Vulnerabilities published in 2015
8,124 vulnerabilities were published in 2015: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 46 of 82.
- CVE-2015-4074 Path traversal in helpdesk pro project:helpdesk pro
- CVE-2015-4073 SQL injection in helpdesk pro project:helpdesk pro
- CVE-2015-4072 Cross-site scripting in helpdesk pro project:helpdesk pro
- CVE-2015-4071 Missing authorization in helpdesk pro project:helpdesk pro
- CVE-2015-4070 Open redirect in wow new media:wow moodboard lite
- CVE-2015-4069 Information disclosure in arcserve:arcserve unified data protection
- CVE-2015-4068 Arcserve Unified Data Protection (UDP) Directory Traversal
- CVE-2015-4067 Integer overflow in dell:netvault backup
- CVE-2015-4066 SQL injection in tri:gigpress
- CVE-2015-4065 Cross-site scripting in landing pages project:landing pages
- CVE-2015-4064 SQL injection in landing pages project:landing pages
- CVE-2015-4063 Cross-site scripting in newstatpress project:newstatpress
- CVE-2015-4062 SQL injection in newstatpress project:newstatpress
- CVE-2015-4060 Memory corruption in wavelink:connectpro
- CVE-2015-4059 Memory corruption in wavelink:terminal emulation
- CVE-2015-4057 Information disclosure in dell:vce vision intelligent operations
- CVE-2015-4056 Weak cryptography in dell:vce vision intelligent operations
- CVE-2015-4054 Null dereference in pgbouncer:pgbouncer
- CVE-2015-4053 ceph-deploy uses world-readable permissions on client.admin key
- CVE-2015-4051 Missing authorization in beckhoff:ipc diagnostics
- CVE-2015-4050 Symfony Incorrect Access Control
- CVE-2015-4049 Memory corruption in unisys:mcp-firmware
- CVE-2015-4047 Null dereference in canonical:ubuntu linux
- CVE-2015-4046 Command injection in alienvault:open source security information management
- CVE-2015-4045 Privilege escalation in alienvault:open source security information management
- CVE-2015-4043 SQL injection in connx:esp hr management
- CVE-2015-4042 Integer overflow in gnu:coreutils
- CVE-2015-4041 Memory corruption in gnu:coreutils
- CVE-2015-4040 Path traversal in f5:big-ip access policy manager
- CVE-2015-4039 Cross-site scripting in e-plugins:wp membership
- CVE-2015-4038 Privilege escalation in wpmembership:wpmembership
- CVE-2015-4037 Race condition in qemu:qemu
- CVE-2015-4036 Memory corruption in linux:linux kernel
- CVE-2015-4035 Command injection in tukaani:xz
- CVE-2015-4034 Deserialization in samsung:galaxy s5
- CVE-2015-4033 Information disclosure in samsung:s-beam
- CVE-2015-4032 File upload in visual mining:netcharts server
- CVE-2015-4031 Path traversal in visualmining:netcharts server
- CVE-2015-4029 Cross-site scripting in netgate:pfsense
- CVE-2015-4027 Command injection in acunetix:web vulnerability scanner
- CVE-2015-4026 Security feature bypass in apple:mac os x
- CVE-2015-4025 Security feature bypass in apple:mac os x
- CVE-2015-4024 Denial of service in apple:mac os x
- CVE-2015-4022 Integer overflow in apple:mac os x
- CVE-2015-4021 Integer overflow in apple:mac os x
- CVE-2015-4020 RubyGems Improper Input Validation vulnerability
- CVE-2015-4018 SQL injection in feedwordpress project:feedwordpress
- CVE-2015-4017 Salt vulnerable to Improper Certificate Validation
- CVE-2015-4016 Denial of service in valvesoftware:steam client
- CVE-2015-4010 Cross-site request forgery in everybit:encrypted contact form
- CVE-2015-4004 Memory corruption in canonical:ubuntu linux
- CVE-2015-4003 Denial of service in linux:linux kernel
- CVE-2015-4002 Memory corruption in canonical:ubuntu linux
- CVE-2015-4001 Integer overflow in linux:linux kernel
- CVE-2015-4000 Weak cryptography in apple:iphone os
- CVE-2015-3999 Information disclosure in piriform:ccleaner
- CVE-2015-3998 Cross-site scripting in clickfraud-monitoring:adsense-click-fraud-monitoring
- CVE-2015-3996 Security feature bypass in afnetworking project:afnetworking
- CVE-2015-3995 Path traversal in sap:hana
- CVE-2015-3994 Other in sap:hana
- CVE-2015-3993 Missing authorization in actian:matrix
- CVE-2015-3991 Integer overflow in strongswan:strongswan
- CVE-2015-3990 Command injection in sonicwall:analyzer
- CVE-2015-3989 concrete5 vulnerable to Cross-site Scripting
- CVE-2015-3988 Cross-site scripting in openstack:horizon
- CVE-2015-3987 Privilege escalation in mcafee:epo deep command
- CVE-2015-3986 Cross-site request forgery in thecartpress:thecartpress ecommerce shopping cart
- CVE-2015-3983 Misconfiguration in fedora:pacemaker configuration system
- CVE-2015-3982 Django allows user sessions hijacking via an empty string in the session key
- CVE-2015-3981 Information disclosure in sap:netweaver rfc sdk
- CVE-2015-3980 SQL injection in sap:customer relationship management
- CVE-2015-3979 Other in sap:customer relationship management
- CVE-2015-3978 Information disclosure in sap:sybase unwired platform online data proxy
- CVE-2015-3977 Memory corruption in schneider-electric:imt25 magnetic flow dtm
- CVE-2015-3976 GE Multilink Cross-site Scripting
- CVE-2015-3974 Hardcoded credentials in easyio:easyio-30p-sf
- CVE-2015-3973 Weak cryptography in janitza:umg 508
- CVE-2015-3972 Weak cryptography in janitza:umg 508
- CVE-2015-3971 Missing authorization in janitza:umg 508
- CVE-2015-3970 Cross-site scripting in janitza:umg 508
- CVE-2015-3969 Information disclosure in janitza:umg 508
- CVE-2015-3968 Hardcoded credentials in janitza:umg 508
- CVE-2015-3967 Cross-site request forgery in janitza:umg 508
- CVE-2015-3966 Denial of service in innominate:mguard firmware
- CVE-2015-3965 Privilege escalation in Symbiq Infusion System
- CVE-2015-3964 Hardcoded credentials in sma solar technology ag:webbox firmware
- CVE-2015-3963 Weak cryptography in windriver:vxworks
- CVE-2015-3962 Weak cryptography in schneider-electric:struxureware building expert multi-purpose management
- CVE-2015-3961 Memory corruption in garrettcom:magnum 10k firmware
- CVE-2015-3960 Hardcoded credentials in garrettcom:magnum 10k firmware
- CVE-2015-3959 Hardcoded credentials in garrettcom:magnum 10k firmware
- CVE-2015-3958 Denial of service in hospira:lifecare pcainfusion firmware
- CVE-2015-3957 Hardcoded credentials in hospira:lifecare pca3
- CVE-2015-3956 Missing authorization in Plum A+ Infusion System
- CVE-2015-3955 Memory corruption in hospira:lifecare pcainfusion firmware
- CVE-2015-3954 Missing authorization in Plum A+ Infusion System
- CVE-2015-3953 Hardcoded credentials in Plum A+ Infusion System
- CVE-2015-3952 Information disclosure in Plum A+ Infusion System
- CVE-2015-3951 Information disclosure in rle:nova-wind turbine hmi firmware
- CVE-2015-3950 Cross-site request forgery in xzeres:442sr os