Vulnerabilities published in 2015
8,124 vulnerabilities were published in 2015: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 35 of 82.
- CVE-2015-5382 Path traversal in roundcube:roundcube webmail
- CVE-2015-5381 Cross-site scripting in roundcube:roundcube webmail
- CVE-2015-5380 Memory corruption in google:v8
- CVE-2015-5379 Cross-site scripting in axigen:axigen mail server
- CVE-2015-5378 Information disclosure in elastic:logstash
- CVE-2015-5377 Code injection in elastic:elasticsearch
- CVE-2015-5376 SQL injection in gsi-office:winpat portal
- CVE-2015-5375 Cross-site scripting in open-xchange:open-xchange appsuite
- CVE-2015-5374 Denial of service in siemens:siprotec firmware
- CVE-2015-5372 Auth bypass in adnovum:nevisauth
- CVE-2015-5371 File upload in solarwinds:storage manager
- CVE-2015-5370 Other in canonical:ubuntu linux
- CVE-2015-5369 Security feature bypass in juniper:pulse connect secure
- CVE-2015-5368 Memory corruption in hp:elite x2 1010 g2
- CVE-2015-5367 Privilege escalation in hp:elite x2 1010 g2
- CVE-2015-5366 Denial of service in linux:linux kernel
- CVE-2015-5365 Cross-site scripting in zurmo:zurmo crm
- CVE-2015-5364 Denial of service in canonical:ubuntu linux
- CVE-2015-5363 Denial of service in juniper:junos
- CVE-2015-5362 Memory corruption in juniper:junos
- CVE-2015-5361 Junos: FTPS through SRX opens up wide range of data channel TCP ports
- CVE-2015-5360 Denial of service in juniper:junos
- CVE-2015-5359 Null dereference in juniper:junos
- CVE-2015-5358 Denial of service in juniper:junos
- CVE-2015-5357 Denial of service in juniper:junos
- CVE-2015-5356 Cross-site scripting in get-simple:getsimple cms
- CVE-2015-5355 Cross-site scripting in get-simple:getsimple cms
- CVE-2015-5354 Open redirect in novius-os:novius os
- CVE-2015-5353 Path traversal in novius-os:novius os
- CVE-2015-5352 Security feature bypass in openbsd:openssh
- CVE-2015-5351 Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token
- CVE-2015-5350 Information disclosure in Garden Nstar
- CVE-2015-5349 Apache Directory Studio Command Injection
- CVE-2015-5348 Apache Camel can allow remote attackers to execute arbitrary commands
- CVE-2015-5347 Cross-site scripting in apache:wicket
- CVE-2015-5346 Improper Neutralization of Input During Web Page Generation in Apache Tomcat
- CVE-2015-5345 Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat
- CVE-2015-5344 Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands
- CVE-2015-5343 Integer overflow in apache:subversion
- CVE-2015-5342 Moodle allows attackers to bypass intended access restrictions
- CVE-2015-5341 Moodle allows attackers to read SCORM contents
- CVE-2015-5340 Moodle sensitive information disclosure
- CVE-2015-5339 Moodle does not properly implement group-based access restrictions
- CVE-2015-5338 Moodle multiple cross-site request forgery (CSRF) vulnerabilities
- CVE-2015-5337 Moodle XSS Vulnerability
- CVE-2015-5336 Moodle multiple cross-site scripting (XSS) vulnerabilities
- CVE-2015-5335 Moodle cross-site request forgery (CSRF) vulnerability
- CVE-2015-5334 Memory corruption in LibreSSL
- CVE-2015-5333 Denial of service in LibreSSL
- CVE-2015-5332 Denial of service in moodle:moodle
- CVE-2015-5331 Moodle improper access control
- CVE-2015-5330 Information disclosure in samba:samba
- CVE-2015-5329 Hardcoded credentials in redhat:openstack
- CVE-2015-5327 Memory corruption in linux:linux kernel
- CVE-2015-5326 Jenkins allows Cross-Site Scripting (XSS)
- CVE-2015-5325 Jenkins allows Bypass of Access Restrictions
- CVE-2015-5324 Jenkins allows Unauthorized Viewing of Queue API Information
- CVE-2015-5323 Jenkins allows Administrators to Access API Tokens
- CVE-2015-5322 Jenkins has Local File Inclusion Vulnerability
- CVE-2015-5321 Jenkins has Information Disclosure via Sidepanel Widget
- CVE-2015-5320 Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor
- CVE-2015-5319 Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI
- CVE-2015-5318 Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack
- CVE-2015-5317 Jenkins User Interface (UI) Information Disclosure
- CVE-2015-5316 Null dereference in debian:debian linux
- CVE-2015-5315 Memory corruption in debian:debian linux
- CVE-2015-5314 Memory corruption in debian:debian linux
- CVE-2015-5313 Path traversal in redhat:libvirt
- CVE-2015-5312 Nokogiri subject to DoS via libxml2 vulnerability
- CVE-2015-5311 Denial of service in powerdns:authoritative
- CVE-2015-5310 Security feature bypass in google:android
- CVE-2015-5309 Integer overflow in opensuse:leap
- CVE-2015-5308 SQL injection in wp-championship project:wp-championship
- CVE-2015-5307 Denial of service in canonical:ubuntu linux
- CVE-2015-5306 Injection vulnerability that affects ironic-discoverd
- CVE-2015-5305 Directory Traversal in Kubernetes
- CVE-2015-5304 Missing authorization in redhat:jboss enterprise application platform
- CVE-2015-5303 OpenStack TripleO Heat templates spoof metadata requests
- CVE-2015-5302 Information disclosure in redhat:libreport
- CVE-2015-5301 Ipsilon denial of service by deleting a SAML2 Service Provider (SP)
- CVE-2015-5300 Race condition in canonical:ubuntu linux
- CVE-2015-5299 Missing authorization in canonical:ubuntu linux
- CVE-2015-5298 Jenkins Google Login Plugin 1.0 and 1.1 allows anonymous users to authenticate through client-side request modification
- CVE-2015-5297 Integer overflow in pixman
- CVE-2015-5296 Security feature bypass in canonical:ubuntu linux
- CVE-2015-5295 Denial of service in fedoraproject:fedora
- CVE-2015-5293 Misconfiguration in redhat:enterprise virtualization manager
- CVE-2015-5292 Denial of service in fedoraproject:sssd
- CVE-2015-5291 Memory corruption in debian:debian linux
- CVE-2015-5290 Memory corruption in ircd-ratbox
- CVE-2015-5289 Memory corruption in canonical:ubuntu linux
- CVE-2015-5288 Memory corruption in postgresql:postgresql
- CVE-2015-5287 Red Hat Automatic Bug Reporting Tool Privilege Escalation
- CVE-2015-5286 OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service
- CVE-2015-5285 Kallithea CRLF injection vulnerability
- CVE-2015-5284 Information disclosure in freeipa:freeipa
- CVE-2015-5283 Race condition in linux:linux kernel
- CVE-2015-5282 Cross-site scripting in theforeman:foreman
- CVE-2015-5281 Security feature bypass in redhat:enterprise linux
- CVE-2015-5279 Memory corruption in qemu:qemu