# Vulnerabilities published in 2015


- [CVE-2015-5278](https://insights.sbomify.com/CVE-2015-5278/): Denial of service in QEMU (medium 6.5)
- [CVE-2015-5277](https://insights.sbomify.com/CVE-2015-5277/): Memory corruption in canonical:ubuntu linux (high 7.2)
- [CVE-2015-5276](https://insights.sbomify.com/CVE-2015-5276/): Weak cryptography in gnu:gcc (medium 5.0)
- [CVE-2015-5274](https://insights.sbomify.com/CVE-2015-5274/): Command injection in redhat:openshift (medium 6.5)
- [CVE-2015-5273](https://insights.sbomify.com/CVE-2015-5273/): Race condition in redhat:automatic bug reporting tool (low 3.6)
- [CVE-2015-5272](https://insights.sbomify.com/CVE-2015-5272/): Missing authorization in moodle:moodle (medium 4.3)
- [CVE-2015-5271](https://insights.sbomify.com/CVE-2015-5271/): TripleO Heat templates might allow remote attackers to obtain sensitive information from private containers (high 7.5)
- [CVE-2015-5269](https://insights.sbomify.com/CVE-2015-5269/): Moodle cross-site scripting (XSS) vulnerability (medium 5.4)
- [CVE-2015-5268](https://insights.sbomify.com/CVE-2015-5268/): Moodle mishandles group-based authorization checks (medium 4.3)
- [CVE-2015-5267](https://insights.sbomify.com/CVE-2015-5267/): Moodle uses predictable password-recovery tokens (high 7.5)
- [CVE-2015-5266](https://insights.sbomify.com/CVE-2015-5266/): Moodle allows attackers to obtain manager privileges (medium 6.8)
- [CVE-2015-5265](https://insights.sbomify.com/CVE-2015-5265/): Moodle allows attackers to delete files (medium 4.3)
- [CVE-2015-5264](https://insights.sbomify.com/CVE-2015-5264/): Moodle allows attackers to enter additional answer attempts (medium 5.4)
- [CVE-2015-5263](https://insights.sbomify.com/CVE-2015-5263/): Security feature bypass in pulpproject:pulp (high 8.1)
- [CVE-2015-5262](https://insights.sbomify.com/CVE-2015-5262/): Denial of service vulnerability in org.apache.httpcomponents:httpclient (medium 4.3)
- [CVE-2015-5261](https://insights.sbomify.com/CVE-2015-5261/): Memory corruption in canonical:ubuntu linux (high 7.1)
- [CVE-2015-5260](https://insights.sbomify.com/CVE-2015-5260/): Memory corruption in canonical:ubuntu linux (high 7.8)
- [CVE-2015-5259](https://insights.sbomify.com/CVE-2015-5259/): Integer overflow in apache:subversion (high 8.6)
- [CVE-2015-5258](https://insights.sbomify.com/CVE-2015-5258/): springframework-social Cross-Site Request Forgery vulnerability (high 8.8)
- [CVE-2015-5257](https://insights.sbomify.com/CVE-2015-5257/): Null dereference in linux:linux kernel (medium 4.9)
- [CVE-2015-5256](https://insights.sbomify.com/CVE-2015-5256/): Security feature bypass in apache:cordova (medium 4.3)
- [CVE-2015-5255](https://insights.sbomify.com/CVE-2015-5255/): Server-side request forgery in adobe:coldfusion (medium 4.3)
- [CVE-2015-5254](https://insights.sbomify.com/CVE-2015-5254/): Improper Input Validation in Apache ActiveMQ (critical 9.8)
- [CVE-2015-5253](https://insights.sbomify.com/CVE-2015-5253/): Improper Access Control in Apache CXF (medium 4.0)
- [CVE-2015-5252](https://insights.sbomify.com/CVE-2015-5252/): Path traversal in canonical:ubuntu linux (high 7.2)
- [CVE-2015-5251](https://insights.sbomify.com/CVE-2015-5251/): OpenStack Image Service (Glance) allows remote authenticated users to bypass access restrictions (medium 5.5)
- [CVE-2015-5250](https://insights.sbomify.com/CVE-2015-5250/): Denial of Service in OpenShift Origin (medium 4.0)
- [CVE-2015-5248](https://insights.sbomify.com/CVE-2015-5248/): Other in redhat:feedhenry enterprise mobile application platform (medium 6.5)
- [CVE-2015-5247](https://insights.sbomify.com/CVE-2015-5247/): Denial of service in canonical:ubuntu linux (medium 6.5)
- [CVE-2015-5246](https://insights.sbomify.com/CVE-2015-5246/): Auth bypass in theforeman:foreman (high 8.1)
- [CVE-2015-5245](https://insights.sbomify.com/CVE-2015-5245/): Other in redhat:ceph (medium 4.3)
- [CVE-2015-5244](https://insights.sbomify.com/CVE-2015-5244/): Security feature bypass in mod nss project:mod nss (critical 9.8)
- [CVE-2015-5243](https://insights.sbomify.com/CVE-2015-5243/): phpWhois arbitrary code execution via a crafted whois record (critical 9.8)
