# Vulnerabilities published in 2015


- [CVE-2015-2871](https://insights.sbomify.com/CVE-2015-2871/): Auth bypass in chiyu:bf-660c (high 7.5)
- [CVE-2015-2870](https://insights.sbomify.com/CVE-2015-2870/): Cross-site scripting in chiyutw:bf-630 (medium 4.3)
- [CVE-2015-2869](https://insights.sbomify.com/CVE-2015-2869/): Memory corruption in ghisler:total commander (medium 5.0)
- [CVE-2015-2868](https://insights.sbomify.com/CVE-2015-2868/): Memory corruption in ComfortLink II SCC firmware (critical 9.8)
- [CVE-2015-2867](https://insights.sbomify.com/CVE-2015-2867/): Hardcoded credentials in ComfortLink II SCC firmware (critical 9.8)
- [CVE-2015-2866](https://insights.sbomify.com/CVE-2015-2866/): SQL injection in grandstream:gxv3611 hd firmware (high 7.5)
- [CVE-2015-2864](https://insights.sbomify.com/CVE-2015-2864/): Weak cryptography in retrospect:retrospect (medium 5.0)
- [CVE-2015-2863](https://insights.sbomify.com/CVE-2015-2863/): Open redirect in kaseya:virtual system administrator (medium 4.3)
- [CVE-2015-2862](https://insights.sbomify.com/CVE-2015-2862/): Path traversal in kaseya:virtual system administrator (medium 4.0)
- [CVE-2015-2861](https://insights.sbomify.com/CVE-2015-2861/): Cross-site request forgery in vestacp:vesta control panel (medium 6.8)
- [CVE-2015-2860](https://insights.sbomify.com/CVE-2015-2860/): Path traversal in avigilon:avigilon control center (high 7.8)
- [CVE-2015-2859](https://insights.sbomify.com/CVE-2015-2859/): Weak cryptography in mcafee:epolicy orchestrator (medium 5.8)
- [CVE-2015-2858](https://insights.sbomify.com/CVE-2015-2858/): Missing authorization in datalex:airline booking software (high 7.5)
- [CVE-2015-2857](https://insights.sbomify.com/CVE-2015-2857/): Command injection in accellion:file transfer appliance (critical 9.8)
- [CVE-2015-2856](https://insights.sbomify.com/CVE-2015-2856/): Path traversal in accellion:file transfer appliance (high 7.5)
- [CVE-2015-2855](https://insights.sbomify.com/CVE-2015-2855/): Information disclosure in blue coat:ssl visibility appliance sv1800 firmware (medium 4.3)
- [CVE-2015-2854](https://insights.sbomify.com/CVE-2015-2854/): Other in blue coat:ssl visibility appliance sv1800 firmware (medium 4.3)
- [CVE-2015-2853](https://insights.sbomify.com/CVE-2015-2853/): Auth bypass in blue coat:ssl visibility appliance sv1800 firmware (medium 6.8)
- [CVE-2015-2852](https://insights.sbomify.com/CVE-2015-2852/): Cross-site request forgery in blue coat:ssl visibility appliance sv1800 firmware (medium 4.3)
- [CVE-2015-2851](https://insights.sbomify.com/CVE-2015-2851/): Privilege escalation in synology:cloud station (medium 6.8)
- [CVE-2015-2850](https://insights.sbomify.com/CVE-2015-2850/): Cross-site scripting in antlabs:inngate ig 3.01 e (medium 4.3)
- [CVE-2015-2849](https://insights.sbomify.com/CVE-2015-2849/): SQL injection in antlabs:inngate ig 3.01 e (high 7.5)
- [CVE-2015-2848](https://insights.sbomify.com/CVE-2015-2848/): Cross-site request forgery in honeywell:tuxedo touch (medium 6.8)
- [CVE-2015-2847](https://insights.sbomify.com/CVE-2015-2847/): Auth bypass in honeywell:tuxedo touch (medium 5.0)
- [CVE-2015-2846](https://insights.sbomify.com/CVE-2015-2846/): Command injection in bittorrent:sync (critical 9.3)
- [CVE-2015-2845](https://insights.sbomify.com/CVE-2015-2845/): Command injection in goautodial:goadmin ce (critical 10.0)
- [CVE-2015-2844](https://insights.sbomify.com/CVE-2015-2844/): Command injection in goautodial:goadmin ce (critical 10.0)
- [CVE-2015-2843](https://insights.sbomify.com/CVE-2015-2843/): SQL injection in goautodial:goadmin ce (high 7.5)
