# Vulnerabilities published in 2015


- [CVE-2015-3320](https://insights.sbomify.com/CVE-2015-3320/): Information disclosure in lenovo:usb enhanced performance keyboard (low 2.1)
- [CVE-2015-3319](https://insights.sbomify.com/CVE-2015-3319/): Information disclosure in hotspotexpress:hotex billing manager (medium 5.0)
- [CVE-2015-3318](https://insights.sbomify.com/CVE-2015-3318/): Privilege escalation in ca:client automation (medium 4.6)
- [CVE-2015-3317](https://insights.sbomify.com/CVE-2015-3317/): Memory corruption in ca:client automation (medium 4.6)
- [CVE-2015-3316](https://insights.sbomify.com/CVE-2015-3316/): Privilege escalation in broadcom:network and systems management (medium 4.6)
- [CVE-2015-3315](https://insights.sbomify.com/CVE-2015-3315/): Other in redhat:automatic bug reporting tool (high 7.8)
- [CVE-2015-3314](https://insights.sbomify.com/CVE-2015-3314/): SQL injection in tune library project:tune library (high 8.1)
- [CVE-2015-3313](https://insights.sbomify.com/CVE-2015-3313/): SQL injection in community events project:community events (critical 9.8)
- [CVE-2015-3310](https://insights.sbomify.com/CVE-2015-3310/): Memory corruption in canonical:ubuntu linux (medium 4.3)
- [CVE-2015-3309](https://insights.sbomify.com/CVE-2015-3309/): Path traversal in etherpad:etherpad (high 7.5)
- [CVE-2015-3308](https://insights.sbomify.com/CVE-2015-3308/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2015-3307](https://insights.sbomify.com/CVE-2015-3307/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2015-3306](https://insights.sbomify.com/CVE-2015-3306/): ProFTPD Improper Access Control (critical 10.0, exploited in the wild)
- [CVE-2015-3302](https://insights.sbomify.com/CVE-2015-3302/): Auth bypass in thecartpress:thecartpress ecommerce shopping cart (high 7.5)
- [CVE-2015-3301](https://insights.sbomify.com/CVE-2015-3301/): Path traversal in thecartpress:thecartpress ecommerce shopping cart (medium 4.0)
- [CVE-2015-3300](https://insights.sbomify.com/CVE-2015-3300/): Cross-site scripting in thecartpress:thecartpress ecommerce shopping cart (medium 4.3)
- [CVE-2015-3299](https://insights.sbomify.com/CVE-2015-3299/): Cross-site scripting in floating social bar project:floating social bar (medium 6.1)
- [CVE-2015-3298](https://insights.sbomify.com/CVE-2015-3298/): Security feature bypass in yubico:ykneo-openpgp (high 8.8)
- [CVE-2015-3297](https://insights.sbomify.com/CVE-2015-3297/): Path traversal in etherpad:etherpad (high 7.5)
- [CVE-2015-3296](https://insights.sbomify.com/CVE-2015-3296/): NodeBB Cross-site Scripting Vulnerability in Markdown Processing (medium 6.1)
- [CVE-2015-3295](https://insights.sbomify.com/CVE-2015-3295/): Other in markdown-it project:markdown-it (medium 5.3)
- [CVE-2015-3294](https://insights.sbomify.com/CVE-2015-3294/): Memory corruption in oracle:solaris (medium 6.4)
- [CVE-2015-3293](https://insights.sbomify.com/CVE-2015-3293/): Information disclosure in fortinet:fortimail (medium 4.0)
- [CVE-2015-3292](https://insights.sbomify.com/CVE-2015-3292/): Misconfiguration in netapp:oncommand workflow automation (critical 10.0)
- [CVE-2015-3291](https://insights.sbomify.com/CVE-2015-3291/): Denial of service in linux:linux kernel (low 2.1)
- [CVE-2015-3290](https://insights.sbomify.com/CVE-2015-3290/): Privilege escalation in linux:linux kernel (high 7.2)
- [CVE-2015-3289](https://insights.sbomify.com/CVE-2015-3289/): Denial of service in openstack:glance (medium 4.0)
- [CVE-2015-3288](https://insights.sbomify.com/CVE-2015-3288/): Privilege escalation in linux:linux kernel (high 7.8)
- [CVE-2015-3286](https://insights.sbomify.com/CVE-2015-3286/): Memory corruption in openafs:openafs (medium 4.6)
- [CVE-2015-3285](https://insights.sbomify.com/CVE-2015-3285/): Memory corruption in openafs:openafs (low 2.1)
- [CVE-2015-3284](https://insights.sbomify.com/CVE-2015-3284/): Information disclosure in openafs:openafs (low 2.1)
- [CVE-2015-3283](https://insights.sbomify.com/CVE-2015-3283/): Auth bypass in openafs:openafs (medium 6.8)
- [CVE-2015-3282](https://insights.sbomify.com/CVE-2015-3282/): Information disclosure in openafs:openafs (medium 4.3)
