# Vulnerabilities published in 2015


- [CVE-2015-5167](https://insights.sbomify.com/CVE-2015-5167/): Apache Ranger allows users to bypass intended access restrictions via the REST API (medium 6.5)
- [CVE-2015-5166](https://insights.sbomify.com/CVE-2015-5166/): Use after free in fedoraproject:fedora (high 7.2)
- [CVE-2015-5165](https://insights.sbomify.com/CVE-2015-5165/): Information disclosure in arista:eos (critical 9.3)
- [CVE-2015-5164](https://insights.sbomify.com/CVE-2015-5164/): Deserialization in pulpproject:qpid (high 7.2)
- [CVE-2015-5163](https://insights.sbomify.com/CVE-2015-5163/): OpenStack Image Service (Glance) allows remote authenticated users to read arbitrary file (low 3.5)
- [CVE-2015-5162](https://insights.sbomify.com/CVE-2015-5162/): OpenStack Cinder, Glance, and Nova contain Uncontrolled Resource Consumption (high 7.5)
- [CVE-2015-5161](https://insights.sbomify.com/CVE-2015-5161/): ZendXml and Zend Framework contain XXE and XEE Vulnerabilities (medium 6.8)
- [CVE-2015-5160](https://insights.sbomify.com/CVE-2015-5160/): Information disclosure in libvirt:libvirt (medium 5.5)
- [CVE-2015-5159](https://insights.sbomify.com/CVE-2015-5159/): Improper Input Validation in kdcproxy (high 7.5)
- [CVE-2015-5158](https://insights.sbomify.com/CVE-2015-5158/): Memory corruption in qemu:qemu (medium 5.5)
- [CVE-2015-5157](https://insights.sbomify.com/CVE-2015-5157/): Privilege escalation in linux:linux kernel (high 7.2)
- [CVE-2015-5156](https://insights.sbomify.com/CVE-2015-5156/): Memory corruption in linux:linux kernel (medium 6.1)
- [CVE-2015-5154](https://insights.sbomify.com/CVE-2015-5154/): Memory corruption in fedoraproject:fedora (high 7.2)
- [CVE-2015-5153](https://insights.sbomify.com/CVE-2015-5153/): Privilege escalation in pulp project:pulp (high 8.8)
- [CVE-2015-5152](https://insights.sbomify.com/CVE-2015-5152/): Information disclosure in theforeman:foreman (high 8.1)
- [CVE-2015-5151](https://insights.sbomify.com/CVE-2015-5151/): Cross-site scripting in themepunch:slider revolution (medium 4.3)
- [CVE-2015-5150](https://insights.sbomify.com/CVE-2015-5150/): Cross-site scripting in zohocorp:manageengine supportcenter plus (low 3.5)
- [CVE-2015-5149](https://insights.sbomify.com/CVE-2015-5149/): Path traversal in zohocorp:manageengine supportcenter plus (medium 5.5)
- [CVE-2015-5148](https://insights.sbomify.com/CVE-2015-5148/): SQL injection in livelycart:livelycart (high 7.5)
- [CVE-2015-5147](https://insights.sbomify.com/CVE-2015-5147/): redcarpet Buffer Overflow vulnerability (high 7.5)
- [CVE-2015-5146](https://insights.sbomify.com/CVE-2015-5146/): Null dereference in debian:debian linux (medium 5.3)
- [CVE-2015-5145](https://insights.sbomify.com/CVE-2015-5145/): Django ReDoS in validators.URLValidator (high 7.8)
- [CVE-2015-5144](https://insights.sbomify.com/CVE-2015-5144/): Django Vulnerable to HTTP Response Splitting Attack (medium 4.3)
- [CVE-2015-5143](https://insights.sbomify.com/CVE-2015-5143/): Django Denial-of-service by filling session store (high 7.8)
- [CVE-2015-5134](https://insights.sbomify.com/CVE-2015-5134/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-5133](https://insights.sbomify.com/CVE-2015-5133/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-5132](https://insights.sbomify.com/CVE-2015-5132/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-5131](https://insights.sbomify.com/CVE-2015-5131/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-5130](https://insights.sbomify.com/CVE-2015-5130/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-5129](https://insights.sbomify.com/CVE-2015-5129/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-5127](https://insights.sbomify.com/CVE-2015-5127/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-5125](https://insights.sbomify.com/CVE-2015-5125/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-5124](https://insights.sbomify.com/CVE-2015-5124/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-5123](https://insights.sbomify.com/CVE-2015-5123/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2015-5122](https://insights.sbomify.com/CVE-2015-5122/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2015-5121](https://insights.sbomify.com/CVE-2015-5121/): Memory corruption in adobe:shockwave player (critical 10.0)
