# Vulnerabilities published in 2015


- [CVE-2015-4704](https://insights.sbomify.com/CVE-2015-4704/): Path traversal in download zip attachments project:download zip attachments (high 7.5)
- [CVE-2015-4703](https://insights.sbomify.com/CVE-2015-4703/): Path traversal in rename project:rename (medium 5.3)
- [CVE-2015-4700](https://insights.sbomify.com/CVE-2015-4700/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2015-4699](https://insights.sbomify.com/CVE-2015-4699/): Cross-site scripting in cloud4wi:splash portal (medium 6.1)
- [CVE-2015-4697](https://insights.sbomify.com/CVE-2015-4697/): Cross-site request forgery in sumo:google analyticator (high 8.8)
- [CVE-2015-4696](https://insights.sbomify.com/CVE-2015-4696/): Use after free in wvware:libwmf (medium 4.3)
- [CVE-2015-4695](https://insights.sbomify.com/CVE-2015-4695/): Memory corruption in wvware:libwmf (medium 5.0)
- [CVE-2015-4694](https://insights.sbomify.com/CVE-2015-4694/): Path traversal in zip attachments project:zip attachments (high 8.6)
- [CVE-2015-4692](https://insights.sbomify.com/CVE-2015-4692/): Null dereference in linux:linux kernel (medium 4.9)
- [CVE-2015-4689](https://insights.sbomify.com/CVE-2015-4689/): Auth bypass in ellucian:banner student (critical 9.8)
- [CVE-2015-4688](https://insights.sbomify.com/CVE-2015-4688/): Information disclosure in ellucian:banner student (medium 5.3)
- [CVE-2015-4687](https://insights.sbomify.com/CVE-2015-4687/): Cross-site scripting in ellucian:banner student (medium 6.1)
- [CVE-2015-4685](https://insights.sbomify.com/CVE-2015-4685/): Privilege escalation in polycom:realpresence resource manager (high 7.0)
- [CVE-2015-4684](https://insights.sbomify.com/CVE-2015-4684/): Path traversal in polycom:realpresence resource manager (medium 6.5)
- [CVE-2015-4683](https://insights.sbomify.com/CVE-2015-4683/): Information disclosure in polycom:realpresence resource manager (critical 9.8)
- [CVE-2015-4682](https://insights.sbomify.com/CVE-2015-4682/): Information disclosure in polycom:realpresence resource manager (medium 6.5)
- [CVE-2015-4681](https://insights.sbomify.com/CVE-2015-4681/): Weak cryptography in polycom:realpresence resource manager (high 7.8)
- [CVE-2015-4680](https://insights.sbomify.com/CVE-2015-4680/): Security feature bypass in freeradius:freeradius (high 7.5)
- [CVE-2015-4679](https://insights.sbomify.com/CVE-2015-4679/): Cross-site scripting in airties:rt-210 firmware (medium 4.3)
- [CVE-2015-4678](https://insights.sbomify.com/CVE-2015-4678/): SQL injection in persian car cms project:persian car cms (high 7.5)
- [CVE-2015-4677](https://insights.sbomify.com/CVE-2015-4677/): Cross-site request forgery in fiverrscript:fiverrscript (medium 6.8)
- [CVE-2015-4676](https://insights.sbomify.com/CVE-2015-4676/): SQL injection in aftab:tickfa (medium 6.5)
- [CVE-2015-4675](https://insights.sbomify.com/CVE-2015-4675/): Memory corruption in tinysrp project:tinysrp (high 7.5)
- [CVE-2015-4674](https://insights.sbomify.com/CVE-2015-4674/): Weak cryptography in timedoctor:timedoctor (critical 9.3)
- [CVE-2015-4673](https://insights.sbomify.com/CVE-2015-4673/): Cross-site scripting in clip-bucket:clipbucket (medium 5.4)
- [CVE-2015-4671](https://insights.sbomify.com/CVE-2015-4671/): Cross-site scripting in opencart:opencart (medium 6.1)
- [CVE-2015-4670](https://insights.sbomify.com/CVE-2015-4670/): Path traversal in devexpress:ajax control toolkit (medium 6.4)
- [CVE-2015-4669](https://insights.sbomify.com/CVE-2015-4669/): Hardcoded credentials in xceedium:xsuite (high 7.8)
- [CVE-2015-4668](https://insights.sbomify.com/CVE-2015-4668/): Open redirect in xceedium:xsuite (medium 6.1)
- [CVE-2015-4667](https://insights.sbomify.com/CVE-2015-4667/): Hardcoded credentials in xceedium:xsuite (critical 9.8)
- [CVE-2015-4666](https://insights.sbomify.com/CVE-2015-4666/): Path traversal in xceedium:xsuite (medium 5.0)
- [CVE-2015-4665](https://insights.sbomify.com/CVE-2015-4665/): Cross-site scripting in xceedium:xsuite (medium 4.3)
- [CVE-2015-4664](https://insights.sbomify.com/CVE-2015-4664/): Command injection in CA Privileged Access Manager (critical 9.8)
