# Vulnerabilities published in 2015 - [CVE-2015-3440](https://insights.sbomify.com/CVE-2015-3440/): Cross-site scripting in debian:debian linux (medium 4.3) - [CVE-2015-3439](https://insights.sbomify.com/CVE-2015-3439/): Cross-site scripting in debian:debian linux (medium 4.3) - [CVE-2015-3438](https://insights.sbomify.com/CVE-2015-3438/): Cross-site scripting in debian:debian linux (medium 4.3) - [CVE-2015-3436](https://insights.sbomify.com/CVE-2015-3436/): Other in zarafa:zarafa collaboration platform (medium 6.6) - [CVE-2015-3435](https://insights.sbomify.com/CVE-2015-3435/): File upload in samsung:samsung security manager (critical 10.0) - [CVE-2015-3432](https://insights.sbomify.com/CVE-2015-3432/): Cross-site scripting in pydio:pydio (medium 6.1) - [CVE-2015-3431](https://insights.sbomify.com/CVE-2015-3431/): Command injection in pydio:pydio (critical 9.8) - [CVE-2015-3429](https://insights.sbomify.com/CVE-2015-3429/): Cross-site scripting in automattic:genericons (medium 4.3) - [CVE-2015-3427](https://insights.sbomify.com/CVE-2015-3427/): SQL injection in debian:debian linux (high 7.5) - [CVE-2015-3425](https://insights.sbomify.com/CVE-2015-3425/): Cross-site scripting in accentis:content resource management system (medium 6.1) - [CVE-2015-3424](https://insights.sbomify.com/CVE-2015-3424/): SQL injection in accentis:content resource management system (high 8.8) - [CVE-2015-3423](https://insights.sbomify.com/CVE-2015-3423/): SQL injection in netcracker:resource management system (high 8.8) - [CVE-2015-3422](https://insights.sbomify.com/CVE-2015-3422/): Cross-site scripting in searchblox:searchblox (medium 4.3) - [CVE-2015-3421](https://insights.sbomify.com/CVE-2015-3421/): Cross-site scripting in eshop project:eshop (medium 6.1) - [CVE-2015-3420](https://insights.sbomify.com/CVE-2015-3420/): Denial of service in dovecot:dovecot (medium 5.9) - [CVE-2015-3419](https://insights.sbomify.com/CVE-2015-3419/): Missing authorization in vbulletin:vbulletin (medium 6.5) - [CVE-2015-3418](https://insights.sbomify.com/CVE-2015-3418/): Denial of service in x.org:x server (high 7.5) - [CVE-2015-3417](https://insights.sbomify.com/CVE-2015-3417/): Use after free in debian:debian linux (medium 6.8) - [CVE-2015-3416](https://insights.sbomify.com/CVE-2015-3416/): Integer overflow in apple:mac os x (high 7.5) - [CVE-2015-3415](https://insights.sbomify.com/CVE-2015-3415/): Memory corruption in apple:mac os x (high 7.5) - [CVE-2015-3414](https://insights.sbomify.com/CVE-2015-3414/): Memory corruption in apple:mac os x (high 7.5) - [CVE-2015-3412](https://insights.sbomify.com/CVE-2015-3412/): Path traversal in php:php (medium 5.3) - [CVE-2015-3411](https://insights.sbomify.com/CVE-2015-3411/): Path traversal in php:php (medium 6.5) - [CVE-2015-3409](https://insights.sbomify.com/CVE-2015-3409/): Privilege escalation in canonical:ubuntu linux (high 7.2) - [CVE-2015-3408](https://insights.sbomify.com/CVE-2015-3408/): Command injection in canonical:ubuntu linux (critical 10.0) - [CVE-2015-3407](https://insights.sbomify.com/CVE-2015-3407/): Security feature bypass in canonical:ubuntu linux (medium 5.0) - [CVE-2015-3406](https://insights.sbomify.com/CVE-2015-3406/): Security feature bypass in canonical:ubuntu linux (high 7.5) - [CVE-2015-3405](https://insights.sbomify.com/CVE-2015-3405/): Weak cryptography in debian:debian linux (high 7.5) - [CVE-2015-3404](https://insights.sbomify.com/CVE-2015-3404/): Missing authorization in certify project:certify (medium 4.0) - [CVE-2015-3400](https://insights.sbomify.com/CVE-2015-3400/): Misconfiguration in zfsonlinux:zfs (medium 4.3) - [CVE-2015-3397](https://insights.sbomify.com/CVE-2015-3397/): Yii Framework Cross-site Scripting Vulnerability (medium 4.3) - [CVE-2015-3395](https://insights.sbomify.com/CVE-2015-3395/): Memory corruption in canonical:ubuntu linux (medium 6.8) - [CVE-2015-3393](https://insights.sbomify.com/CVE-2015-3393/): Open redirect in fibonacciorange:wedeal (medium 5.8) - [CVE-2015-3392](https://insights.sbomify.com/CVE-2015-3392/): Cross-site scripting in ajax timeline project:ajax timeline (low 3.5) - [CVE-2015-3391](https://insights.sbomify.com/CVE-2015-3391/): Information disclosure in path breadcrumbs project:path breadcrumbs (medium 