# Vulnerabilities published in 2015


- [CVE-2015-2981](https://insights.sbomify.com/CVE-2015-2981/): Security feature bypass in yodobashi:yodobashi (medium 5.9)
- [CVE-2015-2980](https://insights.sbomify.com/CVE-2015-2980/): Code injection in yodobashi:yodobashi (medium 6.8)
- [CVE-2015-2979](https://insights.sbomify.com/CVE-2015-2979/): Command injection in webservice-dic:yoyaku (high 7.5)
- [CVE-2015-2978](https://insights.sbomify.com/CVE-2015-2978/): Auth bypass in webservice-dic:yoyaku (medium 5.0)
- [CVE-2015-2977](https://insights.sbomify.com/CVE-2015-2977/): File upload in webservice-dic:yoyaku (high 7.5)
- [CVE-2015-2976](https://insights.sbomify.com/CVE-2015-2976/): Cross-site scripting in research-artisan:research artisan lite (medium 4.3)
- [CVE-2015-2975](https://insights.sbomify.com/CVE-2015-2975/): Missing authorization in research-artisan:research artisan lite (medium 5.0)
- [CVE-2015-2974](https://insights.sbomify.com/CVE-2015-2974/): File upload in lemon-s php:gazou bbs plus (medium 5.0)
- [CVE-2015-2973](https://insights.sbomify.com/CVE-2015-2973/): Cross-site scripting in welcart:welcart e-commerce (medium 4.3)
- [CVE-2015-2972](https://insights.sbomify.com/CVE-2015-2972/): SQL injection in sysphonic:thetis (high 7.5)
- [CVE-2015-2971](https://insights.sbomify.com/CVE-2015-2971/): Path traversal in seeds:acmailer (medium 5.5)
- [CVE-2015-2970](https://insights.sbomify.com/CVE-2015-2970/): Path traversal in lemon-s php:simple oekaki (medium 6.4)
- [CVE-2015-2969](https://insights.sbomify.com/CVE-2015-2969/): Cross-site scripting in lemon-s php:simple oekaki bbs (medium 4.3)
- [CVE-2015-2968](https://insights.sbomify.com/CVE-2015-2968/): Security feature bypass in LINE@ for Android (medium 5.9)
- [CVE-2015-2967](https://insights.sbomify.com/CVE-2015-2967/): Cross-site scripting in cacti:cacti (medium 4.3)
- [CVE-2015-2966](https://insights.sbomify.com/CVE-2015-2966/): Path traversal in droidwareuk:explorer\+ file manager (medium 6.4)
- [CVE-2015-2965](https://insights.sbomify.com/CVE-2015-2965/): Path traversal in oscommerce:oscommerce (medium 4.0)
- [CVE-2015-2964](https://insights.sbomify.com/CVE-2015-2964/): Security feature bypass in namshi:namshi\/jose (medium 5.0)
- [CVE-2015-2963](https://insights.sbomify.com/CVE-2015-2963/): paperclip Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2015-2962](https://insights.sbomify.com/CVE-2015-2962/): Other in cgi rescue:blobee (high 7.5)
- [CVE-2015-2961](https://insights.sbomify.com/CVE-2015-2961/): Cross-site request forgery in zohocorp:manageengine netflow analyzer (medium 6.8)
- [CVE-2015-2960](https://insights.sbomify.com/CVE-2015-2960/): Cross-site scripting in zohocorp:manageengine netflow analyzer (medium 4.3)
- [CVE-2015-2959](https://insights.sbomify.com/CVE-2015-2959/): Missing authorization in zohocorp:manageengine netflow analyzer (high 7.5)
- [CVE-2015-2958](https://insights.sbomify.com/CVE-2015-2958/): Auth bypass in igreks:milkystep light (medium 6.4)
- [CVE-2015-2957](https://insights.sbomify.com/CVE-2015-2957/): Cross-site scripting in igreks:milkystep light (medium 4.3)
- [CVE-2015-2956](https://insights.sbomify.com/CVE-2015-2956/): SQL injection in igreks:milkystep light (high 7.5)
- [CVE-2015-2955](https://insights.sbomify.com/CVE-2015-2955/): Command injection in igreks:milkystep light (high 7.5)
- [CVE-2015-2954](https://insights.sbomify.com/CVE-2015-2954/): Cross-site request forgery in igreks:milkystep light (medium 6.8)
- [CVE-2015-2953](https://insights.sbomify.com/CVE-2015-2953/): Security feature bypass in igreks:milkystep light (medium 5.0)
- [CVE-2015-2952](https://insights.sbomify.com/CVE-2015-2952/): Missing authorization in igreks:milkystep light (medium 6.5)
- [CVE-2015-2951](https://insights.sbomify.com/CVE-2015-2951/): Security feature bypass in f21:jwt (medium 5.0)
- [CVE-2015-2950](https://insights.sbomify.com/CVE-2015-2950/): Path traversal in open explorer beta project:open explorer beta (medium 6.4)
- [CVE-2015-2949](https://insights.sbomify.com/CVE-2015-2949/): Cross-site scripting in zenphoto:zenphoto (medium 4.3)
- [CVE-2015-2948](https://insights.sbomify.com/CVE-2015-2948/): Cross-site scripting in zenphoto:zenphoto (medium 4.3)
