# Vulnerabilities published in 2015


- [CVE-2015-4455](https://insights.sbomify.com/CVE-2015-4455/): File upload in aviary image editor add-on for gravity forms project:aviary image editor add-on for gravity forms (critical 9.8)
- [CVE-2015-4454](https://insights.sbomify.com/CVE-2015-4454/): SQL injection in cacti:cacti (high 7.5)
- [CVE-2015-4453](https://insights.sbomify.com/CVE-2015-4453/): Auth bypass in open-emr:openemr (medium 5.0)
- [CVE-2015-4452](https://insights.sbomify.com/CVE-2015-4452/): Security feature bypass in adobe:acrobat (critical 9.3)
- [CVE-2015-4451](https://insights.sbomify.com/CVE-2015-4451/): Security feature bypass in adobe:acrobat (critical 9.3)
- [CVE-2015-4450](https://insights.sbomify.com/CVE-2015-4450/): Security feature bypass in adobe:acrobat (medium 5.0)
- [CVE-2015-4449](https://insights.sbomify.com/CVE-2015-4449/): Security feature bypass in adobe:acrobat (medium 5.0)
- [CVE-2015-4448](https://insights.sbomify.com/CVE-2015-4448/): Use after free in adobe:acrobat (critical 10.0)
- [CVE-2015-4447](https://insights.sbomify.com/CVE-2015-4447/): Security feature bypass in adobe:acrobat (critical 10.0)
- [CVE-2015-4446](https://insights.sbomify.com/CVE-2015-4446/): Privilege escalation in adobe:acrobat (high 7.5)
- [CVE-2015-4445](https://insights.sbomify.com/CVE-2015-4445/): Security feature bypass in adobe:acrobat (critical 10.0)
- [CVE-2015-4444](https://insights.sbomify.com/CVE-2015-4444/): Null dereference in adobe:acrobat (medium 5.0)
- [CVE-2015-4443](https://insights.sbomify.com/CVE-2015-4443/): Null dereference in adobe:acrobat (medium 5.0)
- [CVE-2015-4441](https://insights.sbomify.com/CVE-2015-4441/): Security feature bypass in adobe:acrobat (medium 6.8)
- [CVE-2015-4438](https://insights.sbomify.com/CVE-2015-4438/): Security feature bypass in adobe:acrobat (critical 10.0)
- [CVE-2015-4435](https://insights.sbomify.com/CVE-2015-4435/): Security feature bypass in adobe:acrobat (critical 10.0)
- [CVE-2015-4433](https://insights.sbomify.com/CVE-2015-4433/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-4432](https://insights.sbomify.com/CVE-2015-4432/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-4431](https://insights.sbomify.com/CVE-2015-4431/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-4430](https://insights.sbomify.com/CVE-2015-4430/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-4429](https://insights.sbomify.com/CVE-2015-4429/): Null dereference in adobe:air (critical 10.0)
- [CVE-2015-4428](https://insights.sbomify.com/CVE-2015-4428/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-4427](https://insights.sbomify.com/CVE-2015-4427/): Cross-site scripting in ektron:ektron content management system (low 3.5)
- [CVE-2015-4426](https://insights.sbomify.com/CVE-2015-4426/): SQL injection in pimcore:pimcore (high 7.5)
- [CVE-2015-4425](https://insights.sbomify.com/CVE-2015-4425/): Path traversal in pimcore:pimcore (medium 4.9)
- [CVE-2015-4422](https://insights.sbomify.com/CVE-2015-4422/): Memory corruption in huawei:mate 7 firmware (high 7.0)
- [CVE-2015-4421](https://insights.sbomify.com/CVE-2015-4421/): Memory corruption in huawei:mate 7 firmware (high 7.5)
- [CVE-2015-4420](https://insights.sbomify.com/CVE-2015-4420/): Cross-site scripting in opsview:opsview (medium 4.3)
- [CVE-2015-4418](https://insights.sbomify.com/CVE-2015-4418/): Information disclosure in zohocorp:manageengine netflow analyzer (medium 5.0)
- [CVE-2015-4415](https://insights.sbomify.com/CVE-2015-4415/): Path traversal in magnifica webscripts:anima gallery (medium 5.0)
- [CVE-2015-4414](https://insights.sbomify.com/CVE-2015-4414/): Path traversal in se html5 album audio player project:se html5 album audio player (medium 5.0)
- [CVE-2015-4413](https://insights.sbomify.com/CVE-2015-4413/): Cross-site scripting in nextendweb:facebook connect (medium 4.3)
- [CVE-2015-4412](https://insights.sbomify.com/CVE-2015-4412/): bson is vulnerable to denial of service due to incorrect regex validation (critical 9.8)
- [CVE-2015-4411](https://insights.sbomify.com/CVE-2015-4411/): BSON rubygem contains potential denial of service (high 7.5)
- [CVE-2015-4410](https://insights.sbomify.com/CVE-2015-4410/): Moped Rubygem Data Injection Vulnerability (high 7.5)
- [CVE-2015-4409](https://insights.sbomify.com/CVE-2015-4409/): Memory corruption in hikvision:ds-76xxx series firmware (medium 6.5)