- [CVE-2015-5120](https://insights.sbomify.com/CVE-2015-5120/): Memory corruption in adobe:shockwave player (critical 10.0)
- [CVE-2015-5119](https://insights.sbomify.com/CVE-2015-5119/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2015-5118](https://insights.sbomify.com/CVE-2015-5118/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-5117](https://insights.sbomify.com/CVE-2015-5117/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-5116](https://insights.sbomify.com/CVE-2015-5116/): Security feature bypass in adobe:air (medium 5.0)
- [CVE-2015-5115](https://insights.sbomify.com/CVE-2015-5115/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5114](https://insights.sbomify.com/CVE-2015-5114/): Use after free in adobe:acrobat (critical 10.0)
- [CVE-2015-5113](https://insights.sbomify.com/CVE-2015-5113/): Use after free in adobe:acrobat (medium 6.8)
- [CVE-2015-5111](https://insights.sbomify.com/CVE-2015-5111/): Use after free in adobe:acrobat (medium 6.8)
- [CVE-2015-5110](https://insights.sbomify.com/CVE-2015-5110/): Memory corruption in adobe:acrobat (medium 6.8)
- [CVE-2015-5109](https://insights.sbomify.com/CVE-2015-5109/): Integer overflow in adobe:acrobat (medium 6.8)
- [CVE-2015-5108](https://insights.sbomify.com/CVE-2015-5108/): Integer overflow in adobe:acrobat (critical 10.0)
- [CVE-2015-5107](https://insights.sbomify.com/CVE-2015-5107/): Information disclosure in adobe:acrobat (medium 4.3)
- [CVE-2015-5106](https://insights.sbomify.com/CVE-2015-5106/): Privilege escalation in adobe:acrobat (medium 6.8)
- [CVE-2015-5105](https://insights.sbomify.com/CVE-2015-5105/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5104](https://insights.sbomify.com/CVE-2015-5104/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5103](https://insights.sbomify.com/CVE-2015-5103/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5102](https://insights.sbomify.com/CVE-2015-5102/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5101](https://insights.sbomify.com/CVE-2015-5101/): Use after free in adobe:acrobat (critical 10.0)
- [CVE-2015-5100](https://insights.sbomify.com/CVE-2015-5100/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5099](https://insights.sbomify.com/CVE-2015-5099/): Use after free in adobe:acrobat (critical 10.0)
- [CVE-2015-5098](https://insights.sbomify.com/CVE-2015-5098/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5097](https://insights.sbomify.com/CVE-2015-5097/): Integer overflow in adobe:acrobat (critical 10.0)
- [CVE-2015-5096](https://insights.sbomify.com/CVE-2015-5096/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5095](https://insights.sbomify.com/CVE-2015-5095/): Use after free in adobe:acrobat (critical 10.0)
- [CVE-2015-5094](https://insights.sbomify.com/CVE-2015-5094/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5093](https://insights.sbomify.com/CVE-2015-5093/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5092](https://insights.sbomify.com/CVE-2015-5092/): Security feature bypass in adobe:acrobat (medium 5.0)
- [CVE-2015-5091](https://insights.sbomify.com/CVE-2015-5091/): Denial of service in adobe:acrobat (high 7.8)
- [CVE-2015-5090](https://insights.sbomify.com/CVE-2015-5090/): Privilege escalation in adobe:acrobat (high 7.2)
- [CVE-2015-5089](https://insights.sbomify.com/CVE-2015-5089/): Security feature bypass in adobe:acrobat (medium 5.0)
- [CVE-2015-5088](https://insights.sbomify.com/CVE-2015-5088/): Security feature bypass in adobe:acrobat (medium 5.0)
- [CVE-2015-5087](https://insights.sbomify.com/CVE-2015-5087/): Memory corruption in adobe:acrobat (critical 10.0)