- [CVE-2015-2947](https://insights.sbomify.com/CVE-2015-2947/): Server-side request forgery in grabacr.net:kancolleviewer (critical 9.1)
- [CVE-2015-2946](https://insights.sbomify.com/CVE-2015-2946/): Memory corruption in ocf:sxf common library (medium 6.8)
- [CVE-2015-2945](https://insights.sbomify.com/CVE-2015-2945/): Deserialization in h-fj:mt-phpincgi (high 7.5)
- [CVE-2015-2944](https://insights.sbomify.com/CVE-2015-2944/): Improper Neutralization of Input During Web Page Generation in Apache Sling (medium 4.3)
- [CVE-2015-2943](https://insights.sbomify.com/CVE-2015-2943/): Security feature bypass in honda:moto linc (medium 5.9)
- [CVE-2015-2942](https://insights.sbomify.com/CVE-2015-2942/): Denial of service in mediawiki:mediawiki (high 7.1)
- [CVE-2015-2941](https://insights.sbomify.com/CVE-2015-2941/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2015-2940](https://insights.sbomify.com/CVE-2015-2940/): Cross-site request forgery in mediawiki:checkuser (medium 6.8)
- [CVE-2015-2939](https://insights.sbomify.com/CVE-2015-2939/): Cross-site scripting in mediawiki:scribunto (medium 4.3)
- [CVE-2015-2938](https://insights.sbomify.com/CVE-2015-2938/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2015-2937](https://insights.sbomify.com/CVE-2015-2937/): Denial of service in mediawiki:mediawiki (high 7.1)
- [CVE-2015-2936](https://insights.sbomify.com/CVE-2015-2936/): Denial of service in mediawiki:mediawiki (high 7.1)
- [CVE-2015-2935](https://insights.sbomify.com/CVE-2015-2935/): Security feature bypass in mediawiki:mediawiki (medium 5.0)
- [CVE-2015-2934](https://insights.sbomify.com/CVE-2015-2934/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2015-2933](https://insights.sbomify.com/CVE-2015-2933/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2015-2932](https://insights.sbomify.com/CVE-2015-2932/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2015-2931](https://insights.sbomify.com/CVE-2015-2931/): Cross-site scripting in mediawiki:mediawiki (medium 4.3)
- [CVE-2015-2929](https://insights.sbomify.com/CVE-2015-2929/): Denial of service in Tor (high 7.5)
- [CVE-2015-2928](https://insights.sbomify.com/CVE-2015-2928/): Denial of service in Tor (high 7.5)
- [CVE-2015-2927](https://insights.sbomify.com/CVE-2015-2927/): Denial of service in debian:debian linux (medium 6.5)
- [CVE-2015-2926](https://insights.sbomify.com/CVE-2015-2926/): Cross-site scripting in zoneo-soft:phptraffica (medium 4.3)
- [CVE-2015-2925](https://insights.sbomify.com/CVE-2015-2925/): Security feature bypass in canonical:ubuntu linux (medium 6.9)
- [CVE-2015-2924](https://insights.sbomify.com/CVE-2015-2924/): Other in networkmanager project:networkmanager (low 3.3)
- [CVE-2015-2923](https://insights.sbomify.com/CVE-2015-2923/): Other in freebsd:freebsd (medium 6.5)
- [CVE-2015-2922](https://insights.sbomify.com/CVE-2015-2922/): Other in debian:debian linux (low 3.3)
- [CVE-2015-2918](https://insights.sbomify.com/CVE-2015-2918/): OrientDB Studio web management interface is vulnerable to clickjacking attacks (medium 6.1)
- [CVE-2015-2917](https://insights.sbomify.com/CVE-2015-2917/): Security feature bypass in securifi:almond-2015 firmware (medium 4.3)
- [CVE-2015-2916](https://insights.sbomify.com/CVE-2015-2916/): Cross-site request forgery in securifi:almond-2015 firmware (medium 6.8)
- [CVE-2015-2915](https://insights.sbomify.com/CVE-2015-2915/): Hardcoded credentials in securifi:almond-2015 firmware (high 7.3)
- [CVE-2015-2914](https://insights.sbomify.com/CVE-2015-2914/): Weak cryptography in securifi:almond-2015 firmware (medium 5.0)
- [CVE-2015-2913](https://insights.sbomify.com/CVE-2015-2913/): OrientDB Server Community Edition uses insufficiently random values to generate session IDs (medium 5.9)
- [CVE-2015-2912](https://insights.sbomify.com/CVE-2015-2912/): OrientDB-Server vulnerable to Cross-Site Request Forgery (high 8.8)
- [CVE-2015-2909](https://insights.sbomify.com/CVE-2015-2909/): Misconfiguration in DS2 (critical 9.8)
- [CVE-2015-2908](https://insights.sbomify.com/CVE-2015-2908/): Security feature bypass in Mobile Devices (MDI) OBD-II dongles (critical 9.0)