- [CVE-2015-4408](https://insights.sbomify.com/CVE-2015-4408/): Memory corruption in hikvision:ds-76xxx series firmware (medium 6.5)
- [CVE-2015-4407](https://insights.sbomify.com/CVE-2015-4407/): Memory corruption in hikvision:ds-76xxx series firmware (medium 6.5)
- [CVE-2015-4400](https://insights.sbomify.com/CVE-2015-4400/): Information disclosure in ring:ring firmware (medium 4.6)
- [CVE-2015-4398](https://insights.sbomify.com/CVE-2015-4398/): Open redirect in chaos tool suite project:ctools (medium 5.8)
- [CVE-2015-4397](https://insights.sbomify.com/CVE-2015-4397/): Cross-site request forgery in node template project:node template (medium 6.8)
- [CVE-2015-4396](https://insights.sbomify.com/CVE-2015-4396/): Cross-site request forgery in keyword research project:keyword research (medium 5.1)
- [CVE-2015-4395](https://insights.sbomify.com/CVE-2015-4395/): Information disclosure in hybridauth social login project:hybridauth social login (low 3.5)
- [CVE-2015-4394](https://insights.sbomify.com/CVE-2015-4394/): Missing authorization in services project:services (medium 5.0)
- [CVE-2015-4393](https://insights.sbomify.com/CVE-2015-4393/): File upload in services project:services (medium 6.0)
- [CVE-2015-4392](https://insights.sbomify.com/CVE-2015-4392/): Cross-site scripting in display suite project:display suite (low 3.5)
- [CVE-2015-4391](https://insights.sbomify.com/CVE-2015-4391/): Cross-site request forgery in civicrm:civicrm private report (medium 6.8)
- [CVE-2015-4390](https://insights.sbomify.com/CVE-2015-4390/): Cross-site request forgery in user import project:user import (medium 6.8)
- [CVE-2015-4389](https://insights.sbomify.com/CVE-2015-4389/): Missing authorization in open graph importer project:open graph importer (medium 4.0)
- [CVE-2015-4388](https://insights.sbomify.com/CVE-2015-4388/): Cross-site scripting in current search links project:current search links (low 2.6)
- [CVE-2015-4387](https://insights.sbomify.com/CVE-2015-4387/): Cross-site scripting in password policy project:password policy (low 2.6)
- [CVE-2015-4386](https://insights.sbomify.com/CVE-2015-4386/): Cross-site scripting in entitybulkdelete project:entitybulkdelete (medium 4.3)
- [CVE-2015-4385](https://insights.sbomify.com/CVE-2015-4385/): Cross-site scripting in imagefield info project:imagefield info (low 2.1)
- [CVE-2015-4384](https://insights.sbomify.com/CVE-2015-4384/): Cross-site scripting in ubercart webform checkout pane project:ubercart webform checkout pane (low 3.5)
- [CVE-2015-4383](https://insights.sbomify.com/CVE-2015-4383/): Cross-site request forgery in decisions project:decisions (medium 6.8)
- [CVE-2015-4382](https://insights.sbomify.com/CVE-2015-4382/): Cross-site request forgery in invoice project:invoice (medium 6.8)
- [CVE-2015-4381](https://insights.sbomify.com/CVE-2015-4381/): Cross-site scripting in invoice project:invoice (low 3.5)
- [CVE-2015-4380](https://insights.sbomify.com/CVE-2015-4380/): Cross-site scripting in linear case project:linear case (low 3.5)
- [CVE-2015-4379](https://insights.sbomify.com/CVE-2015-4379/): Cross-site request forgery in webform multiple file upload project:webform multiple file upload (medium 6.8)
- [CVE-2015-4378](https://insights.sbomify.com/CVE-2015-4378/): Cross-site scripting in crumbs project:crumbs (low 2.1)
- [CVE-2015-4377](https://insights.sbomify.com/CVE-2015-4377/): Cross-site scripting in petition project:petition (low 2.1)
- [CVE-2015-4376](https://insights.sbomify.com/CVE-2015-4376/): Cross-site scripting in profile2 privacy project:profile2 privacy (low 3.5)
- [CVE-2015-4375](https://insights.sbomify.com/CVE-2015-4375/): Information disclosure in chaos tool suite project:ctools (medium 4.3)
- [CVE-2015-4374](https://insights.sbomify.com/CVE-2015-4374/): Cross-site scripting in webform project:webform (low 3.5)
- [CVE-2015-4373](https://insights.sbomify.com/CVE-2015-4373/): Cross-site scripting in og tabs project:og tabs (low 3.5)
- [CVE-2015-4372](https://insights.sbomify.com/CVE-2015-4372/): Cross-site scripting in image title project:image title (low 3.5)
- [CVE-2015-4371](https://insights.sbomify.com/CVE-2015-4371/): Open redirect in perfecto project:perfecto (medium 5.8)
- [CVE-2015-4370](https://insights.sbomify.com/CVE-2015-4370/): Cross-site scripting in site documentation project:site documentation (low 3.5)
