# Vulnerabilities published in 2015


- [CVE-2015-5382](https://insights.sbomify.com/CVE-2015-5382/): Path traversal in roundcube:roundcube webmail (medium 6.5)
- [CVE-2015-5381](https://insights.sbomify.com/CVE-2015-5381/): Cross-site scripting in roundcube:roundcube webmail (medium 6.1)
- [CVE-2015-5380](https://insights.sbomify.com/CVE-2015-5380/): Memory corruption in google:v8 (high 7.5)
- [CVE-2015-5379](https://insights.sbomify.com/CVE-2015-5379/): Cross-site scripting in axigen:axigen mail server (medium 5.4)
- [CVE-2015-5378](https://insights.sbomify.com/CVE-2015-5378/): Information disclosure in elastic:logstash (high 7.5)
- [CVE-2015-5377](https://insights.sbomify.com/CVE-2015-5377/): Code injection in elastic:elasticsearch (critical 9.8)
- [CVE-2015-5376](https://insights.sbomify.com/CVE-2015-5376/): SQL injection in gsi-office:winpat portal (critical 9.8)
- [CVE-2015-5375](https://insights.sbomify.com/CVE-2015-5375/): Cross-site scripting in open-xchange:open-xchange appsuite (medium 4.3)
- [CVE-2015-5374](https://insights.sbomify.com/CVE-2015-5374/): Denial of service in siemens:siprotec firmware (high 7.8)
- [CVE-2015-5372](https://insights.sbomify.com/CVE-2015-5372/): Auth bypass in adnovum:nevisauth (medium 5.0)
- [CVE-2015-5371](https://insights.sbomify.com/CVE-2015-5371/): File upload in solarwinds:storage manager (critical 10.0)
- [CVE-2015-5370](https://insights.sbomify.com/CVE-2015-5370/): Other in canonical:ubuntu linux (medium 5.9)
- [CVE-2015-5369](https://insights.sbomify.com/CVE-2015-5369/): Security feature bypass in juniper:pulse connect secure (medium 4.3)
- [CVE-2015-5368](https://insights.sbomify.com/CVE-2015-5368/): Memory corruption in hp:elite x2 1010 g2 (high 7.8)
- [CVE-2015-5367](https://insights.sbomify.com/CVE-2015-5367/): Privilege escalation in hp:elite x2 1010 g2 (medium 6.9)
- [CVE-2015-5366](https://insights.sbomify.com/CVE-2015-5366/): Denial of service in linux:linux kernel (medium 5.0)
- [CVE-2015-5365](https://insights.sbomify.com/CVE-2015-5365/): Cross-site scripting in zurmo:zurmo crm (low 3.5)
- [CVE-2015-5364](https://insights.sbomify.com/CVE-2015-5364/): Denial of service in canonical:ubuntu linux (high 7.8)
- [CVE-2015-5363](https://insights.sbomify.com/CVE-2015-5363/): Denial of service in juniper:junos (medium 5.0)
- [CVE-2015-5362](https://insights.sbomify.com/CVE-2015-5362/): Memory corruption in juniper:junos (critical 9.3)
- [CVE-2015-5361](https://insights.sbomify.com/CVE-2015-5361/): Junos: FTPS through SRX opens up wide range of data channel TCP ports (medium 6.5)
- [CVE-2015-5360](https://insights.sbomify.com/CVE-2015-5360/): Denial of service in juniper:junos (medium 5.0)
- [CVE-2015-5359](https://insights.sbomify.com/CVE-2015-5359/): Null dereference in juniper:junos (high 7.1)
- [CVE-2015-5358](https://insights.sbomify.com/CVE-2015-5358/): Denial of service in juniper:junos (high 7.1)
- [CVE-2015-5357](https://insights.sbomify.com/CVE-2015-5357/): Denial of service in juniper:junos (medium 5.0)
- [CVE-2015-5356](https://insights.sbomify.com/CVE-2015-5356/): Cross-site scripting in get-simple:getsimple cms (medium 4.3)
