Vulnerabilities published in 2015
8,124 vulnerabilities were published in 2015: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 43 of 82.
- CVE-2015-4455 File upload in aviary image editor add-on for gravity forms project:aviary image editor add-on for gravity forms
- CVE-2015-4454 SQL injection in cacti:cacti
- CVE-2015-4453 Auth bypass in open-emr:openemr
- CVE-2015-4452 Security feature bypass in adobe:acrobat
- CVE-2015-4451 Security feature bypass in adobe:acrobat
- CVE-2015-4450 Security feature bypass in adobe:acrobat
- CVE-2015-4449 Security feature bypass in adobe:acrobat
- CVE-2015-4448 Use after free in adobe:acrobat
- CVE-2015-4447 Security feature bypass in adobe:acrobat
- CVE-2015-4446 Privilege escalation in adobe:acrobat
- CVE-2015-4445 Security feature bypass in adobe:acrobat
- CVE-2015-4444 Null dereference in adobe:acrobat
- CVE-2015-4443 Null dereference in adobe:acrobat
- CVE-2015-4441 Security feature bypass in adobe:acrobat
- CVE-2015-4438 Security feature bypass in adobe:acrobat
- CVE-2015-4435 Security feature bypass in adobe:acrobat
- CVE-2015-4433 Memory corruption in adobe:air
- CVE-2015-4432 Memory corruption in adobe:air
- CVE-2015-4431 Memory corruption in adobe:air
- CVE-2015-4430 Use after free in adobe:air
- CVE-2015-4429 Null dereference in adobe:air
- CVE-2015-4428 Use after free in adobe:air
- CVE-2015-4427 Cross-site scripting in ektron:ektron content management system
- CVE-2015-4426 SQL injection in pimcore:pimcore
- CVE-2015-4425 Path traversal in pimcore:pimcore
- CVE-2015-4422 Memory corruption in huawei:mate 7 firmware
- CVE-2015-4421 Memory corruption in huawei:mate 7 firmware
- CVE-2015-4420 Cross-site scripting in opsview:opsview
- CVE-2015-4418 Information disclosure in zohocorp:manageengine netflow analyzer
- CVE-2015-4415 Path traversal in magnifica webscripts:anima gallery
- CVE-2015-4414 Path traversal in se html5 album audio player project:se html5 album audio player
- CVE-2015-4413 Cross-site scripting in nextendweb:facebook connect
- CVE-2015-4412 bson is vulnerable to denial of service due to incorrect regex validation
- CVE-2015-4411 BSON rubygem contains potential denial of service
- CVE-2015-4410 Moped Rubygem Data Injection Vulnerability
- CVE-2015-4409 Memory corruption in hikvision:ds-76xxx series firmware
- CVE-2015-4408 Memory corruption in hikvision:ds-76xxx series firmware
- CVE-2015-4407 Memory corruption in hikvision:ds-76xxx series firmware
- CVE-2015-4400 Information disclosure in ring:ring firmware
- CVE-2015-4398 Open redirect in chaos tool suite project:ctools
- CVE-2015-4397 Cross-site request forgery in node template project:node template
- CVE-2015-4396 Cross-site request forgery in keyword research project:keyword research
- CVE-2015-4395 Information disclosure in hybridauth social login project:hybridauth social login
- CVE-2015-4394 Missing authorization in services project:services
- CVE-2015-4393 File upload in services project:services
- CVE-2015-4392 Cross-site scripting in display suite project:display suite
- CVE-2015-4391 Cross-site request forgery in civicrm:civicrm private report
- CVE-2015-4390 Cross-site request forgery in user import project:user import
- CVE-2015-4389 Missing authorization in open graph importer project:open graph importer
- CVE-2015-4388 Cross-site scripting in current search links project:current search links
- CVE-2015-4387 Cross-site scripting in password policy project:password policy
- CVE-2015-4386 Cross-site scripting in entitybulkdelete project:entitybulkdelete
- CVE-2015-4385 Cross-site scripting in imagefield info project:imagefield info
- CVE-2015-4384 Cross-site scripting in ubercart webform checkout pane project:ubercart webform checkout pane
- CVE-2015-4383 Cross-site request forgery in decisions project:decisions
- CVE-2015-4382 Cross-site request forgery in invoice project:invoice
- CVE-2015-4381 Cross-site scripting in invoice project:invoice
- CVE-2015-4380 Cross-site scripting in linear case project:linear case
- CVE-2015-4379 Cross-site request forgery in webform multiple file upload project:webform multiple file upload
- CVE-2015-4378 Cross-site scripting in crumbs project:crumbs
- CVE-2015-4377 Cross-site scripting in petition project:petition
- CVE-2015-4376 Cross-site scripting in profile2 privacy project:profile2 privacy
- CVE-2015-4375 Information disclosure in chaos tool suite project:ctools
- CVE-2015-4374 Cross-site scripting in webform project:webform
- CVE-2015-4373 Cross-site scripting in og tabs project:og tabs
- CVE-2015-4372 Cross-site scripting in image title project:image title
- CVE-2015-4371 Open redirect in perfecto project:perfecto
- CVE-2015-4370 Cross-site scripting in site documentation project:site documentation
- CVE-2015-4369 Cross-site scripting in trick question project:trick question
- CVE-2015-4368 Business logic in commerce ogone project:commerce ogone
- CVE-2015-4367 Cross-site scripting in simple subscription project:simple subscription
- CVE-2015-4366 Cross-site scripting in mover project:mover
- CVE-2015-4365 Cross-site scripting in taxonomy accordion project:taxonomy accordion
- CVE-2015-4364 Cross-site request forgery in campaign monitor project:campaign monitor
- CVE-2015-4363 Open redirect in finder project:finder
- CVE-2015-4362 Cross-site request forgery in tracking code project:tracking code
- CVE-2015-4361 Cross-site request forgery in registration codes project:registration codes
- CVE-2015-4360 Cross-site request forgery in registration codes project:registration codes
- CVE-2015-4359 Cross-site scripting in registration codes project:registration codes
- CVE-2015-4358 Cross-site scripting in ubercart discount coupons project:ubercart discount coupons
- CVE-2015-4357 Cross-site scripting in webform project:webform
- CVE-2015-4356 Cross-site scripting in webform project:webform
- CVE-2015-4355 Cross-site request forgery in watchdog aggregator project:watchdog aggregator
- CVE-2015-4354 Cross-site scripting in ubercart webform integration project:ubercart webform integration
- CVE-2015-4353 Cross-site request forgery in osscube:custom sitemap
- CVE-2015-4352 Cross-site request forgery in web-dorado:web-dorado spider video player
- CVE-2015-4351 Path traversal in web-dorado:web-dorado spider video player
- CVE-2015-4350 Cross-site request forgery in web-dorado:spider catalog
- CVE-2015-4349 Cross-site request forgery in spider contacts project:spider contacts
- CVE-2015-4348 SQL injection in spider contacts project:spider contacts
- CVE-2015-4347 Cross-site scripting in inlinks project:inlinks
- CVE-2015-4346 Cross-site scripting in sms framework project:sms framework
- CVE-2015-4345 Information disclosure in restful web services project:restful web services
- CVE-2015-4344 Security feature bypass in services basic authentication project:services basic authentication
- CVE-2015-4342 SQL injection in cacti:cacti
- CVE-2015-4338 Code injection in xcloner:xcloner
- CVE-2015-4337 Cross-site scripting in xcloner:xcloner
- CVE-2015-4336 Command injection in xcloner:xcloner
- CVE-2015-4335 Code injection in debian:debian linux
- CVE-2015-4334 Information disclosure in symantec:proxysg firmware