457](https://insights.sbomify.com/CVE-2015-5457/): File upload in pivotx:pivotx (high 7.5)
- [CVE-2015-5456](https://insights.sbomify.com/CVE-2015-5456/): Cross-site scripting in pivotx:pivotx (medium 4.3)
- [CVE-2015-5455](https://insights.sbomify.com/CVE-2015-5455/): Cross-site scripting in qualiteam:x-cart (medium 4.3)
- [CVE-2015-5454](https://insights.sbomify.com/CVE-2015-5454/): Cross-site scripting in nucleuscms:nucleus cms (medium 4.3)
- [CVE-2015-5453](https://insights.sbomify.com/CVE-2015-5453/): Command injection in watchguard:xcs (medium 6.5)
- [CVE-2015-5452](https://insights.sbomify.com/CVE-2015-5452/): SQL injection in watchguard:xcs (high 7.5)
- [CVE-2015-5451](https://insights.sbomify.com/CVE-2015-5451/): Cross-site request forgery in hp:operations orchestration (medium 6.8)
- [CVE-2015-5448](https://insights.sbomify.com/CVE-2015-5448/): Information disclosure in numara:asset manager (low 2.1)
- [CVE-2015-5447](https://insights.sbomify.com/CVE-2015-5447/): Cross-site scripting in hp:storeonce backup system software (medium 5.4)
- [CVE-2015-5446](https://insights.sbomify.com/CVE-2015-5446/): Other in hp:storeonce backup system software (high 7.5)
- [CVE-2015-5445](https://insights.sbomify.com/CVE-2015-5445/): Cross-site request forgery in hp:storeonce backup system software (high 8.8)
- [CVE-2015-5444](https://insights.sbomify.com/CVE-2015-5444/): Cross-site scripting in hp:smart profile server data analytics layer (medium 4.3)
- [CVE-2015-5443](https://insights.sbomify.com/CVE-2015-5443/): Information disclosure in hp:3par service processor sp (medium 4.0)
- [CVE-2015-5442](https://insights.sbomify.com/CVE-2015-5442/): Privilege escalation in hp:software update (medium 4.6)
- [CVE-2015-5441](https://insights.sbomify.com/CVE-2015-5441/): Cross-site scripting in hp:archsight management center (medium 4.3)
- [CVE-2015-5440](https://insights.sbomify.com/CVE-2015-5440/): Information disclosure in hp:universal configuration management database (medium 4.9)
- [CVE-2015-5436](https://insights.sbomify.com/CVE-2015-5436/): Denial of service in HP Integrated Lights-Out 4 (iLO 4) (high 7.5)
- [CVE-2015-5435](https://insights.sbomify.com/CVE-2015-5435/): Denial of service in hp:integrated lights-out 3 firmware (medium 4.0)
- [CVE-2015-5434](https://insights.sbomify.com/CVE-2015-5434/): Security feature bypass in hp:jc072b hp 12500 main processing unit (medium 6.5)
- [CVE-2015-5433](https://insights.sbomify.com/CVE-2015-5433/): Information disclosure in hp:virtual connect enterprise manager sdk (medium 4.0)
- [CVE-2015-5432](https://insights.sbomify.com/CVE-2015-5432/): Other in hp:virtual connect enterprise manager sdk (high 7.5)
- [CVE-2015-5431](https://insights.sbomify.com/CVE-2015-5431/): Other in hp:matrix operating environment (medium 6.5)
- [CVE-2015-5430](https://insights.sbomify.com/CVE-2015-5430/): Information disclosure in hp:matrix operating environment (medium 5.0)
- [CVE-2015-5429](https://insights.sbomify.com/CVE-2015-5429/): Other in hp:matrix operating environment (high 7.5)
- [CVE-2015-5428](https://insights.sbomify.com/CVE-2015-5428/): Other in hp:matrix operating environment (high 7.5)
- [CVE-2015-5427](https://insights.sbomify.com/CVE-2015-5427/): Other in hp:matrix operating environment (high 7.5)
- [CVE-2015-5426](https://insights.sbomify.com/CVE-2015-5426/): Privilege escalation in hp:loadrunner (medium 4.6)