- [CVE-2015-5355](https://insights.sbomify.com/CVE-2015-5355/): Cross-site scripting in get-simple:getsimple cms (medium 4.3)
- [CVE-2015-5354](https://insights.sbomify.com/CVE-2015-5354/): Open redirect in novius-os:novius os (medium 5.8)
- [CVE-2015-5353](https://insights.sbomify.com/CVE-2015-5353/): Path traversal in novius-os:novius os (high 7.5)
- [CVE-2015-5352](https://insights.sbomify.com/CVE-2015-5352/): Security feature bypass in openbsd:openssh (medium 4.3)
- [CVE-2015-5351](https://insights.sbomify.com/CVE-2015-5351/): Apache Tomcat allows remote attackers to bypass a CSRF protection mechanism by using a token (high 8.8)
- [CVE-2015-5350](https://insights.sbomify.com/CVE-2015-5350/): Information disclosure in Garden Nstar (high 7.5)
- [CVE-2015-5349](https://insights.sbomify.com/CVE-2015-5349/): Apache Directory Studio Command Injection (high 7.8)
- [CVE-2015-5348](https://insights.sbomify.com/CVE-2015-5348/): Apache Camel can allow remote attackers to execute arbitrary commands (high 8.1)
- [CVE-2015-5347](https://insights.sbomify.com/CVE-2015-5347/): Cross-site scripting in apache:wicket (medium 6.1)
- [CVE-2015-5346](https://insights.sbomify.com/CVE-2015-5346/): Improper Neutralization of Input During Web Page Generation in Apache Tomcat (high 8.1)
- [CVE-2015-5345](https://insights.sbomify.com/CVE-2015-5345/): Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat (medium 5.3)
- [CVE-2015-5344](https://insights.sbomify.com/CVE-2015-5344/): Camel-xstream component in Apache Camel can allow remote attackers to execute arbitrary commands (critical 9.8)
- [CVE-2015-5343](https://insights.sbomify.com/CVE-2015-5343/): Integer overflow in apache:subversion (high 7.6)
- [CVE-2015-5342](https://insights.sbomify.com/CVE-2015-5342/): Moodle allows attackers to bypass intended access restrictions (medium 4.3)
- [CVE-2015-5341](https://insights.sbomify.com/CVE-2015-5341/): Moodle allows attackers to read SCORM contents (medium 4.3)
- [CVE-2015-5340](https://insights.sbomify.com/CVE-2015-5340/): Moodle sensitive information disclosure (medium 4.3)
- [CVE-2015-5339](https://insights.sbomify.com/CVE-2015-5339/): Moodle does not properly implement group-based access restrictions (medium 4.3)
- [CVE-2015-5338](https://insights.sbomify.com/CVE-2015-5338/): Moodle multiple cross-site request forgery (CSRF) vulnerabilities (high 8.8)
- [CVE-2015-5337](https://insights.sbomify.com/CVE-2015-5337/): Moodle XSS Vulnerability (medium 6.1)
- [CVE-2015-5336](https://insights.sbomify.com/CVE-2015-5336/): Moodle multiple cross-site scripting (XSS) vulnerabilities (medium 5.4)
- [CVE-2015-5335](https://insights.sbomify.com/CVE-2015-5335/): Moodle cross-site request forgery (CSRF) vulnerability (medium 4.3)
- [CVE-2015-5334](https://insights.sbomify.com/CVE-2015-5334/): Memory corruption in LibreSSL (critical 9.8)
- [CVE-2015-5333](https://insights.sbomify.com/CVE-2015-5333/): Denial of service in LibreSSL (high 7.5)
- [CVE-2015-5332](https://insights.sbomify.com/CVE-2015-5332/): Denial of service in moodle:moodle (medium 6.8)
- [CVE-2015-5331](https://insights.sbomify.com/CVE-2015-5331/): Moodle improper access control (medium 4.3)