- [CVE-2015-2907](https://insights.sbomify.com/CVE-2015-2907/): Hardcoded credentials in Mobile Devices (MDI) OBD-II dongles (critical 9.0)
- [CVE-2015-2906](https://insights.sbomify.com/CVE-2015-2906/): Hardcoded credentials in Mobile Devices (MDI) OBD-II dongles (critical 9.0)
- [CVE-2015-2905](https://insights.sbomify.com/CVE-2015-2905/): Cross-site request forgery in actiontec: ncs01 firmware (medium 6.8)
- [CVE-2015-2904](https://insights.sbomify.com/CVE-2015-2904/): Hardcoded credentials in actiontec: ncs01 firmware (high 8.3)
- [CVE-2015-2903](https://insights.sbomify.com/CVE-2015-2903/): Hardcoded credentials in hp:arcsight smartconnectors (medium 6.9)
- [CVE-2015-2902](https://insights.sbomify.com/CVE-2015-2902/): Weak cryptography in hp:arcsight smartconnectors (medium 6.8)
- [CVE-2015-2901](https://insights.sbomify.com/CVE-2015-2901/): Memory corruption in medicomp:medcin engine (medium 6.8)
- [CVE-2015-2900](https://insights.sbomify.com/CVE-2015-2900/): Memory corruption in medicomp:medcin engine (medium 6.8)
- [CVE-2015-2899](https://insights.sbomify.com/CVE-2015-2899/): Memory corruption in medicomp:medcin engine (medium 6.8)
- [CVE-2015-2898](https://insights.sbomify.com/CVE-2015-2898/): Memory corruption in medicomp:medcin engine (medium 6.8)
- [CVE-2015-2897](https://insights.sbomify.com/CVE-2015-2897/): Hardcoded credentials in sierrawireless:aleos (critical 10.0)
- [CVE-2015-2896](https://insights.sbomify.com/CVE-2015-2896/): Information disclosure in idera:uptime infrastructure monitor (medium 5.3)
- [CVE-2015-2895](https://insights.sbomify.com/CVE-2015-2895/): Memory corruption in idera:uptime infrastructure monitor (high 7.3)
- [CVE-2015-2894](https://insights.sbomify.com/CVE-2015-2894/): Memory corruption in idera:uptime infrastructure monitor (medium 5.3)
- [CVE-2015-2890](https://insights.sbomify.com/CVE-2015-2890/): Security feature bypass in dell:bios (medium 6.0)
- [CVE-2015-2889](https://insights.sbomify.com/CVE-2015-2889/): Privilege escalation in Summer Baby Zoom Wifi Monitor & Internet Viewing System (high 8.8)
- [CVE-2015-2888](https://insights.sbomify.com/CVE-2015-2888/): Auth bypass in Summer Baby Zoom Wifi Monitor & Internet Viewing System (critical 9.8)
- [CVE-2015-2887](https://insights.sbomify.com/CVE-2015-2887/): Hardcoded credentials in iBaby M3S (critical 9.8)
- [CVE-2015-2886](https://insights.sbomify.com/CVE-2015-2886/): Information disclosure in iBaby M6 (high 7.5)
- [CVE-2015-2885](https://insights.sbomify.com/CVE-2015-2885/): Hardcoded credentials in Lens Peek-a-View (critical 9.8)
- [CVE-2015-2884](https://insights.sbomify.com/CVE-2015-2884/): Information disclosure in Philips In.Sight B120/37 (high 7.5)
- [CVE-2015-2883](https://insights.sbomify.com/CVE-2015-2883/): Cross-site scripting in Philips In.Sight B120/37 (medium 5.4)
- [CVE-2015-2882](https://insights.sbomify.com/CVE-2015-2882/): Hardcoded credentials in Philips In.Sight B120/37 (critical 9.8)
- [CVE-2015-2881](https://insights.sbomify.com/CVE-2015-2881/): Hardcoded credentials in Gynoii (critical 9.8)
- [CVE-2015-2880](https://insights.sbomify.com/CVE-2015-2880/): Hardcoded credentials in TRENDnet WiFi Baby Cam TV-IP743SIC (high 8.8)
- [CVE-2015-2878](https://insights.sbomify.com/CVE-2015-2878/): Cross-site request forgery in watchguard:hawkeye g (high 8.8)
- [CVE-2015-2877](https://insights.sbomify.com/CVE-2015-2877/): Information disclosure in linux:linux kernel (low 3.3)
- [CVE-2015-2876](https://insights.sbomify.com/CVE-2015-2876/): File upload in lacie:lac9000436u firmware (high 8.8)
- [CVE-2015-2875](https://insights.sbomify.com/CVE-2015-2875/): Path traversal in lacie:lac9000436u firmware (high 7.5)
- [CVE-2015-2874](https://insights.sbomify.com/CVE-2015-2874/): Hardcoded credentials in lacie:lac9000436u firmware (critical 9.8)
- [CVE-2015-2873](https://insights.sbomify.com/CVE-2015-2873/): Missing authorization in trendmicro:deep discovery inspector (medium 5.5)
- [CVE-2015-2872](https://insights.sbomify.com/CVE-2015-2872/): Cross-site scripting in trendmicro:deep discovery inspector (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/54/