- [CVE-2015-4369](https://insights.sbomify.com/CVE-2015-4369/): Cross-site scripting in trick question project:trick question (low 3.5)
- [CVE-2015-4368](https://insights.sbomify.com/CVE-2015-4368/): Business logic in commerce ogone project:commerce ogone (medium 5.0)
- [CVE-2015-4367](https://insights.sbomify.com/CVE-2015-4367/): Cross-site scripting in simple subscription project:simple subscription (low 3.5)
- [CVE-2015-4366](https://insights.sbomify.com/CVE-2015-4366/): Cross-site scripting in mover project:mover (low 3.5)
- [CVE-2015-4365](https://insights.sbomify.com/CVE-2015-4365/): Cross-site scripting in taxonomy accordion project:taxonomy accordion (low 3.5)
- [CVE-2015-4364](https://insights.sbomify.com/CVE-2015-4364/): Cross-site request forgery in campaign monitor project:campaign monitor (medium 6.8)
- [CVE-2015-4363](https://insights.sbomify.com/CVE-2015-4363/): Open redirect in finder project:finder (medium 5.8)
- [CVE-2015-4362](https://insights.sbomify.com/CVE-2015-4362/): Cross-site request forgery in tracking code project:tracking code (medium 6.8)
- [CVE-2015-4361](https://insights.sbomify.com/CVE-2015-4361/): Cross-site request forgery in registration codes project:registration codes (medium 6.8)
- [CVE-2015-4360](https://insights.sbomify.com/CVE-2015-4360/): Cross-site request forgery in registration codes project:registration codes (medium 6.8)
- [CVE-2015-4359](https://insights.sbomify.com/CVE-2015-4359/): Cross-site scripting in registration codes project:registration codes (low 3.5)
- [CVE-2015-4358](https://insights.sbomify.com/CVE-2015-4358/): Cross-site scripting in ubercart discount coupons project:ubercart discount coupons (low 3.5)
- [CVE-2015-4357](https://insights.sbomify.com/CVE-2015-4357/): Cross-site scripting in webform project:webform (low 3.5)
- [CVE-2015-4356](https://insights.sbomify.com/CVE-2015-4356/): Cross-site scripting in webform project:webform (low 3.5)
- [CVE-2015-4355](https://insights.sbomify.com/CVE-2015-4355/): Cross-site request forgery in watchdog aggregator project:watchdog aggregator (medium 6.8)
- [CVE-2015-4354](https://insights.sbomify.com/CVE-2015-4354/): Cross-site scripting in ubercart webform integration project:ubercart webform integration (low 3.5)
- [CVE-2015-4353](https://insights.sbomify.com/CVE-2015-4353/): Cross-site request forgery in osscube:custom sitemap (medium 5.8)
- [CVE-2015-4352](https://insights.sbomify.com/CVE-2015-4352/): Cross-site request forgery in web-dorado:web-dorado spider video player (medium 5.8)
- [CVE-2015-4351](https://insights.sbomify.com/CVE-2015-4351/): Path traversal in web-dorado:web-dorado spider video player (medium 4.9)
- [CVE-2015-4350](https://insights.sbomify.com/CVE-2015-4350/): Cross-site request forgery in web-dorado:spider catalog (medium 6.8)
- [CVE-2015-4349](https://insights.sbomify.com/CVE-2015-4349/): Cross-site request forgery in spider contacts project:spider contacts (medium 5.8)
- [CVE-2015-4348](https://insights.sbomify.com/CVE-2015-4348/): SQL injection in spider contacts project:spider contacts (medium 6.0)
- [CVE-2015-4347](https://insights.sbomify.com/CVE-2015-4347/): Cross-site scripting in inlinks project:inlinks (medium 4.3)
- [CVE-2015-4346](https://insights.sbomify.com/CVE-2015-4346/): Cross-site scripting in sms framework project:sms framework (low 2.6)
- [CVE-2015-4345](https://insights.sbomify.com/CVE-2015-4345/): Information disclosure in restful web services project:restful web services (medium 5.0)
- [CVE-2015-4344](https://insights.sbomify.com/CVE-2015-4344/): Security feature bypass in services basic authentication project:services basic authentication (medium 5.0)
- [CVE-2015-4342](https://insights.sbomify.com/CVE-2015-4342/): SQL injection in cacti:cacti (high 7.5)
- [CVE-2015-4338](https://insights.sbomify.com/CVE-2015-4338/): Code injection in xcloner:xcloner (medium 6.5)
- [CVE-2015-4337](https://insights.sbomify.com/CVE-2015-4337/): Cross-site scripting in xcloner:xcloner (low 3.5)
- [CVE-2015-4336](https://insights.sbomify.com/CVE-2015-4336/): Command injection in xcloner:xcloner (medium 6.5)
- [CVE-2015-4335](https://insights.sbomify.com/CVE-2015-4335/): Code injection in debian:debian linux (critical 10.0)
- [CVE-2015-4334](https://insights.sbomify.com/CVE-2015-4334/): Information disclosure in symantec:proxysg firmware (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/43/