- [CVE-2015-3281](https://insights.sbomify.com/CVE-2015-3281/): Information disclosure in canonical:ubuntu linux (medium 5.0)
- [CVE-2015-3280](https://insights.sbomify.com/CVE-2015-3280/): OpenStack Compute (nova) allows remote authenticated users to cause a denial of service (medium 6.8)
- [CVE-2015-3279](https://insights.sbomify.com/CVE-2015-3279/): Integer overflow in canonical:ubuntu linux (high 7.5)
- [CVE-2015-3278](https://insights.sbomify.com/CVE-2015-3278/): Weak cryptography in nss compat ossl project:nss compat ossl (critical 9.8)
- [CVE-2015-3277](https://insights.sbomify.com/CVE-2015-3277/): Information disclosure in mod nss project:mod nss (high 7.5)
- [CVE-2015-3276](https://insights.sbomify.com/CVE-2015-3276/): Weak cryptography in openldap:openldap (high 7.5)
- [CVE-2015-3275](https://insights.sbomify.com/CVE-2015-3275/): Moodle multiple cross-site scripting (XSS) vulnerabilities (medium 6.1)
- [CVE-2015-3274](https://insights.sbomify.com/CVE-2015-3274/): Moodle cross-site scripting (XSS) vulnerability (medium 6.1)
- [CVE-2015-3273](https://insights.sbomify.com/CVE-2015-3273/): Missing authorization in moodle:moodle (medium 4.3)
- [CVE-2015-3272](https://insights.sbomify.com/CVE-2015-3272/): Moodle open redirect vulnerability (high 7.4)
- [CVE-2015-3271](https://insights.sbomify.com/CVE-2015-3271/): Apache Tika Server exposes sensitive information (medium 5.3)
- [CVE-2015-3270](https://insights.sbomify.com/CVE-2015-3270/): Privilege escalation in apache:ambari (medium 6.5)
- [CVE-2015-3269](https://insights.sbomify.com/CVE-2015-3269/): XML external entity in adobe:livecycle data services (medium 5.0)
- [CVE-2015-3268](https://insights.sbomify.com/CVE-2015-3268/): Cross-site scripting in apache:ofbiz (medium 6.1)
- [CVE-2015-3267](https://insights.sbomify.com/CVE-2015-3267/): Cross-site scripting in redhat:jboss operations network (medium 4.3)
- [CVE-2015-3259](https://insights.sbomify.com/CVE-2015-3259/): Memory corruption in xen:xen (medium 6.8)
- [CVE-2015-3258](https://insights.sbomify.com/CVE-2015-3258/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2015-3257](https://insights.sbomify.com/CVE-2015-3257/): zend-diactoros Cross-site Scripting (XSS) (medium 6.1)
- [CVE-2015-3256](https://insights.sbomify.com/CVE-2015-3256/): Memory corruption in opensuse:opensuse (medium 4.6)
- [CVE-2015-3255](https://insights.sbomify.com/CVE-2015-3255/): Privilege escalation in polkit project:polkit (medium 4.6)
- [CVE-2015-3254](https://insights.sbomify.com/CVE-2015-3254/): Denial of service in apache:thrift (medium 6.5)
- [CVE-2015-3253](https://insights.sbomify.com/CVE-2015-3253/): Improper Neutralization of Special Elements in Output Used by a Downstream Component in Apache Groovy (critical 9.8)
- [CVE-2015-3252](https://insights.sbomify.com/CVE-2015-3252/): Information disclosure in apache:cloudstack (critical 9.8)
- [CVE-2015-3251](https://insights.sbomify.com/CVE-2015-3251/): Information disclosure in apache:cloudstack (medium 4.9)
- [CVE-2015-3250](https://insights.sbomify.com/CVE-2015-3250/): Exposure of Sensitive Information to an Unauthorized Actor in Apache Directory LDAP API (high 7.5)
- [CVE-2015-3249](https://insights.sbomify.com/CVE-2015-3249/): Memory corruption in apache:traffic server (critical 9.8)
- [CVE-2015-3248](https://insights.sbomify.com/CVE-2015-3248/): Misconfiguration in openhpi:openhpi (medium 4.7)
- [CVE-2015-3247](https://insights.sbomify.com/CVE-2015-3247/): Race condition in redhat:enterprise linux (medium 6.9)
- [CVE-2015-3246](https://insights.sbomify.com/CVE-2015-3246/): Red Hat Libuser Race Condition (high 7.4, exploited in the wild)
- [CVE-2015-3245](https://insights.sbomify.com/CVE-2015-3245/): Denial of service in redhat:libuser (low 2.1)
- [CVE-2015-3244](https://insights.sbomify.com/CVE-2015-3244/): Missing authorization in redhat:jboss enterprise portal platform (medium 4.9)
- [CVE-2015-3243](https://insights.sbomify.com/CVE-2015-3243/): Information disclosure in rsyslog:rsyslog (medium 5.5)
- [CVE-2015-3241](https://insights.sbomify.com/CVE-2015-3241/): OpenStack Nova instance migration process does not stop when instance is deleted (medium 6.8)