- [CVE-2015-5330](https://insights.sbomify.com/CVE-2015-5330/): Information disclosure in samba:samba (high 7.5)
- [CVE-2015-5329](https://insights.sbomify.com/CVE-2015-5329/): Hardcoded credentials in redhat:openstack (high 7.3)
- [CVE-2015-5327](https://insights.sbomify.com/CVE-2015-5327/): Memory corruption in linux:linux kernel (medium 6.5)
- [CVE-2015-5326](https://insights.sbomify.com/CVE-2015-5326/): Jenkins allows Cross-Site Scripting (XSS) (medium 4.3)
- [CVE-2015-5325](https://insights.sbomify.com/CVE-2015-5325/): Jenkins allows Bypass of Access Restrictions (high 7.5)
- [CVE-2015-5324](https://insights.sbomify.com/CVE-2015-5324/): Jenkins allows Unauthorized Viewing of Queue API Information (medium 5.0)
- [CVE-2015-5323](https://insights.sbomify.com/CVE-2015-5323/): Jenkins allows Administrators to Access API Tokens (medium 6.5)
- [CVE-2015-5322](https://insights.sbomify.com/CVE-2015-5322/): Jenkins has Local File Inclusion Vulnerability (medium 5.0)
- [CVE-2015-5321](https://insights.sbomify.com/CVE-2015-5321/): Jenkins has Information Disclosure via Sidepanel Widget (medium 5.0)
- [CVE-2015-5320](https://insights.sbomify.com/CVE-2015-5320/): Jenkins allows Exposure of Sensitive Information to an Unauthorized Actor (medium 5.0)
- [CVE-2015-5319](https://insights.sbomify.com/CVE-2015-5319/): Jenkins has XML External Entity (XXE) Vulnerability in Job Configuration via CLI (medium 5.0)
- [CVE-2015-5318](https://insights.sbomify.com/CVE-2015-5318/): Jenkins Vulnerable to Cross-Site Request Forgery (CSRF) Attack (medium 6.8)
- [CVE-2015-5317](https://insights.sbomify.com/CVE-2015-5317/): Jenkins User Interface (UI) Information Disclosure (high 7.5, exploited in the wild)
- [CVE-2015-5316](https://insights.sbomify.com/CVE-2015-5316/): Null dereference in debian:debian linux (medium 5.9)
- [CVE-2015-5315](https://insights.sbomify.com/CVE-2015-5315/): Memory corruption in debian:debian linux (medium 5.9)
- [CVE-2015-5314](https://insights.sbomify.com/CVE-2015-5314/): Memory corruption in debian:debian linux (medium 5.9)
- [CVE-2015-5313](https://insights.sbomify.com/CVE-2015-5313/): Path traversal in redhat:libvirt (low 2.5)
- [CVE-2015-5312](https://insights.sbomify.com/CVE-2015-5312/): Nokogiri subject to DoS via libxml2 vulnerability (high 7.1)
- [CVE-2015-5311](https://insights.sbomify.com/CVE-2015-5311/): Denial of service in powerdns:authoritative (medium 5.0)
- [CVE-2015-5310](https://insights.sbomify.com/CVE-2015-5310/): Security feature bypass in google:android (medium 4.3)
- [CVE-2015-5309](https://insights.sbomify.com/CVE-2015-5309/): Integer overflow in opensuse:leap (medium 4.3)
- [CVE-2015-5308](https://insights.sbomify.com/CVE-2015-5308/): SQL injection in wp-championship project:wp-championship (high 7.5)
- [CVE-2015-5307](https://insights.sbomify.com/CVE-2015-5307/): Denial of service in canonical:ubuntu linux (medium 4.9)
- [CVE-2015-5306](https://insights.sbomify.com/CVE-2015-5306/): Injection vulnerability that affects ironic-discoverd (medium 6.8)
- [CVE-2015-5305](https://insights.sbomify.com/CVE-2015-5305/): Directory Traversal in Kubernetes (medium 6.4)
