# Vulnerabilities published in 2015


- [CVE-2015-4216](https://insights.sbomify.com/CVE-2015-4216/): Hardcoded credentials in cisco:content security management virtual appliance (medium 5.0)
- [CVE-2015-4215](https://insights.sbomify.com/CVE-2015-4215/): Denial of service in cisco:wireless lan controller software (medium 6.1)
- [CVE-2015-4214](https://insights.sbomify.com/CVE-2015-4214/): Information disclosure in cisco:unified meetingplace (medium 4.0)
- [CVE-2015-4213](https://insights.sbomify.com/CVE-2015-4213/): Weak cryptography in cisco:nx-os (medium 4.0)
- [CVE-2015-4212](https://insights.sbomify.com/CVE-2015-4212/): Information disclosure in cisco:webex meeting center (medium 5.0)
- [CVE-2015-4211](https://insights.sbomify.com/CVE-2015-4211/): Privilege escalation in cisco:anyconnect secure mobility client (high 7.2)
- [CVE-2015-4210](https://insights.sbomify.com/CVE-2015-4210/): Cross-site scripting in cisco:webex meeting center (medium 4.3)
- [CVE-2015-4209](https://insights.sbomify.com/CVE-2015-4209/): Missing authorization in cisco:webex meeting center (medium 6.4)
- [CVE-2015-4208](https://insights.sbomify.com/CVE-2015-4208/): SQL injection in cisco:webex meeting center (high 7.5)
- [CVE-2015-4207](https://insights.sbomify.com/CVE-2015-4207/): Information disclosure in cisco:webex meeting center (medium 5.0)
- [CVE-2015-4206](https://insights.sbomify.com/CVE-2015-4206/): Cross-site scripting in cisco:unified communications manager (medium 4.3)
- [CVE-2015-4205](https://insights.sbomify.com/CVE-2015-4205/): Denial of service in cisco:ios xr (medium 5.7)
- [CVE-2015-4204](https://insights.sbomify.com/CVE-2015-4204/): Denial of service in cisco:cisco ios (medium 6.8)
- [CVE-2015-4203](https://insights.sbomify.com/CVE-2015-4203/): Race condition in cisco:ios (medium 5.4)
- [CVE-2015-4202](https://insights.sbomify.com/CVE-2015-4202/): Information disclosure in cisco:ios (medium 5.0)
- [CVE-2015-4201](https://insights.sbomify.com/CVE-2015-4201/): Denial of service in cisco:asr 5000 series software (medium 5.0)
- [CVE-2015-4200](https://insights.sbomify.com/CVE-2015-4200/): Denial of service in cisco:ios (high 7.8)
- [CVE-2015-4199](https://insights.sbomify.com/CVE-2015-4199/): Race condition in cisco:ios (high 7.1)
- [CVE-2015-4198](https://insights.sbomify.com/CVE-2015-4198/): Cross-site scripting in cisco:web security appliance (medium 4.3)
- [CVE-2015-4197](https://insights.sbomify.com/CVE-2015-4197/): Denial of service in cisco:nx-os (medium 6.1)
- [CVE-2015-4196](https://insights.sbomify.com/CVE-2015-4196/): Hardcoded credentials in cisco:unified communications domain manager (medium 5.0)
- [CVE-2015-4195](https://insights.sbomify.com/CVE-2015-4195/): Denial of service in cisco:ios xr (medium 4.0)
- [CVE-2015-4194](https://insights.sbomify.com/CVE-2015-4194/): Information disclosure in cisco:webex meeting center (medium 5.0)
- [CVE-2015-4191](https://insights.sbomify.com/CVE-2015-4191/): Denial of service in cisco:ios xr (medium 5.0)
- [CVE-2015-4190](https://insights.sbomify.com/CVE-2015-4190/): Other in cisco:prime service catalog (medium 4.3)
- [CVE-2015-4189](https://insights.sbomify.com/CVE-2015-4189/): Cross-site request forgery in cisco:data center analytics framework (medium 6.8)
- [CVE-2015-4188](https://insights.sbomify.com/CVE-2015-4188/): SQL injection in cisco:prime collaboration (medium 5.0)
- [CVE-2015-4186](https://insights.sbomify.com/CVE-2015-4186/): Command injection in cisco:virtualization experience client 6000 series firmware (high 7.2)
- [CVE-2015-4185](https://insights.sbomify.com/CVE-2015-4185/): Privilege escalation in cisco:ios (medium 6.9)
- [CVE-2015-4184](https://insights.sbomify.com/CVE-2015-4184/): Security feature bypass in cisco:email security appliance (medium 5.0)
- [CVE-2015-4183](https://insights.sbomify.com/CVE-2015-4183/): Command injection in cisco:unified computing system (high 7.2)
- [CVE-2015-4182](https://insights.sbomify.com/CVE-2015-4182/): Missing authorization in cisco:identity services engine software (medium 5.5)
