Vulnerabilities published in 2015
8,124 vulnerabilities were published in 2015: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 54 of 82.
- CVE-2015-2981 Security feature bypass in yodobashi:yodobashi
- CVE-2015-2980 Code injection in yodobashi:yodobashi
- CVE-2015-2979 Command injection in webservice-dic:yoyaku
- CVE-2015-2978 Auth bypass in webservice-dic:yoyaku
- CVE-2015-2977 File upload in webservice-dic:yoyaku
- CVE-2015-2976 Cross-site scripting in research-artisan:research artisan lite
- CVE-2015-2975 Missing authorization in research-artisan:research artisan lite
- CVE-2015-2974 File upload in lemon-s php:gazou bbs plus
- CVE-2015-2973 Cross-site scripting in welcart:welcart e-commerce
- CVE-2015-2972 SQL injection in sysphonic:thetis
- CVE-2015-2971 Path traversal in seeds:acmailer
- CVE-2015-2970 Path traversal in lemon-s php:simple oekaki
- CVE-2015-2969 Cross-site scripting in lemon-s php:simple oekaki bbs
- CVE-2015-2968 Security feature bypass in LINE@ for Android
- CVE-2015-2967 Cross-site scripting in cacti:cacti
- CVE-2015-2966 Path traversal in droidwareuk:explorer\+ file manager
- CVE-2015-2965 Path traversal in oscommerce:oscommerce
- CVE-2015-2964 Security feature bypass in namshi:namshi\/jose
- CVE-2015-2963 paperclip Cross-site Scripting vulnerability
- CVE-2015-2962 Other in cgi rescue:blobee
- CVE-2015-2961 Cross-site request forgery in zohocorp:manageengine netflow analyzer
- CVE-2015-2960 Cross-site scripting in zohocorp:manageengine netflow analyzer
- CVE-2015-2959 Missing authorization in zohocorp:manageengine netflow analyzer
- CVE-2015-2958 Auth bypass in igreks:milkystep light
- CVE-2015-2957 Cross-site scripting in igreks:milkystep light
- CVE-2015-2956 SQL injection in igreks:milkystep light
- CVE-2015-2955 Command injection in igreks:milkystep light
- CVE-2015-2954 Cross-site request forgery in igreks:milkystep light
- CVE-2015-2953 Security feature bypass in igreks:milkystep light
- CVE-2015-2952 Missing authorization in igreks:milkystep light
- CVE-2015-2951 Security feature bypass in f21:jwt
- CVE-2015-2950 Path traversal in open explorer beta project:open explorer beta
- CVE-2015-2949 Cross-site scripting in zenphoto:zenphoto
- CVE-2015-2948 Cross-site scripting in zenphoto:zenphoto
- CVE-2015-2947 Server-side request forgery in grabacr.net:kancolleviewer
- CVE-2015-2946 Memory corruption in ocf:sxf common library
- CVE-2015-2945 Deserialization in h-fj:mt-phpincgi
- CVE-2015-2944 Improper Neutralization of Input During Web Page Generation in Apache Sling
- CVE-2015-2943 Security feature bypass in honda:moto linc
- CVE-2015-2942 Denial of service in mediawiki:mediawiki
- CVE-2015-2941 Cross-site scripting in mediawiki:mediawiki
- CVE-2015-2940 Cross-site request forgery in mediawiki:checkuser
- CVE-2015-2939 Cross-site scripting in mediawiki:scribunto
- CVE-2015-2938 Cross-site scripting in mediawiki:mediawiki
- CVE-2015-2937 Denial of service in mediawiki:mediawiki
- CVE-2015-2936 Denial of service in mediawiki:mediawiki
- CVE-2015-2935 Security feature bypass in mediawiki:mediawiki
- CVE-2015-2934 Cross-site scripting in mediawiki:mediawiki
- CVE-2015-2933 Cross-site scripting in mediawiki:mediawiki
- CVE-2015-2932 Cross-site scripting in mediawiki:mediawiki