- [CVE-2015-4661](https://insights.sbomify.com/CVE-2015-4661/): Cross-site scripting in getsymphony:symphony (medium 4.3)
- [CVE-2015-4660](https://insights.sbomify.com/CVE-2015-4660/): Cross-site scripting in eliacom:enhanced sql portal (medium 4.3)
- [CVE-2015-4659](https://insights.sbomify.com/CVE-2015-4659/): Cross-site request forgery in labsmedia:clickheat (medium 6.8)
- [CVE-2015-4658](https://insights.sbomify.com/CVE-2015-4658/): SQL injection in milw0rm project:milw0rm clone script (high 7.5)
- [CVE-2015-4657](https://insights.sbomify.com/CVE-2015-4657/): Cross-site scripting in mailbird:mailbird (medium 4.3)
- [CVE-2015-4656](https://insights.sbomify.com/CVE-2015-4656/): Cross-site scripting in synology:photo station (medium 4.3)
- [CVE-2015-4655](https://insights.sbomify.com/CVE-2015-4655/): Cross-site scripting in synology:diskstation manager (medium 4.3)
- [CVE-2015-4654](https://insights.sbomify.com/CVE-2015-4654/): SQL injection in joomla:joomla\! (high 7.5)
- [CVE-2015-4652](https://insights.sbomify.com/CVE-2015-4652/): Denial of service in debian:debian linux (medium 4.3)
- [CVE-2015-4651](https://insights.sbomify.com/CVE-2015-4651/): Denial of service in debian:debian linux (medium 5.0)
- [CVE-2015-4650](https://insights.sbomify.com/CVE-2015-4650/): Privilege escalation in arubanetworks:clearpass policy manager (critical 9.8)
- [CVE-2015-4649](https://insights.sbomify.com/CVE-2015-4649/): Privilege escalation in arubanetworks:clearpass (high 7.2)
- [CVE-2015-4648](https://insights.sbomify.com/CVE-2015-4648/): Memory corruption in panasonic:security api activex sdk (high 7.5)
- [CVE-2015-4647](https://insights.sbomify.com/CVE-2015-4647/): Memory corruption in panasonic:security api activex sdk (medium 6.8)
- [CVE-2015-4646](https://insights.sbomify.com/CVE-2015-4646/): Denial of service in squashfs project:squashfs (high 7.5)
- [CVE-2015-4645](https://insights.sbomify.com/CVE-2015-4645/): Integer overflow in fedoraproject:fedora (medium 5.5)
- [CVE-2015-4644](https://insights.sbomify.com/CVE-2015-4644/): Null dereference in php:php (high 7.5)
- [CVE-2015-4643](https://insights.sbomify.com/CVE-2015-4643/): Integer overflow in debian:debian linux (critical 9.8)
- [CVE-2015-4642](https://insights.sbomify.com/CVE-2015-4642/): Command injection in php:php (critical 9.8)
- [CVE-2015-4641](https://insights.sbomify.com/CVE-2015-4641/): Path traversal in swiftkey:swiftkey sdk (medium 6.4)
- [CVE-2015-4640](https://insights.sbomify.com/CVE-2015-4640/): Weak cryptography in swiftkey:swiftkey sdk (low 2.9)
- [CVE-2015-4639](https://insights.sbomify.com/CVE-2015-4639/): Cross-site scripting in koha:koha (high 8.8)
- [CVE-2015-4638](https://insights.sbomify.com/CVE-2015-4638/): Denial of service in f5:big-ip advanced firewall manager (medium 5.0)
- [CVE-2015-4637](https://insights.sbomify.com/CVE-2015-4637/): Auth bypass in f5:big-iq adc (medium 4.3)
- [CVE-2015-4634](https://insights.sbomify.com/CVE-2015-4634/): SQL injection in cacti:cacti (high 7.5)
- [CVE-2015-4633](https://insights.sbomify.com/CVE-2015-4633/): SQL injection in koha:koha (critical 9.8)
- [CVE-2015-4632](https://insights.sbomify.com/CVE-2015-4632/): Path traversal in koha:koha (high 7.5)
- [CVE-2015-4631](https://insights.sbomify.com/CVE-2015-4631/): Cross-site scripting in koha:koha (medium 5.4)
- [CVE-2015-4630](https://insights.sbomify.com/CVE-2015-4630/): Cross-site request forgery in koha:koha (high 8.0)
- [CVE-2015-4629](https://insights.sbomify.com/CVE-2015-4629/): Missing authorization in huawei:e5756s firmware (critical 9.8)
- [CVE-2015-4628](https://insights.sbomify.com/CVE-2015-4628/): SQL injection in limesurvey:limesurvey (medium 6.5)
- [CVE-2015-4627](https://insights.sbomify.com/CVE-2015-4627/): SQL injection in pragyan cms project:pragyan cms (critical 9.8)
- [CVE-2015-4626](https://insights.sbomify.com/CVE-2015-4626/): Business logic in treasuryxpress:c2box (high 7.5)
- [CVE-2015-4625](https://insights.sbomify.com/CVE-2015-4625/): Integer overflow in fedoraproject:fedora (medium 4.6)