- [CVE-2015-5086](https://insights.sbomify.com/CVE-2015-5086/): Security feature bypass in adobe:acrobat (medium 6.8)
- [CVE-2015-5085](https://insights.sbomify.com/CVE-2015-5085/): Security feature bypass in adobe:acrobat (medium 6.8)
- [CVE-2015-5084](https://insights.sbomify.com/CVE-2015-5084/): Information disclosure in siemens:simatic wincc sm\@rtclient (low 2.1)
- [CVE-2015-5082](https://insights.sbomify.com/CVE-2015-5082/): Command injection in endian firewall:endian firewall (critical 10.0)
- [CVE-2015-5081](https://insights.sbomify.com/CVE-2015-5081/): django-cms CSRF Vulnerability (high 8.8)
- [CVE-2015-5080](https://insights.sbomify.com/CVE-2015-5080/): Command injection in citrix:netscaler application delivery controller firmware (critical 9.0)
- [CVE-2015-5079](https://insights.sbomify.com/CVE-2015-5079/): Path traversal in blackcat-cms:blackcat cms (high 7.5)
- [CVE-2015-5078](https://insights.sbomify.com/CVE-2015-5078/): SQL injection in limesurvey:limesurvey (medium 6.5)
- [CVE-2015-5076](https://insights.sbomify.com/CVE-2015-5076/): Cross-site scripting in x2engine:x2crm (medium 4.3)
- [CVE-2015-5075](https://insights.sbomify.com/CVE-2015-5075/): Cross-site request forgery in x2engine:x2crm (medium 6.8)
- [CVE-2015-5074](https://insights.sbomify.com/CVE-2015-5074/): File upload in x2engine:x2crm (high 7.5)
- [CVE-2015-5073](https://insights.sbomify.com/CVE-2015-5073/): Memory corruption in ibm:powerkvm (critical 9.1)
- [CVE-2015-5072](https://insights.sbomify.com/CVE-2015-5072/): Path traversal in bmc:remedy ar system server (medium 6.5)
- [CVE-2015-5071](https://insights.sbomify.com/CVE-2015-5071/): Path traversal in bmc:remedy ar system server (medium 6.5)
- [CVE-2015-5070](https://insights.sbomify.com/CVE-2015-5070/): Information disclosure in fedoraproject:fedora (low 3.1)
- [CVE-2015-5069](https://insights.sbomify.com/CVE-2015-5069/): Information disclosure in fedoraproject:fedora (medium 4.3)
- [CVE-2015-5068](https://insights.sbomify.com/CVE-2015-5068/): XML external entity in sap:mobile platform (high 7.5)
- [CVE-2015-5067](https://insights.sbomify.com/CVE-2015-5067/): Hardcoded credentials in sap:netweaver (high 7.5)
- [CVE-2015-5066](https://insights.sbomify.com/CVE-2015-5066/): Cross-site scripting in metalgenix:genixcms (medium 4.3)
- [CVE-2015-5065](https://insights.sbomify.com/CVE-2015-5065/): Path traversal in intelligent-it:paypal currency converter basic for woocommerce (medium 5.0)
- [CVE-2015-5064](https://insights.sbomify.com/CVE-2015-5064/): Cross-site scripting in mysql-lite-administrator project:mysql-lite-administrator (medium 4.3)
- [CVE-2015-5063](https://insights.sbomify.com/CVE-2015-5063/): Cross-site scripting in silverstripe:silverstripe (medium 4.3)
- [CVE-2015-5062](https://insights.sbomify.com/CVE-2015-5062/): Silverstripe CMS Open Redirect (medium 5.8)
- [CVE-2015-5061](https://insights.sbomify.com/CVE-2015-5061/): Cross-site scripting in zohocorp:manageengine assetexplorer (low 3.5)
- [CVE-2015-5060](https://insights.sbomify.com/CVE-2015-5060/): Cross-site scripting in anchorcms:anchor cms (medium 6.1)
- [CVE-2015-5059](https://insights.sbomify.com/CVE-2015-5059/): Missing authorization in mantisbt:mantisbt (medium 5.3)
- [CVE-2015-5058](https://insights.sbomify.com/CVE-2015-5058/): Denial of service in f5:big-ip access policy manager (high 7.8)
- [CVE-2015-5057](https://insights.sbomify.com/CVE-2015-5057/): Cross-site scripting in broken link checker project:broken link checker (medium 6.1)
- [CVE-2015-5054](https://insights.sbomify.com/CVE-2015-5054/): Open redirect in ellucian:banner student (medium 6.1)
- [CVE-2015-5053](https://insights.sbomify.com/CVE-2015-5053/): Privilege escalation in nvidia:gpu driver (critical 10.0)
- [CVE-2015-5052](https://insights.sbomify.com/CVE-2015-5052/): SQL injection in sefrengo:sefrengo (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/37/