# Vulnerabilities published in 2015


- [CVE-2015-3205](https://insights.sbomify.com/CVE-2015-3205/): Memory corruption in libmimedir project:libmimedir (high 7.5)
- [CVE-2015-3204](https://insights.sbomify.com/CVE-2015-3204/): Denial of service in libreswan:libreswan (medium 5.0)
- [CVE-2015-3203](https://insights.sbomify.com/CVE-2015-3203/): File upload in h5ai project:h5ai (high 7.5)
- [CVE-2015-3202](https://insights.sbomify.com/CVE-2015-3202/): Privilege escalation in debian:debian linux (low 3.6)
- [CVE-2015-3201](https://insights.sbomify.com/CVE-2015-3201/): Information disclosure in redhat:thermostat (low 2.1)
- [CVE-2015-3200](https://insights.sbomify.com/CVE-2015-3200/): Other in hp:virtual customer access system (high 7.5)
- [CVE-2015-3198](https://insights.sbomify.com/CVE-2015-3198/): The Undertow module of WildFly allows source code disclosure (high 7.5)
- [CVE-2015-3197](https://insights.sbomify.com/CVE-2015-3197/): Weak cryptography in openssl:openssl (medium 5.9)
- [CVE-2015-3196](https://insights.sbomify.com/CVE-2015-3196/): Race condition in canonical:ubuntu linux (medium 4.3)
- [CVE-2015-3195](https://insights.sbomify.com/CVE-2015-3195/): Information disclosure in apple:mac os x (medium 5.3)
- [CVE-2015-3194](https://insights.sbomify.com/CVE-2015-3194/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2015-3193](https://insights.sbomify.com/CVE-2015-3193/): Weak cryptography in canonical:ubuntu linux (high 7.5)
- [CVE-2015-3192](https://insights.sbomify.com/CVE-2015-3192/): Pivotal Spring Framework DoS Attack with XML Input (medium 5.5)
- [CVE-2015-3191](https://insights.sbomify.com/CVE-2015-3191/): Cross-site request forgery in Cloud Foundry (high 8.8)
- [CVE-2015-3190](https://insights.sbomify.com/CVE-2015-3190/): Open redirect in Cloud Foundry (medium 6.1)
- [CVE-2015-3189](https://insights.sbomify.com/CVE-2015-3189/): Cloud Foundry Runtime has Weak Password Recovery Mechanism for Forgotten Password (low 3.7)
- [CVE-2015-3188](https://insights.sbomify.com/CVE-2015-3188/): Apache Storm remote code execution vulnerability (critical 9.8)
- [CVE-2015-3187](https://insights.sbomify.com/CVE-2015-3187/): Information disclosure in apache:subversion (medium 4.0)
- [CVE-2015-3186](https://insights.sbomify.com/CVE-2015-3186/): Cross-site scripting in apache:ambari (low 3.5)
- [CVE-2015-3185](https://insights.sbomify.com/CVE-2015-3185/): Auth bypass in apache:http server (medium 4.3)
- [CVE-2015-3184](https://insights.sbomify.com/CVE-2015-3184/): Information disclosure in apache:subversion (medium 5.0)
- [CVE-2015-3183](https://insights.sbomify.com/CVE-2015-3183/): Other in apache:http server (medium 5.0)
- [CVE-2015-3182](https://insights.sbomify.com/CVE-2015-3182/): Denial of service in wireshark:wireshark (medium 5.5)
- [CVE-2015-3181](https://insights.sbomify.com/CVE-2015-3181/): Moodle allows attackers to bypass file-management restrictions (medium 4.0)
- [CVE-2015-3180](https://insights.sbomify.com/CVE-2015-3180/): Moodle allows attackers to obtain sensitive course-structure information (medium 4.0)
- [CVE-2015-3179](https://insights.sbomify.com/CVE-2015-3179/): Moodle allows attackers to bypass intended login restrictions (low 3.5)
- [CVE-2015-3178](https://insights.sbomify.com/CVE-2015-3178/): Moodle cross-site scripting (XSS) vulnerability (low 3.5)
- [CVE-2015-3177](https://insights.sbomify.com/CVE-2015-3177/): Missing authorization in moodle:moodle (low 3.5)
- [CVE-2015-3176](https://insights.sbomify.com/CVE-2015-3176/): Moodle allows attackers obtain full-name information (medium 4.3)
- [CVE-2015-3175](https://insights.sbomify.com/CVE-2015-3175/): Moodle Arbitrary Redirect (medium 5.8)
- [CVE-2015-3174](https://insights.sbomify.com/CVE-2015-3174/): Moodle does not set the RISK_XSS bit for graders (low 3.5)
- [CVE-2015-3173](https://insights.sbomify.com/CVE-2015-3173/): Code injection in custom-content-type-manager (high 7.2)