- [CVE-2015-5242](https://insights.sbomify.com/CVE-2015-5242/): Deserialization in redhat:gluster storage (medium 6.0)
- [CVE-2015-5241](https://insights.sbomify.com/CVE-2015-5241/): Moderate severity vulnerability that affects org.apache.juddi:juddi-client (medium 6.1)
- [CVE-2015-5240](https://insights.sbomify.com/CVE-2015-5240/): OpenStack Neutron Race condition vulnerability (low 3.5)
- [CVE-2015-5239](https://insights.sbomify.com/CVE-2015-5239/): Integer overflow in QEMU (medium 6.5)
- [CVE-2015-5237](https://insights.sbomify.com/CVE-2015-5237/): Memory corruption in google:protobuf (high 8.8)
- [CVE-2015-5236](https://insights.sbomify.com/CVE-2015-5236/): Security feature bypass in Icedtea-web (high 7.5)
- [CVE-2015-5235](https://insights.sbomify.com/CVE-2015-5235/): Security feature bypass in fedoraproject:fedora (medium 4.3)
- [CVE-2015-5234](https://insights.sbomify.com/CVE-2015-5234/): Security feature bypass in fedoraproject:fedora (medium 6.8)
- [CVE-2015-5233](https://insights.sbomify.com/CVE-2015-5233/): Missing authorization in redhat:satellite (medium 4.2)
- [CVE-2015-5232](https://insights.sbomify.com/CVE-2015-5232/): Race condition in cornelisnetworks:opa-ff (high 8.1)
- [CVE-2015-5231](https://insights.sbomify.com/CVE-2015-5231/): Information disclosure in criu:checkpoint\/restore in userspace (medium 5.5)
- [CVE-2015-5230](https://insights.sbomify.com/CVE-2015-5230/): Denial of service in PowerDNS Authoritative Server (high 7.5)
- [CVE-2015-5229](https://insights.sbomify.com/CVE-2015-5229/): Memory corruption in redhat:enterprise linux (high 7.5)
- [CVE-2015-5228](https://insights.sbomify.com/CVE-2015-5228/): Privilege escalation in criu:checkpoint\/restore in userspace (high 7.8)
- [CVE-2015-5227](https://insights.sbomify.com/CVE-2015-5227/): Code injection in inboundnow:wordpress landing pages (high 8.8)
- [CVE-2015-5225](https://insights.sbomify.com/CVE-2015-5225/): Memory corruption in fedoraproject:fedora (high 7.2)
- [CVE-2015-5224](https://insights.sbomify.com/CVE-2015-5224/): Race condition in kernel:util-linux (critical 9.8)
- [CVE-2015-5223](https://insights.sbomify.com/CVE-2015-5223/): OpenStack Object Storage (Swift) Sensitive Data Exposure (medium 5.0)
- [CVE-2015-5222](https://insights.sbomify.com/CVE-2015-5222/): Missing authorization in redhat:openshift (high 8.5)
- [CVE-2015-5221](https://insights.sbomify.com/CVE-2015-5221/): Use after free in fedoraproject:fedora (medium 5.5)
- [CVE-2015-5220](https://insights.sbomify.com/CVE-2015-5220/): Denial of service in redhat:jboss enterprise application platform (medium 5.0)
- [CVE-2015-5219](https://insights.sbomify.com/CVE-2015-5219/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2015-5218](https://insights.sbomify.com/CVE-2015-5218/): Memory corruption in kernel:util-linux (low 2.1)
- [CVE-2015-5217](https://insights.sbomify.com/CVE-2015-5217/): Ipsilon denial of service via a duplicate SP name (medium 4.0)
- [CVE-2015-5216](https://insights.sbomify.com/CVE-2015-5216/): Cross-site scripting in Ipsilon (medium 6.1)
- [CVE-2015-5215](https://insights.sbomify.com/CVE-2015-5215/): Cross-site scripting in Ipsilon (medium 6.1)
- [CVE-2015-5214](https://insights.sbomify.com/CVE-2015-5214/): Memory corruption in apache:openoffice (medium 6.8)
- [CVE-2015-5213](https://insights.sbomify.com/CVE-2015-5213/): Integer overflow in apache:openoffice (medium 6.8)
- [CVE-2015-5212](https://insights.sbomify.com/CVE-2015-5212/): Integer overflow in apache:openoffice (medium 6.8)
- [CVE-2015-5211](https://insights.sbomify.com/CVE-2015-5211/): Files or Directories Accessible to External Parties in org.springframework:spring-core (critical 9.6)
- [CVE-2015-5210](https://insights.sbomify.com/CVE-2015-5210/): Apache Ambari Open Redirect (medium 5.8)
- [CVE-2015-5209](https://insights.sbomify.com/CVE-2015-5209/): Special top object can be used to access Struts' internals (high 7.5)
- [CVE-2015-5208](https://insights.sbomify.com/CVE-2015-5208/): Code injection in apache:cordova (medium 4.4)
- [CVE-2015-5207](https://insights.sbomify.com/CVE-2015-5207/): Security feature bypass in apache:cordova (medium 5.3)