- CVE-2015-2931 Cross-site scripting in mediawiki:mediawiki
- CVE-2015-2929 Denial of service in Tor
- CVE-2015-2928 Denial of service in Tor
- CVE-2015-2927 Denial of service in debian:debian linux
- CVE-2015-2926 Cross-site scripting in zoneo-soft:phptraffica
- CVE-2015-2925 Security feature bypass in canonical:ubuntu linux
- CVE-2015-2924 Other in networkmanager project:networkmanager
- CVE-2015-2923 Other in freebsd:freebsd
- CVE-2015-2922 Other in debian:debian linux
- CVE-2015-2918 OrientDB Studio web management interface is vulnerable to clickjacking attacks
- CVE-2015-2917 Security feature bypass in securifi:almond-2015 firmware
- CVE-2015-2916 Cross-site request forgery in securifi:almond-2015 firmware
- CVE-2015-2915 Hardcoded credentials in securifi:almond-2015 firmware
- CVE-2015-2914 Weak cryptography in securifi:almond-2015 firmware
- CVE-2015-2913 OrientDB Server Community Edition uses insufficiently random values to generate session IDs
- CVE-2015-2912 OrientDB-Server vulnerable to Cross-Site Request Forgery
- CVE-2015-2909 Misconfiguration in DS2
- CVE-2015-2908 Security feature bypass in Mobile Devices (MDI) OBD-II dongles
- CVE-2015-2907 Hardcoded credentials in Mobile Devices (MDI) OBD-II dongles
- CVE-2015-2906 Hardcoded credentials in Mobile Devices (MDI) OBD-II dongles
- CVE-2015-2905 Cross-site request forgery in actiontec: ncs01 firmware
- CVE-2015-2904 Hardcoded credentials in actiontec: ncs01 firmware
- CVE-2015-2903 Hardcoded credentials in hp:arcsight smartconnectors
- CVE-2015-2902 Weak cryptography in hp:arcsight smartconnectors
- CVE-2015-2901 Memory corruption in medicomp:medcin engine
- CVE-2015-2900 Memory corruption in medicomp:medcin engine
- CVE-2015-2899 Memory corruption in medicomp:medcin engine
- CVE-2015-2898 Memory corruption in medicomp:medcin engine
- CVE-2015-2897 Hardcoded credentials in sierrawireless:aleos
- CVE-2015-2896 Information disclosure in idera:uptime infrastructure monitor
- CVE-2015-2895 Memory corruption in idera:uptime infrastructure monitor
- CVE-2015-2894 Memory corruption in idera:uptime infrastructure monitor
- CVE-2015-2890 Security feature bypass in dell:bios
- CVE-2015-2889 Privilege escalation in Summer Baby Zoom Wifi Monitor & Internet Viewing System
- CVE-2015-2888 Auth bypass in Summer Baby Zoom Wifi Monitor & Internet Viewing System
- CVE-2015-2887 Hardcoded credentials in iBaby M3S
- CVE-2015-2886 Information disclosure in iBaby M6
- CVE-2015-2885 Hardcoded credentials in Lens Peek-a-View
- CVE-2015-2884 Information disclosure in Philips In.Sight B120/37
- CVE-2015-2883 Cross-site scripting in Philips In.Sight B120/37
- CVE-2015-2882 Hardcoded credentials in Philips In.Sight B120/37
- CVE-2015-2881 Hardcoded credentials in Gynoii
- CVE-2015-2880 Hardcoded credentials in TRENDnet WiFi Baby Cam TV-IP743SIC
- CVE-2015-2878 Cross-site request forgery in watchguard:hawkeye g
- CVE-2015-2877 Information disclosure in linux:linux kernel
- CVE-2015-2876 File upload in lacie:lac9000436u firmware
- CVE-2015-2875 Path traversal in lacie:lac9000436u firmware
- CVE-2015-2874 Hardcoded credentials in lacie:lac9000436u firmware
- CVE-2015-2873 Missing authorization in trendmicro:deep discovery inspector
- CVE-2015-2872 Cross-site scripting in trendmicro:deep discovery inspector