- [CVE-2015-3240](https://insights.sbomify.com/CVE-2015-3240/): Denial of service in libreswan:libreswan (medium 4.3)
- [CVE-2015-3239](https://insights.sbomify.com/CVE-2015-3239/): Memory corruption in libunwind project:libunwind (low 3.3)
- [CVE-2015-3238](https://insights.sbomify.com/CVE-2015-3238/): Information disclosure in linux-pam:linux-pam (medium 6.5)
- [CVE-2015-3237](https://insights.sbomify.com/CVE-2015-3237/): Memory corruption in haxx:curl (medium 6.4)
- [CVE-2015-3236](https://insights.sbomify.com/CVE-2015-3236/): Information disclosure in haxx:curl (medium 5.0)
- [CVE-2015-3235](https://insights.sbomify.com/CVE-2015-3235/): Privilege escalation in theforeman:foreman (medium 6.0)
- [CVE-2015-3234](https://insights.sbomify.com/CVE-2015-3234/): Auth bypass in debian:debian linux (medium 4.3)
- [CVE-2015-3233](https://insights.sbomify.com/CVE-2015-3233/): Open redirect in drupal:drupal (medium 5.8)
- [CVE-2015-3232](https://insights.sbomify.com/CVE-2015-3232/): Open redirect in debian:debian linux (medium 5.8)
- [CVE-2015-3231](https://insights.sbomify.com/CVE-2015-3231/): Information disclosure in debian:debian linux (medium 4.0)
- [CVE-2015-3230](https://insights.sbomify.com/CVE-2015-3230/): Security feature bypass in fedoraproject:389 directory server (high 7.5)
- [CVE-2015-3229](https://insights.sbomify.com/CVE-2015-3229/): Weak cryptography in fedoraproject:spin-kickstarts (medium 5.9)
- [CVE-2015-3228](https://insights.sbomify.com/CVE-2015-3228/): Integer overflow in artifex:afpl ghostscript (medium 6.8)
- [CVE-2015-3227](https://insights.sbomify.com/CVE-2015-3227/): activesupport vulnerable to Denial of Service via large XML document depth (medium 5.0)
- [CVE-2015-3226](https://insights.sbomify.com/CVE-2015-3226/): activesupport Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2015-3225](https://insights.sbomify.com/CVE-2015-3225/): Rack vulnerable to Denial of Service via large parameter depth request (medium 5.0)
- [CVE-2015-3224](https://insights.sbomify.com/CVE-2015-3224/): Web Console (Ruby gem) contains whitelisted_ips bypass (medium 4.3)
- [CVE-2015-3223](https://insights.sbomify.com/CVE-2015-3223/): Denial of service in samba:samba (medium 5.3)
- [CVE-2015-3222](https://insights.sbomify.com/CVE-2015-3222/): Privilege escalation in ossec:ossec (high 7.0)
- [CVE-2015-3221](https://insights.sbomify.com/CVE-2015-3221/): OpenStack Neutron Improper Input Validation vulnerability (medium 4.0)
- [CVE-2015-3220](https://insights.sbomify.com/CVE-2015-3220/): tlslite remote denial of service vulnerability (high 7.5)
- [CVE-2015-3219](https://insights.sbomify.com/CVE-2015-3219/): OpenStack Dashboard (Horizon) Cross-site scripting (XSS) vulnerability (medium 4.3)
- [CVE-2015-3218](https://insights.sbomify.com/CVE-2015-3218/): Null dereference in polkit project:polkit (low 2.1)
- [CVE-2015-3217](https://insights.sbomify.com/CVE-2015-3217/): Memory corruption in ibm:powerkvm (high 7.5)
- [CVE-2015-3216](https://insights.sbomify.com/CVE-2015-3216/): Race condition in openssl:openssl (medium 4.3)
- [CVE-2015-3215](https://insights.sbomify.com/CVE-2015-3215/): Denial of service in redhat:virtio-win (high 7.5)
- [CVE-2015-3214](https://insights.sbomify.com/CVE-2015-3214/): Memory corruption in arista:eos (medium 6.9)
- [CVE-2015-3213](https://insights.sbomify.com/CVE-2015-3213/): Security feature bypass in clutter project:clutter (high 7.2)
- [CVE-2015-3212](https://insights.sbomify.com/CVE-2015-3212/): Race condition in linux:linux kernel (medium 4.9)
- [CVE-2015-3211](https://insights.sbomify.com/CVE-2015-3211/): Path traversal in php-fpm:php-fpm (medium 5.5)
- [CVE-2015-3210](https://insights.sbomify.com/CVE-2015-3210/): Memory corruption in pcre:pcre (critical 9.8)
- [CVE-2015-3209](https://insights.sbomify.com/CVE-2015-3209/): Memory corruption in arista:eos (high 7.5)
- [CVE-2015-3207](https://insights.sbomify.com/CVE-2015-3207/): Insecure cookies in Openshift Origin (medium 5.3)
- [CVE-2015-3206](https://insights.sbomify.com/CVE-2015-3206/): python-kerberos vulnerable to KDC spoofing attacks (high 8.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/51/