- [CVE-2015-5424](https://insights.sbomify.com/CVE-2015-5424/): Other in hp:keyview (high 7.5)
- [CVE-2015-5423](https://insights.sbomify.com/CVE-2015-5423/): Other in hp:keyview (high 7.5)
- [CVE-2015-5422](https://insights.sbomify.com/CVE-2015-5422/): Other in hp:keyview (high 7.5)
- [CVE-2015-5421](https://insights.sbomify.com/CVE-2015-5421/): Other in hp:keyview (high 7.5)
- [CVE-2015-5420](https://insights.sbomify.com/CVE-2015-5420/): Other in hp:keyview (high 7.5)
- [CVE-2015-5419](https://insights.sbomify.com/CVE-2015-5419/): Other in hp:keyview (high 7.5)
- [CVE-2015-5418](https://insights.sbomify.com/CVE-2015-5418/): Other in hp:keyview (high 7.5)
- [CVE-2015-5417](https://insights.sbomify.com/CVE-2015-5417/): Other in hp:keyview (high 7.5)
- [CVE-2015-5416](https://insights.sbomify.com/CVE-2015-5416/): Other in hp:keyview (high 7.5)
- [CVE-2015-5413](https://insights.sbomify.com/CVE-2015-5413/): Privilege escalation in hp:version control repository manager (medium 4.0)
- [CVE-2015-5412](https://insights.sbomify.com/CVE-2015-5412/): Cross-site request forgery in hp:version control repository manager (medium 6.0)
- [CVE-2015-5411](https://insights.sbomify.com/CVE-2015-5411/): Information disclosure in hp:version control repository manager (medium 6.8)
- [CVE-2015-5410](https://insights.sbomify.com/CVE-2015-5410/): Other in hp:version control repository manager (medium 6.5)
- [CVE-2015-5409](https://insights.sbomify.com/CVE-2015-5409/): Memory corruption in hp:version control repository manager (high 7.5)
- [CVE-2015-5408](https://insights.sbomify.com/CVE-2015-5408/): Information disclosure in hp:centralview credit risk control (medium 6.0)
- [CVE-2015-5407](https://insights.sbomify.com/CVE-2015-5407/): Information disclosure in hp:centralview credit risk control (medium 6.0)
- [CVE-2015-5406](https://insights.sbomify.com/CVE-2015-5406/): Information disclosure in hp:centralview credit risk control (critical 9.0)
- [CVE-2015-5405](https://insights.sbomify.com/CVE-2015-5405/): Other in hp:systems insight manager (medium 6.5)
- [CVE-2015-5404](https://insights.sbomify.com/CVE-2015-5404/): Other in hp:systems insight manager (high 7.5)
- [CVE-2015-5403](https://insights.sbomify.com/CVE-2015-5403/): Information disclosure in hp:systems insight manager (medium 4.0)
- [CVE-2015-5402](https://insights.sbomify.com/CVE-2015-5402/): Privilege escalation in hp:systems insight manager (high 7.2)
- [CVE-2015-5401](https://insights.sbomify.com/CVE-2015-5401/): Denial of service in teradata:teradata express (high 7.5)
- [CVE-2015-5400](https://insights.sbomify.com/CVE-2015-5400/): Security feature bypass in debian:debian linux (medium 6.8)
- [CVE-2015-5399](https://insights.sbomify.com/CVE-2015-5399/): Cross-site scripting in phpvibe:phpvibe (medium 5.4)
- [CVE-2015-5397](https://insights.sbomify.com/CVE-2015-5397/): Cross-site request forgery in joomla:joomla\! (medium 6.8)
- [CVE-2015-5395](https://insights.sbomify.com/CVE-2015-5395/): Cross-site request forgery in alinto:sogo (high 8.8)
- [CVE-2015-5386](https://insights.sbomify.com/CVE-2015-5386/): Auth bypass in siemens:sicam mic firmware (critical 9.3)
- [CVE-2015-5384](https://insights.sbomify.com/CVE-2015-5384/): Auth bypass in axiomsl:axiom (high 8.8)
- [CVE-2015-5383](https://insights.sbomify.com/CVE-2015-5383/): Information disclosure in roundcube:roundcube webmail (high 7.5)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/34/