- [CVE-2015-4181](https://insights.sbomify.com/CVE-2015-4181/): Path traversal in phpmybackuppro:phpmybackuppro (high 7.5)
- [CVE-2015-4180](https://insights.sbomify.com/CVE-2015-4180/): Path traversal in phpmybackuppro:phpmybackuppro (high 7.5)
- [CVE-2015-4179](https://insights.sbomify.com/CVE-2015-4179/): Cross-site request forgery in codestyling localization project:codestyling localization (high 8.8)
- [CVE-2015-4178](https://insights.sbomify.com/CVE-2015-4178/): Denial of service in linux:linux kernel (medium 5.5)
- [CVE-2015-4177](https://insights.sbomify.com/CVE-2015-4177/): Use after free in linux:linux kernel (medium 5.5)
- [CVE-2015-4176](https://insights.sbomify.com/CVE-2015-4176/): Information disclosure in linux:linux kernel (medium 5.5)
- [CVE-2015-4174](https://insights.sbomify.com/CVE-2015-4174/): Cross-site scripting in siemens:climatix bacnet\/ip (medium 4.3)
- [CVE-2015-4173](https://insights.sbomify.com/CVE-2015-4173/): Privilege escalation in sonicwall:netextender (medium 6.9)
- [CVE-2015-4171](https://insights.sbomify.com/CVE-2015-4171/): Information disclosure in canonical:ubuntu linux (low 2.6)
- [CVE-2015-4170](https://insights.sbomify.com/CVE-2015-4170/): Race condition in linux:linux kernel (medium 4.7)
- [CVE-2015-4167](https://insights.sbomify.com/CVE-2015-4167/): Integer overflow in canonical:ubuntu linux (medium 4.7)
- [CVE-2015-4166](https://insights.sbomify.com/CVE-2015-4166/): Weak cryptography in cloudera:key trustee server (critical 9.8)
- [CVE-2015-4165](https://insights.sbomify.com/CVE-2015-4165/): Improper Access Control in Elasticsearch (high 7.5)
- [CVE-2015-4164](https://insights.sbomify.com/CVE-2015-4164/): Denial of service in xen:xen (medium 4.9)
- [CVE-2015-4163](https://insights.sbomify.com/CVE-2015-4163/): Null dereference in xen:xen (medium 4.9)
- [CVE-2015-4162](https://insights.sbomify.com/CVE-2015-4162/): XML external entity in paloaltonetworks:pan-os (medium 4.0)
- [CVE-2015-4161](https://insights.sbomify.com/CVE-2015-4161/): Missing authorization in sap:afaria (high 7.5)
- [CVE-2015-4160](https://insights.sbomify.com/CVE-2015-4160/): SQL injection in sap:ase database platform (high 7.5)
- [CVE-2015-4159](https://insights.sbomify.com/CVE-2015-4159/): SQL injection in sap:hana web-based development workbench (high 7.5)
- [CVE-2015-4158](https://insights.sbomify.com/CVE-2015-4158/): Denial of service in sap:netweaver abap application server (medium 5.0)
- [CVE-2015-4157](https://insights.sbomify.com/CVE-2015-4157/): Denial of service in sap:content server (medium 5.0)
- [CVE-2015-4156](https://insights.sbomify.com/CVE-2015-4156/): Race condition in gnu:parallel (low 3.6)
- [CVE-2015-4155](https://insights.sbomify.com/CVE-2015-4155/): Race condition in gnu:parallel (low 3.6)
- [CVE-2015-4153](https://insights.sbomify.com/CVE-2015-4153/): Path traversal in zanematthew:zm ajax login \& register (medium 5.0)
- [CVE-2015-4152](https://insights.sbomify.com/CVE-2015-4152/): Path traversal in elastic:logstash (medium 6.4)
- [CVE-2015-4148](https://insights.sbomify.com/CVE-2015-4148/): Information disclosure in apple:mac os x (medium 5.0)
- [CVE-2015-4147](https://insights.sbomify.com/CVE-2015-4147/): Deserialization in apple:mac os x (high 7.5)
- [CVE-2015-4146](https://insights.sbomify.com/CVE-2015-4146/): Denial of service in opensuse:opensuse (medium 5.0)
- [CVE-2015-4145](https://insights.sbomify.com/CVE-2015-4145/): Denial of service in opensuse:opensuse (medium 5.0)
- [CVE-2015-4144](https://insights.sbomify.com/CVE-2015-4144/): Memory corruption in opensuse:opensuse (medium 5.0)
- [CVE-2015-4143](https://insights.sbomify.com/CVE-2015-4143/): Memory corruption in opensuse:opensuse (medium 5.0)
- [CVE-2015-4142](https://insights.sbomify.com/CVE-2015-4142/): Integer overflow in opensuse:opensuse (medium 4.3)
- [CVE-2015-4141](https://insights.sbomify.com/CVE-2015-4141/): Memory corruption in opensuse:opensuse (medium 4.3)
- [CVE-2015-4140](https://insights.sbomify.com/CVE-2015-4140/): Cross-site request forgery in wp smiley project:wp smiley (medium 6.8)
- [CVE-2015-4139](https://insights.sbomify.com/CVE-2015-4139/): Cross-site scripting in wp smiley project:wp smiley (low 3.5)