- [CVE-2015-5206](https://insights.sbomify.com/CVE-2015-5206/): Other in apache:traffic server (critical 9.8)
- [CVE-2015-5204](https://insights.sbomify.com/CVE-2015-5204/): Other in apache:cordova file transfer (medium 4.3)
- [CVE-2015-5203](https://insights.sbomify.com/CVE-2015-5203/): Memory corruption in fedoraproject:fedora (medium 5.5)
- [CVE-2015-5201](https://insights.sbomify.com/CVE-2015-5201/): Auth bypass in Enterprise Virtualization Hypervisor (aka RHEV-H) (high 7.5)
- [CVE-2015-5200](https://insights.sbomify.com/CVE-2015-5200/): Privilege escalation in canonical:ubuntu linux (medium 6.3)
- [CVE-2015-5199](https://insights.sbomify.com/CVE-2015-5199/): Path traversal in canonical:ubuntu linux (high 7.2)
- [CVE-2015-5198](https://insights.sbomify.com/CVE-2015-5198/): Privilege escalation in canonical:ubuntu linux (high 7.2)
- [CVE-2015-5195](https://insights.sbomify.com/CVE-2015-5195/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2015-5194](https://insights.sbomify.com/CVE-2015-5194/): Denial of service in canonical:ubuntu linux (high 7.5)
- [CVE-2015-5191](https://insights.sbomify.com/CVE-2015-5191/): Race condition in VMware Tools (medium 6.7)
- [CVE-2015-5190](https://insights.sbomify.com/CVE-2015-5190/): Command injection in pacemaker\/corosync configuration system project:pacemaker\/corosync configuration system (high 8.5)
- [CVE-2015-5189](https://insights.sbomify.com/CVE-2015-5189/): Race condition in pacemaker\/corosync configuration system project:pacemaker\/corosync configuration system (medium 4.9)
- [CVE-2015-5188](https://insights.sbomify.com/CVE-2015-5188/): Cross-site request forgery in redhat:jboss enterprise application platform (medium 6.8)
- [CVE-2015-5187](https://insights.sbomify.com/CVE-2015-5187/): Information disclosure in candlepinproject:candlepin (medium 6.5)
- [CVE-2015-5186](https://insights.sbomify.com/CVE-2015-5186/): Other in linux audit project:linux audit (medium 5.3)
- [CVE-2015-5185](https://insights.sbomify.com/CVE-2015-5185/): Null dereference in opensuse:opensuse (medium 5.0)
- [CVE-2015-5184](https://insights.sbomify.com/CVE-2015-5184/): Misconfiguration in redhat:amq (high 7.5)
- [CVE-2015-5183](https://insights.sbomify.com/CVE-2015-5183/): Misconfiguration in redhat:amq (high 7.5)
- [CVE-2015-5182](https://insights.sbomify.com/CVE-2015-5182/): Cross-site request forgery in redhat:amq (high 8.8)
- [CVE-2015-5181](https://insights.sbomify.com/CVE-2015-5181/): Cross-site scripting in redhat:jboss a-mq (medium 5.4)
- [CVE-2015-5180](https://insights.sbomify.com/CVE-2015-5180/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2015-5179](https://insights.sbomify.com/CVE-2015-5179/): Other in freeipa:freeipa (high 7.5)
- [CVE-2015-5178](https://insights.sbomify.com/CVE-2015-5178/): Security feature bypass in redhat:jboss enterprise application platform (medium 4.3)
- [CVE-2015-5177](https://insights.sbomify.com/CVE-2015-5177/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2015-5176](https://insights.sbomify.com/CVE-2015-5176/): Security feature bypass in redhat:jboss portal (medium 5.8)
- [CVE-2015-5175](https://insights.sbomify.com/CVE-2015-5175/): Apache CXF Fediz application plugins are vulnerable to Denial of Service (DoS) attacks (high 7.5)
- [CVE-2015-5174](https://insights.sbomify.com/CVE-2015-5174/): Improper Limitation of a Pathname to a Restricted Directory in Apache Tomcat (medium 4.3)
- [CVE-2015-5173](https://insights.sbomify.com/CVE-2015-5173/): Information disclosure in cloudfoundry:cf-release (high 8.8)
- [CVE-2015-5172](https://insights.sbomify.com/CVE-2015-5172/): Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password (critical 9.8)
- [CVE-2015-5171](https://insights.sbomify.com/CVE-2015-5171/): Cloud Foundry Runtime Insufficient Session Expiration vulnerability (critical 9.8)
- [CVE-2015-5170](https://insights.sbomify.com/CVE-2015-5170/): Cloud Foundry Runtime Cross-Site Request Forgery vulnerability (high 8.8)
- [CVE-2015-5169](https://insights.sbomify.com/CVE-2015-5169/): Cross-site Scripting in Apache Struts (medium 6.1)
- [CVE-2015-5168](https://insights.sbomify.com/CVE-2015-5168/): Other in apache:traffic server (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/36/