- [CVE-2015-5304](https://insights.sbomify.com/CVE-2015-5304/): Missing authorization in redhat:jboss enterprise application platform (low 3.5)
- [CVE-2015-5303](https://insights.sbomify.com/CVE-2015-5303/): OpenStack TripleO Heat templates spoof metadata requests (high 7.5)
- [CVE-2015-5302](https://insights.sbomify.com/CVE-2015-5302/): Information disclosure in redhat:libreport (medium 5.0)
- [CVE-2015-5301](https://insights.sbomify.com/CVE-2015-5301/): Ipsilon denial of service by deleting a SAML2 Service Provider (SP) (medium 5.5)
- [CVE-2015-5300](https://insights.sbomify.com/CVE-2015-5300/): Race condition in canonical:ubuntu linux (high 7.5)
- [CVE-2015-5299](https://insights.sbomify.com/CVE-2015-5299/): Missing authorization in canonical:ubuntu linux (medium 5.3)
- [CVE-2015-5298](https://insights.sbomify.com/CVE-2015-5298/): Jenkins Google Login Plugin 1.0 and 1.1 allows anonymous users to authenticate through client-side request modification (medium 6.5)
- [CVE-2015-5297](https://insights.sbomify.com/CVE-2015-5297/): Integer overflow in pixman (medium 6.7)
- [CVE-2015-5296](https://insights.sbomify.com/CVE-2015-5296/): Security feature bypass in canonical:ubuntu linux (medium 5.4)
- [CVE-2015-5295](https://insights.sbomify.com/CVE-2015-5295/): Denial of service in fedoraproject:fedora (medium 5.4)
- [CVE-2015-5293](https://insights.sbomify.com/CVE-2015-5293/): Misconfiguration in redhat:enterprise virtualization manager (medium 5.9)
- [CVE-2015-5292](https://insights.sbomify.com/CVE-2015-5292/): Denial of service in fedoraproject:sssd (medium 6.8)
- [CVE-2015-5291](https://insights.sbomify.com/CVE-2015-5291/): Memory corruption in debian:debian linux (medium 6.8)
- [CVE-2015-5290](https://insights.sbomify.com/CVE-2015-5290/): Memory corruption in ircd-ratbox (high 7.5)
- [CVE-2015-5289](https://insights.sbomify.com/CVE-2015-5289/): Memory corruption in canonical:ubuntu linux (medium 6.4)
- [CVE-2015-5288](https://insights.sbomify.com/CVE-2015-5288/): Memory corruption in postgresql:postgresql (medium 6.4)
- [CVE-2015-5287](https://insights.sbomify.com/CVE-2015-5287/): Red Hat Automatic Bug Reporting Tool Privilege Escalation (high 7.8, exploited in the wild)
- [CVE-2015-5286](https://insights.sbomify.com/CVE-2015-5286/): OpenStack Image Service (Glance) allows remote authenticated users to bypass storage quota, cause denial of service (medium 6.8)
- [CVE-2015-5285](https://insights.sbomify.com/CVE-2015-5285/): Kallithea CRLF injection vulnerability (medium 5.0)
- [CVE-2015-5284](https://insights.sbomify.com/CVE-2015-5284/): Information disclosure in freeipa:freeipa (critical 9.8)
- [CVE-2015-5283](https://insights.sbomify.com/CVE-2015-5283/): Race condition in linux:linux kernel (medium 4.7)
- [CVE-2015-5282](https://insights.sbomify.com/CVE-2015-5282/): Cross-site scripting in theforeman:foreman (medium 6.1)
- [CVE-2015-5281](https://insights.sbomify.com/CVE-2015-5281/): Security feature bypass in redhat:enterprise linux (low 2.6)
- [CVE-2015-5279](https://insights.sbomify.com/CVE-2015-5279/): Memory corruption in qemu:qemu (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/35/