- [CVE-2015-4138](https://insights.sbomify.com/CVE-2015-4138/): Information disclosure in blue coat:ssl visibility appliance sv1800 firmware (medium 4.3)
- [CVE-2015-4137](https://insights.sbomify.com/CVE-2015-4137/): SQL injection in milw0rm project:milw0rm clone script (high 7.5)
- [CVE-2015-4135](https://insights.sbomify.com/CVE-2015-4135/): Cross-site scripting in phpwind:phpwind (medium 4.3)
- [CVE-2015-4134](https://insights.sbomify.com/CVE-2015-4134/): Open redirect in phpwind:phpwind (medium 5.8)
- [CVE-2015-4133](https://insights.sbomify.com/CVE-2015-4133/): File upload in reflex gallery project:reflex gallery (high 7.5)
- [CVE-2015-4132](https://insights.sbomify.com/CVE-2015-4132/): Cross-site scripting in arubanetworks:clearpass policy manager (low 3.5)
- [CVE-2015-4129](https://insights.sbomify.com/CVE-2015-4129/): SQL injection in intelliants:subrion cms (medium 6.5)
- [CVE-2015-4127](https://insights.sbomify.com/CVE-2015-4127/): Cross-site scripting in church admin project:church admin (medium 4.3)
- [CVE-2015-4119](https://insights.sbomify.com/CVE-2015-4119/): Cross-site request forgery in ispconfig:ispconfig (medium 6.8)
- [CVE-2015-4118](https://insights.sbomify.com/CVE-2015-4118/): SQL injection in ispconfig:ispconfig (medium 6.5)
- [CVE-2015-4117](https://insights.sbomify.com/CVE-2015-4117/): Command injection in vestacp:control panel (high 8.8)
- [CVE-2015-4116](https://insights.sbomify.com/CVE-2015-4116/): Use after free in opensuse:leap (critical 9.8)
- [CVE-2015-4112](https://insights.sbomify.com/CVE-2015-4112/): Other in blackberry:enterprise server (medium 4.3)
- [CVE-2015-4111](https://insights.sbomify.com/CVE-2015-4111/): Memory corruption in blackberry:blackberry link (medium 6.8)
- [CVE-2015-4109](https://insights.sbomify.com/CVE-2015-4109/): SQL injection in usersultra:usersultra (high 7.5)
- [CVE-2015-4108](https://insights.sbomify.com/CVE-2015-4108/): Cross-site request forgery in wftpserver:wing ftp server (medium 6.8)
- [CVE-2015-4106](https://insights.sbomify.com/CVE-2015-4106/): Missing authorization in canonical:ubuntu linux (medium 4.6)
- [CVE-2015-4105](https://insights.sbomify.com/CVE-2015-4105/): Denial of service in xen:xen (medium 4.9)
- [CVE-2015-4104](https://insights.sbomify.com/CVE-2015-4104/): Denial of service in xen:xen (high 7.8)
- [CVE-2015-4103](https://insights.sbomify.com/CVE-2015-4103/): Denial of service in xen:xen (medium 4.9)
- [CVE-2015-4100](https://insights.sbomify.com/CVE-2015-4100/): Privilege escalation in puppet:puppet enterprise (medium 6.8)
- [CVE-2015-4094](https://insights.sbomify.com/CVE-2015-4094/): Weak cryptography in thycotic:secret server (medium 5.8)
- [CVE-2015-4093](https://insights.sbomify.com/CVE-2015-4093/): Cross-site scripting in elastic:kibana (medium 4.3)
- [CVE-2015-4092](https://insights.sbomify.com/CVE-2015-4092/): Memory corruption in sap:afaria (high 7.5)
- [CVE-2015-4091](https://insights.sbomify.com/CVE-2015-4091/): XML external entity in sap:sap netweaver application server java (high 7.5)
- [CVE-2015-4089](https://insights.sbomify.com/CVE-2015-4089/): Cross-site request forgery in wpfastestcache:wp fastest cache (high 8.8)
- [CVE-2015-4085](https://insights.sbomify.com/CVE-2015-4085/): Path traversal in etherpad:etherpad (high 7.5)
- [CVE-2015-4084](https://insights.sbomify.com/CVE-2015-4084/): Cross-site scripting in free-counter:free counter (medium 4.3)
- [CVE-2015-4082](https://insights.sbomify.com/CVE-2015-4082/): attic has improper verification of unencrypted backups (medium 6.5)
- [CVE-2015-4080](https://insights.sbomify.com/CVE-2015-4080/): Hardcoded credentials in kankun:smartsocket (medium 6.8)
- [CVE-2015-4078](https://insights.sbomify.com/CVE-2015-4078/): Weak cryptography in cloudera:cloudera manager (low 3.1)
- [CVE-2015-4077](https://insights.sbomify.com/CVE-2015-4077/): Information disclosure in fortinet:forticlient (low 2.1)
- [CVE-2015-4075](https://insights.sbomify.com/CVE-2015-4075/): Code injection in helpdeskpro:helpdesk pro (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/45/