5.0) - [CVE-2015-3390](https://insights.sbomify.com/CVE-2015-3390/): Cross-site scripting in facebook album fetcher project:facebook album fetcher (low 3.5) - [CVE-2015-3389](https://insights.sbomify.com/CVE-2015-3389/): Cross-site scripting in public download count project:public download count (low 3.5) - [CVE-2015-3388](https://insights.sbomify.com/CVE-2015-3388/): Cross-site request forgery in balanced:commerce balanced payments (medium 5.8) - [CVE-2015-3387](https://insights.sbomify.com/CVE-2015-3387/): Cross-site scripting in taxonomy tools project:taxonomy tools (low 3.5) - [CVE-2015-3386](https://insights.sbomify.com/CVE-2015-3386/): Cross-site scripting in node access product project:node access product (low 3.5) - [CVE-2015-3385](https://insights.sbomify.com/CVE-2015-3385/): Cross-site scripting in taxonomy path project:taxonomy path (low 3.5) - [CVE-2015-3384](https://insights.sbomify.com/CVE-2015-3384/): Cross-site scripting in commerce balanced payments project:commerce balanced payments (low 3.5) - [CVE-2015-3383](https://insights.sbomify.com/CVE-2015-3383/): Open redirect in insite:node basket (medium 5.8) - [CVE-2015-3382](https://insights.sbomify.com/CVE-2015-3382/): Cross-site request forgery in insite:node basket (medium 5.8) - [CVE-2015-3381](https://insights.sbomify.com/CVE-2015-3381/): Cross-site scripting in insite:node basket (low 3.5) - [CVE-2015-3380](https://insights.sbomify.com/CVE-2015-3380/): Cross-site request forgery in funnymonkey:feature set (medium 5.8) - [CVE-2015-3379](https://insights.sbomify.com/CVE-2015-3379/): Missing authorization in views project:views (medium 4.0) - [CVE-2015-3378](https://insights.sbomify.com/CVE-2015-3378/): Open redirect in views project:views (medium 4.9) - [CVE-2015-3376](https://insights.sbomify.com/CVE-2015-3376/): Cross-site scripting in quizzler project:quizzler (low 3.5) - [CVE-2015-3375](https://insights.sbomify.com/CVE-2015-3375/): Cross-site request forgery in niif:shibboleth authentication (medium 5.8) - [CVE-2015-3374](https://insights.sbomify.com/CVE-2015-3374/): Cross-site request forgery in corner project:corner (medium 5.8) - [CVE-2015-3373](https://insights.sbomify.com/CVE-2015-3373/): Weak cryptography in amazon aws project:amazon aws (medium 5.0) - [CVE-2015-3372](https://insights.sbomify.com/CVE-2015-3372/): Cross-site scripting in node invite project:node invite (low 3.5) - [CVE-2015-3371](https://insights.sbomify.com/CVE-2015-3371/): Open redirect in node invite project:node invite (medium 5.8) - [CVE-2015-3370](https://insights.sbomify.com/CVE-2015-3370/): Cross-site request forgery in node invite project:node invite (medium 6.8) - [CVE-2015-3369](https://insights.sbomify.com/CVE-2015-3369/): Cross-site scripting in taxonews project:taxonews (low 3.5) - [CVE-2015-3368](https://insights.sbomify.com/CVE-2015-3368/): Cross-site scripting in osinet:classified ads (low 3.5) - [CVE-2015-3367](https://insights.sbomify.com/CVE-2015-3367/): Cross-site request forgery in patterns:patterns (medium 6.8) - [CVE-2015-3366](https://insights.sbomify.com/CVE-2015-3366/): Cross-site request forgery in alfresco:alfresco (medium 5.8) - [CVE-2015-3365](https://insights.sbomify.com/CVE-2015-3365/): Cross-site scripting in nodeauthor project:nodeauthor (low 3.5) - [CVE-2015-3364](https://insights.sbomify.com/CVE-2015-3364/): Cross-site scripting in levelteninteractive:content analysis (medium 4.3) - [CVE-2015-3363](https://insights.sbomify.com/CVE-2015-3363/): Cross-site request forgery in joshics:contact form fields (medium 6.8) - [CVE-2015-3362](https://insights.sbomify.com/CVE-2015-3362/): Cross-site scripting in video project:video (low 3.5) - [CVE-2015-3361](https://insights.sbomify.com/CVE-2015-3361/): Cross-site scripting in linkit project:linkit (low 2.1) - [CVE-2015-3360](https://insights.sbomify.com/CVE-2015-3360/): Cross-site scripting in term merge project:term merge (low 3.5) - [CVE-2015-3359](https://insights.sbomify.com/CVE-2015-3359/): Cross-site scripting in room reservations project:room reservations (low 3.5) - [CVE-2015-3358](https://insights.sbomify.com/CVE-2015-3358/): Open redirect in tadaa\! project:tadaa\! (medium 5.8) - [CVE-2015-3357](https://insights.sbomify.com/CVE-2015-3357/): Cross-site scripting in wishlist