- [CVE-2015-3172](https://insights.sbomify.com/CVE-2015-3172/): Cross-site scripting in EidoGo (medium 5.4)
- [CVE-2015-3171](https://insights.sbomify.com/CVE-2015-3171/): sosreport sensitive information disclosure via weak permissions of the generated archives (medium 5.5)
- [CVE-2015-3170](https://insights.sbomify.com/CVE-2015-3170/): Denial of service in selinux project:selinux (medium 5.5)
- [CVE-2015-3169](https://insights.sbomify.com/CVE-2015-3169/): Cross-site scripting in askbot:askbot (medium 6.1)
- [CVE-2015-3167](https://insights.sbomify.com/CVE-2015-3167/): Information disclosure in PostgreSQL (high 7.5)
- [CVE-2015-3166](https://insights.sbomify.com/CVE-2015-3166/): Memory corruption in PostgreSQL (critical 9.8)
- [CVE-2015-3165](https://insights.sbomify.com/CVE-2015-3165/): Memory corruption in apple:mac os x server (medium 4.3)
- [CVE-2015-3164](https://insights.sbomify.com/CVE-2015-3164/): Misconfiguration in opensuse:opensuse (low 3.6)
- [CVE-2015-3163](https://insights.sbomify.com/CVE-2015-3163/): Missing authorization in redhat:beaker (medium 4.3)
- [CVE-2015-3162](https://insights.sbomify.com/CVE-2015-3162/): Cross-site scripting in beaker-project:beaker (medium 5.4)
- [CVE-2015-3161](https://insights.sbomify.com/CVE-2015-3161/): Cross-site scripting in beaker-project:beaker (medium 4.8)
- [CVE-2015-3160](https://insights.sbomify.com/CVE-2015-3160/): XML external entity in beaker-project:beaker (medium 4.3)
- [CVE-2015-3159](https://insights.sbomify.com/CVE-2015-3159/): Privilege escalation in ABRT (high 7.8)
- [CVE-2015-3158](https://insights.sbomify.com/CVE-2015-3158/): PicketLink does not properly check role based authorization (medium 4.0)
- [CVE-2015-3156](https://insights.sbomify.com/CVE-2015-3156/): Openstack DBaaS (Trove) Improper Link Resolution Before File Access (medium 5.5)
- [CVE-2015-3155](https://insights.sbomify.com/CVE-2015-3155/): Misconfiguration in theforeman:foreman (medium 5.0)
- [CVE-2015-3154](https://insights.sbomify.com/CVE-2015-3154/): Zenario CMS vulnerable to CRLF injection (medium 6.1)
- [CVE-2015-3153](https://insights.sbomify.com/CVE-2015-3153/): Information disclosure in apple:mac os x (medium 5.0)
- [CVE-2015-3152](https://insights.sbomify.com/CVE-2015-3152/): Security feature bypass in debian:debian linux (medium 5.9)
- [CVE-2015-3151](https://insights.sbomify.com/CVE-2015-3151/): Path traversal in ABRT (high 7.8)
- [CVE-2015-3150](https://insights.sbomify.com/CVE-2015-3150/): Privilege escalation in ABRT (high 7.1)
- [CVE-2015-3149](https://insights.sbomify.com/CVE-2015-3149/): Path traversal in redhat:enterprise linux desktop (medium 5.5)
- [CVE-2015-3148](https://insights.sbomify.com/CVE-2015-3148/): Auth bypass in apple:mac os x (medium 5.0)
- [CVE-2015-3147](https://insights.sbomify.com/CVE-2015-3147/): Other in ABRT (medium 6.5)
- [CVE-2015-3146](https://insights.sbomify.com/CVE-2015-3146/): Null dereference in canonical:ubuntu linux (high 7.5)
- [CVE-2015-3145](https://insights.sbomify.com/CVE-2015-3145/): Memory corruption in apple:mac os x (high 7.5)
- [CVE-2015-3144](https://insights.sbomify.com/CVE-2015-3144/): Memory corruption in canonical:ubuntu linux (critical 9.0)
- [CVE-2015-3143](https://insights.sbomify.com/CVE-2015-3143/): Auth bypass in apple:mac os x (medium 5.0)
- [CVE-2015-3142](https://insights.sbomify.com/CVE-2015-3142/): Information disclosure in redhat:automatic bug reporting tool (medium 4.7)
- [CVE-2015-3141](https://insights.sbomify.com/CVE-2015-3141/): Cross-site request forgery in synametrics:xeams (medium 6.8)
- [CVE-2015-3140](https://insights.sbomify.com/CVE-2015-3140/): Cross-site request forgery in synametrics:synaman (high 8.8)
- [CVE-2015-3138](https://insights.sbomify.com/CVE-2015-3138/): Denial of service in opensuse:leap (high 7.5)