- [CVE-2015-4624](https://insights.sbomify.com/CVE-2015-4624/): Cross-site request forgery in hak5:wi-fi pineapple firmware (high 7.5)
- [CVE-2015-4620](https://insights.sbomify.com/CVE-2015-4620/): Denial of service in isc:bind (high 7.8)
- [CVE-2015-4619](https://insights.sbomify.com/CVE-2015-4619/): Spina gem vulnerable to Cross-site request forgery (CSRF) vulnerability (high 8.8)
- [CVE-2015-4617](https://insights.sbomify.com/CVE-2015-4617/): Path traversal in Easy2map-photos WordPress Plugin (high 7.5)
- [CVE-2015-4616](https://insights.sbomify.com/CVE-2015-4616/): Path traversal in easy2map project:easy2map (medium 5.0)
- [CVE-2015-4615](https://insights.sbomify.com/CVE-2015-4615/): SQL injection in Easy2map-photos WordPress Plugin (critical 9.8)
- [CVE-2015-4614](https://insights.sbomify.com/CVE-2015-4614/): SQL injection in easy2map project:easy2map (high 7.5)
- [CVE-2015-4613](https://insights.sbomify.com/CVE-2015-4613/): SQL injection in developer log project:developer log (medium 6.5)
- [CVE-2015-4612](https://insights.sbomify.com/CVE-2015-4612/): SQL injection in faq-frequenty asked questions project:faq-frequently asked questions (medium 6.5)
- [CVE-2015-4611](https://insights.sbomify.com/CVE-2015-4611/): SQL injection in smoelenboek project:smoelenboek (medium 6.5)
- [CVE-2015-4610](https://insights.sbomify.com/CVE-2015-4610/): SQL injection in store locator project:store locator (medium 6.5)
- [CVE-2015-4609](https://insights.sbomify.com/CVE-2015-4609/): SQL injection in wt directory project:wt directory (medium 6.5)
- [CVE-2015-4608](https://insights.sbomify.com/CVE-2015-4608/): Cross-site scripting in be user log project:be user log (low 3.5)
- [CVE-2015-4607](https://insights.sbomify.com/CVE-2015-4607/): File upload in frontend user upload project:frontend user upload (high 7.5)
- [CVE-2015-4606](https://insights.sbomify.com/CVE-2015-4606/): File upload in job fair project:job fair (high 7.5)
- [CVE-2015-4605](https://insights.sbomify.com/CVE-2015-4605/): Memory corruption in php:php (high 7.5)
- [CVE-2015-4604](https://insights.sbomify.com/CVE-2015-4604/): Memory corruption in php:php (high 7.5)
- [CVE-2015-4603](https://insights.sbomify.com/CVE-2015-4603/): Memory corruption in php:php (critical 9.8)
- [CVE-2015-4602](https://insights.sbomify.com/CVE-2015-4602/): Memory corruption in php:php (critical 9.8)
- [CVE-2015-4601](https://insights.sbomify.com/CVE-2015-4601/): Memory corruption in php:php (critical 9.8)
- [CVE-2015-4600](https://insights.sbomify.com/CVE-2015-4600/): Memory corruption in php:php (critical 9.8)
- [CVE-2015-4599](https://insights.sbomify.com/CVE-2015-4599/): Memory corruption in php:php (critical 9.8)
- [CVE-2015-4598](https://insights.sbomify.com/CVE-2015-4598/): Path traversal in php:php (medium 6.5)
- [CVE-2015-4596](https://insights.sbomify.com/CVE-2015-4596/): Privilege escalation in lenovo:mouse suite (high 7.8)
- [CVE-2015-4594](https://insights.sbomify.com/CVE-2015-4594/): Auth bypass in eclinicalworks:population health (critical 9.8)
- [CVE-2015-4593](https://insights.sbomify.com/CVE-2015-4593/): Cross-site request forgery in eclinicalworks:population health (high 8.8)
- [CVE-2015-4592](https://insights.sbomify.com/CVE-2015-4592/): SQL injection in eclinicalworks:population health (high 8.8)
- [CVE-2015-4591](https://insights.sbomify.com/CVE-2015-4591/): Cross-site scripting in eclinicalworks:population health (medium 6.1)
- [CVE-2015-4590](https://insights.sbomify.com/CVE-2015-4590/): Memory corruption in arduino json project:arduino json (medium 5.0)
- [CVE-2015-4588](https://insights.sbomify.com/CVE-2015-4588/): Memory corruption in fedoraproject:fedora (medium 6.8)
- [CVE-2015-4587](https://insights.sbomify.com/CVE-2015-4587/): Cross-site scripting in alcatel-lucent:cellpipe 7130 router firmware (medium 4.3)
- [CVE-2015-4586](https://insights.sbomify.com/CVE-2015-4586/): Cross-site request forgery in alcatel-lucent:cellpipe 7130 rg 5ae.m2013 hol firmware (medium 6.8)
- [CVE-2015-4582](https://insights.sbomify.com/CVE-2015-4582/): Cross-site scripting in boot-store (high 7.2)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/41/