project:wishlist (low 3.5) - [CVE-2015-3356](https://insights.sbomify.com/CVE-2015-3356/): Cross-site request forgery in tadaa\! project:tadaa\! (medium 6.8) - [CVE-2015-3355](https://insights.sbomify.com/CVE-2015-3355/): Cross-site request forgery in batch jobs project:batch jobs (medium 6.8) - [CVE-2015-3354](https://insights.sbomify.com/CVE-2015-3354/): Cross-site request forgery in wishlist project:wishlist (medium 5.8) - [CVE-2015-3353](https://insights.sbomify.com/CVE-2015-3353/): Cross-site scripting in field display label project:field display label (low 3.5) - [CVE-2015-3352](https://insights.sbomify.com/CVE-2015-3352/): Cross-site request forgery in jammer project:jammer (medium 6.8) - [CVE-2015-3351](https://insights.sbomify.com/CVE-2015-3351/): Cross-site request forgery in log watcher project:log watcher (medium 6.8) - [CVE-2015-3350](https://insights.sbomify.com/CVE-2015-3350/): Cross-site request forgery in todo filter project:todo filter (medium 6.8) - [CVE-2015-3349](https://insights.sbomify.com/CVE-2015-3349/): Cross-site request forgery in htaccess project:htaccess (medium 6.8) - [CVE-2015-3348](https://insights.sbomify.com/CVE-2015-3348/): Cross-site scripting in cloudwords:cloudwords for multilingual (low 3.5) - [CVE-2015-3347](https://insights.sbomify.com/CVE-2015-3347/): Cross-site request forgery in cloudwords:cloudwords for multilingual (medium 6.8) - [CVE-2015-3346](https://insights.sbomify.com/CVE-2015-3346/): SQL injection in wikiwiki project:wikiwiki (high 7.5) - [CVE-2015-3345](https://insights.sbomify.com/CVE-2015-3345/): SQL injection in phplist integration project:phplist integration (medium 6.5) - [CVE-2015-3344](https://insights.sbomify.com/CVE-2015-3344/): Cross-site scripting in dlc solutions:course (low 3.5) - [CVE-2015-3343](https://insights.sbomify.com/CVE-2015-3343/): Cross-site request forgery in opac project:opac (medium 6.8) - [CVE-2015-3342](https://insights.sbomify.com/CVE-2015-3342/): Open redirect in ubercart currency conversion project:ubercart currency conversion (medium 5.8) - [CVE-2015-3340](https://insights.sbomify.com/CVE-2015-3340/): Information disclosure in debian:debian linux (low 2.9) - [CVE-2015-3339](https://insights.sbomify.com/CVE-2015-3339/): Race condition in debian:debian linux (medium 6.2) - [CVE-2015-3337](https://insights.sbomify.com/CVE-2015-3337/): Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch (medium 4.3) - [CVE-2015-3336](https://insights.sbomify.com/CVE-2015-3336/): Security feature bypass in debian:debian linux (medium 4.3) - [CVE-2015-3335](https://insights.sbomify.com/CVE-2015-3335/): Security feature bypass in google:chrome (high 7.5) - [CVE-2015-3334](https://insights.sbomify.com/CVE-2015-3334/): Security feature bypass in debian:debian linux (medium 4.3) - [CVE-2015-3333](https://insights.sbomify.com/CVE-2015-3333/): Other in canonical:ubuntu linux (high 7.5) - [CVE-2015-3332](https://insights.sbomify.com/CVE-2015-3332/): Denial of service in debian:debian linux (medium 4.9) - [CVE-2015-3331](https://insights.sbomify.com/CVE-2015-3331/): Memory corruption in canonical:ubuntu linux (critical 9.3) - [CVE-2015-3330](https://insights.sbomify.com/CVE-2015-3330/): Memory corruption in apple:mac os x (medium 6.8) - [CVE-2015-3329](https://insights.sbomify.com/CVE-2015-3329/): Memory corruption in apple:mac os x (high 7.5) - [CVE-2015-3326](https://insights.sbomify.com/CVE-2015-3326/): Weak cryptography in trend micro:scanmail (medium 5.0) - [CVE-2015-3325](https://insights.sbomify.com/CVE-2015-3325/): SQL injection in wpsymposium:wp symposium (high 7.5) - [CVE-2015-3324](https://insights.sbomify.com/CVE-2015-3324/): Security feature bypass in lenovo:thinkserver system manager baseboard management controller firmware (medium 4.3) - [CVE-2015-3323](https://insights.sbomify.com/CVE-2015-3323/): Denial of service in lenovo:thinkserver system manager baseboard management controller firmware (medium 5.0) - [CVE-2015-3322](https://insights.sbomify.com/CVE-2015-3322/): Weak cryptography in lenovo:thinkserver rd350 (medium 5.0) - [CVE-2015-3321](https://insights.sbomify.com/CVE-2015-3321/): Misconfiguration in lenovo:fingerprint manager (medium 6.7) --- From sbomify Insights: https://insights.sbomify.com/years/2015/page/50/