Vulnerabilities published in 2015
8,124 vulnerabilities were published in 2015: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 55 of 82.
- CVE-2015-2871 Auth bypass in chiyu:bf-660c
- CVE-2015-2870 Cross-site scripting in chiyutw:bf-630
- CVE-2015-2869 Memory corruption in ghisler:total commander
- CVE-2015-2868 Memory corruption in ComfortLink II SCC firmware
- CVE-2015-2867 Hardcoded credentials in ComfortLink II SCC firmware
- CVE-2015-2866 SQL injection in grandstream:gxv3611 hd firmware
- CVE-2015-2864 Weak cryptography in retrospect:retrospect
- CVE-2015-2863 Open redirect in kaseya:virtual system administrator
- CVE-2015-2862 Path traversal in kaseya:virtual system administrator
- CVE-2015-2861 Cross-site request forgery in vestacp:vesta control panel
- CVE-2015-2860 Path traversal in avigilon:avigilon control center
- CVE-2015-2859 Weak cryptography in mcafee:epolicy orchestrator
- CVE-2015-2858 Missing authorization in datalex:airline booking software
- CVE-2015-2857 Command injection in accellion:file transfer appliance
- CVE-2015-2856 Path traversal in accellion:file transfer appliance
- CVE-2015-2855 Information disclosure in blue coat:ssl visibility appliance sv1800 firmware
- CVE-2015-2854 Other in blue coat:ssl visibility appliance sv1800 firmware
- CVE-2015-2853 Auth bypass in blue coat:ssl visibility appliance sv1800 firmware
- CVE-2015-2852 Cross-site request forgery in blue coat:ssl visibility appliance sv1800 firmware
- CVE-2015-2851 Privilege escalation in synology:cloud station
- CVE-2015-2850 Cross-site scripting in antlabs:inngate ig 3.01 e
- CVE-2015-2849 SQL injection in antlabs:inngate ig 3.01 e
- CVE-2015-2848 Cross-site request forgery in honeywell:tuxedo touch
- CVE-2015-2847 Auth bypass in honeywell:tuxedo touch
- CVE-2015-2846 Command injection in bittorrent:sync
- CVE-2015-2845 Command injection in goautodial:goadmin ce
- CVE-2015-2844 Command injection in goautodial:goadmin ce
- CVE-2015-2843 SQL injection in goautodial:goadmin ce
- CVE-2015-2842 File upload in goautodial:goadmin ce
- CVE-2015-2841 Security feature bypass in citrix:netscaler
- CVE-2015-2840 Cross-site scripting in citrix:netscaler
- CVE-2015-2839 Cross-site scripting in citrix:netscaler
- CVE-2015-2838 Cross-site request forgery in citrix:netscaler
- CVE-2015-2831 Memory corruption in das watchdog project:das watchdog
- CVE-2015-2830 Security feature bypass in canonical:ubuntu linux
- CVE-2015-2829 Denial of service in citrix:netscaler application delivery controller firmware
- CVE-2015-2828 Deserialization in broadcom:spectrum
- CVE-2015-2827 Cross-site scripting in broadcom:spectrum
- CVE-2015-2826 Information disclosure in simple ads manager project:simple ads manager
- CVE-2015-2825 File upload in simple ads manager project:simple ads manager
- CVE-2015-2824 SQL injection in simple ads manager project:simple ads manager
- CVE-2015-2823 Auth bypass in siemens:wincc
- CVE-2015-2822 Denial of service in siemens:wincc
- CVE-2015-2821 Missing authorization in typo3:neos
- CVE-2015-2820 Memory corruption in sap:afaria
- CVE-2015-2819 Denial of service in sap:sql anywhere
- CVE-2015-2818 XML external entity in sap:mobile platform
- CVE-2015-2817 Information disclosure in sap:netweaver
- CVE-2015-2816 Missing authorization in sap:afaria
- CVE-2015-2815 Memory corruption in sap:netweaver
- CVE-2015-2814 Missing authorization in sap:clinical task tracker
- CVE-2015-2813 XML external entity in sap:mobile platform
- CVE-2015-2812 XML external entity in sap:netweaver enterprise portal
- CVE-2015-2811 XML external entity in sap:netweaver enterprise portal
- CVE-2015-2810 Integer overflow in hancom:hanword viewer 2007
- CVE-2015-2809 Information disclosure in synology:diskstation manager
- CVE-2015-2808 Weak cryptography in canonical:ubuntu linux
- CVE-2015-2807 Cross-site scripting in documentcloud:navis documentcloud
- CVE-2015-2806 Memory corruption in canonical:ubuntu linux
- CVE-2015-2805 Cross-site request forgery in alcatel-lucent:omniswitch firmware
- CVE-2015-2804 Weak cryptography in alcatel-lucent:omniswitch firmware
- CVE-2015-2803 SQL injection in akronymmanager project:akronymmanager
- CVE-2015-2802 Weak cryptography in hp:asset manager
- CVE-2015-2800 Denial of service in huawei:s5300 firmware
- CVE-2015-2798 SQL injection in web-dorado:contact form maker
- CVE-2015-2797 Memory corruption in airties:air firmware
- CVE-2015-2796 Cross-site scripting in projectpier:projectpier
- CVE-2015-2794 The installation wizard in DotNetNuke (DNN) allows privilege escalation
- CVE-2015-2793 Cross-site scripting in ikiwiki
- CVE-2015-2792 Cross-site request forgery in wpml:wpml
- CVE-2015-2791 Missing authorization in wpml:wpml
- CVE-2015-2790 Memory corruption in foxitsoftware:enterprise reader
- CVE-2015-2789 Privilege escalation in foxitsoftware:foxit reader
- CVE-2015-2788 Memory corruption in debian:dbd-firebird
- CVE-2015-2787 Use after free in apple:mac os x
- CVE-2015-2786 Other in mybb:mybb
- CVE-2015-2785 Memory corruption in gnome:byzanz
- CVE-2015-2784 papercrop does not properly handle crop input
- CVE-2015-2783 Memory corruption in apple:mac os x
- CVE-2015-2782 Memory corruption in arj software:arj archiver
- CVE-2015-2781 Cross-site scripting in hotspot express:hotex billing manager
- CVE-2015-2780 File upload in berta:berta cms
- CVE-2015-2779 Denial of service in quassel-irc:quassel
- CVE-2015-2778 Denial of service in quassel-irc:quassel
- CVE-2015-2776 Denial of service in debian:debian linux
- CVE-2015-2775 Path traversal in canonical:ubuntu linux
- CVE-2015-2774 Weak cryptography in erlang:erlang\/otp
- CVE-2015-2773 Information disclosure in websense:v-series appliances
- CVE-2015-2772 File upload in websense:v-series appliances
- CVE-2015-2771 Information disclosure in websense:triton ap email
- CVE-2015-2770 Cross-site request forgery in websense:v-series appliances
- CVE-2015-2769 Cross-site request forgery in websense:triton ap email
- CVE-2015-2768 Cross-site scripting in websense:triton ap email
- CVE-2015-2767 Other in websense:triton ap email
- CVE-2015-2766 Other in websense:triton ap email
- CVE-2015-2765 Other in websense:triton ap email
- CVE-2015-2764 Cross-site scripting in websense:triton ap data
- CVE-2015-2763 Other in websense:triton ap email
- CVE-2015-2762 Information disclosure in websense:triton ap web
- CVE-2015-2761 Cross-site scripting in websense:triton ap web