- [CVE-2015-3137](https://insights.sbomify.com/CVE-2015-3137/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3136](https://insights.sbomify.com/CVE-2015-3136/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3135](https://insights.sbomify.com/CVE-2015-3135/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3134](https://insights.sbomify.com/CVE-2015-3134/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3133](https://insights.sbomify.com/CVE-2015-3133/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3132](https://insights.sbomify.com/CVE-2015-3132/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3131](https://insights.sbomify.com/CVE-2015-3131/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3130](https://insights.sbomify.com/CVE-2015-3130/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3129](https://insights.sbomify.com/CVE-2015-3129/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3128](https://insights.sbomify.com/CVE-2015-3128/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3127](https://insights.sbomify.com/CVE-2015-3127/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3126](https://insights.sbomify.com/CVE-2015-3126/): Null dereference in adobe:air (high 7.5)
- [CVE-2015-3125](https://insights.sbomify.com/CVE-2015-3125/): Security feature bypass in adobe:air (medium 5.0)
- [CVE-2015-3124](https://insights.sbomify.com/CVE-2015-3124/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3123](https://insights.sbomify.com/CVE-2015-3123/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3122](https://insights.sbomify.com/CVE-2015-3122/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3121](https://insights.sbomify.com/CVE-2015-3121/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3120](https://insights.sbomify.com/CVE-2015-3120/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3119](https://insights.sbomify.com/CVE-2015-3119/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3118](https://insights.sbomify.com/CVE-2015-3118/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3117](https://insights.sbomify.com/CVE-2015-3117/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3116](https://insights.sbomify.com/CVE-2015-3116/): Security feature bypass in adobe:air (medium 5.0)
- [CVE-2015-3115](https://insights.sbomify.com/CVE-2015-3115/): Security feature bypass in adobe:air (medium 5.0)
- [CVE-2015-3114](https://insights.sbomify.com/CVE-2015-3114/): Security feature bypass in adobe:air (medium 5.0)
- [CVE-2015-3113](https://insights.sbomify.com/CVE-2015-3113/): Adobe Flash Player Heap-Based Buffer Overflow (high 7.8, exploited in the wild)
- [CVE-2015-3112](https://insights.sbomify.com/CVE-2015-3112/): Memory corruption in adobe:bridge (critical 10.0)
- [CVE-2015-3111](https://insights.sbomify.com/CVE-2015-3111/): Memory corruption in adobe:bridge (critical 10.0)
- [CVE-2015-3110](https://insights.sbomify.com/CVE-2015-3110/): Integer overflow in adobe:bridge (critical 10.0)
- [CVE-2015-3109](https://insights.sbomify.com/CVE-2015-3109/): Memory corruption in adobe:photoshop cc (critical 10.0)
- [CVE-2015-3108](https://insights.sbomify.com/CVE-2015-3108/): Information disclosure in adobe:air (medium 5.0)
- [CVE-2015-3107](https://insights.sbomify.com/CVE-2015-3107/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3106](https://insights.sbomify.com/CVE-2015-3106/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3105](https://insights.sbomify.com/CVE-2015-3105/): Memory corruption in adobe:air (critical 10.0)
- [CVE-2015-3104](https://insights.sbomify.com/CVE-2015-3104/): Integer overflow in adobe:air (critical 10.0)
- [CVE-2015-3103](https://insights.sbomify.com/CVE-2015-3103/): Use after free in adobe:air (critical 10.0)
- [CVE-2015-3102](https://insights.sbomify.com/CVE-2015-3102/): Security feature bypass in adobe:air (medium 5.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/52/