- [CVE-2015-2842](https://insights.sbomify.com/CVE-2015-2842/): File upload in goautodial:goadmin ce (critical 10.0)
- [CVE-2015-2841](https://insights.sbomify.com/CVE-2015-2841/): Security feature bypass in citrix:netscaler (medium 5.0)
- [CVE-2015-2840](https://insights.sbomify.com/CVE-2015-2840/): Cross-site scripting in citrix:netscaler (medium 4.3)
- [CVE-2015-2839](https://insights.sbomify.com/CVE-2015-2839/): Cross-site scripting in citrix:netscaler (medium 4.3)
- [CVE-2015-2838](https://insights.sbomify.com/CVE-2015-2838/): Cross-site request forgery in citrix:netscaler (medium 6.8)
- [CVE-2015-2831](https://insights.sbomify.com/CVE-2015-2831/): Memory corruption in das watchdog project:das watchdog (high 7.2)
- [CVE-2015-2830](https://insights.sbomify.com/CVE-2015-2830/): Security feature bypass in canonical:ubuntu linux (low 1.9)
- [CVE-2015-2829](https://insights.sbomify.com/CVE-2015-2829/): Denial of service in citrix:netscaler application delivery controller firmware (high 7.8)
- [CVE-2015-2828](https://insights.sbomify.com/CVE-2015-2828/): Deserialization in broadcom:spectrum (critical 9.0)
- [CVE-2015-2827](https://insights.sbomify.com/CVE-2015-2827/): Cross-site scripting in broadcom:spectrum (low 3.5)
- [CVE-2015-2826](https://insights.sbomify.com/CVE-2015-2826/): Information disclosure in simple ads manager project:simple ads manager (medium 5.3)
- [CVE-2015-2825](https://insights.sbomify.com/CVE-2015-2825/): File upload in simple ads manager project:simple ads manager (high 7.5)
- [CVE-2015-2824](https://insights.sbomify.com/CVE-2015-2824/): SQL injection in simple ads manager project:simple ads manager (high 7.5)
- [CVE-2015-2823](https://insights.sbomify.com/CVE-2015-2823/): Auth bypass in siemens:wincc (medium 6.8)
- [CVE-2015-2822](https://insights.sbomify.com/CVE-2015-2822/): Denial of service in siemens:wincc (medium 4.3)
- [CVE-2015-2821](https://insights.sbomify.com/CVE-2015-2821/): Missing authorization in typo3:neos (medium 6.5)
- [CVE-2015-2820](https://insights.sbomify.com/CVE-2015-2820/): Memory corruption in sap:afaria (medium 5.0)
- [CVE-2015-2819](https://insights.sbomify.com/CVE-2015-2819/): Denial of service in sap:sql anywhere (medium 5.0)
- [CVE-2015-2818](https://insights.sbomify.com/CVE-2015-2818/): XML external entity in sap:mobile platform (medium 5.0)
- [CVE-2015-2817](https://insights.sbomify.com/CVE-2015-2817/): Information disclosure in sap:netweaver (medium 5.0)
- [CVE-2015-2816](https://insights.sbomify.com/CVE-2015-2816/): Missing authorization in sap:afaria (high 7.5)
- [CVE-2015-2815](https://insights.sbomify.com/CVE-2015-2815/): Memory corruption in sap:netweaver (medium 6.5)
- [CVE-2015-2814](https://insights.sbomify.com/CVE-2015-2814/): Missing authorization in sap:clinical task tracker (medium 6.4)
- [CVE-2015-2813](https://insights.sbomify.com/CVE-2015-2813/): XML external entity in sap:mobile platform (medium 5.0)
- [CVE-2015-2812](https://insights.sbomify.com/CVE-2015-2812/): XML external entity in sap:netweaver enterprise portal (medium 5.0)
- [CVE-2015-2811](https://insights.sbomify.com/CVE-2015-2811/): XML external entity in sap:netweaver enterprise portal (medium 5.0)
- [CVE-2015-2810](https://insights.sbomify.com/CVE-2015-2810/): Integer overflow in hancom:hanword viewer 2007 (high 7.5)
- [CVE-2015-2809](https://insights.sbomify.com/CVE-2015-2809/): Information disclosure in synology:diskstation manager (medium 5.0)
- [CVE-2015-2808](https://insights.sbomify.com/CVE-2015-2808/): Weak cryptography in canonical:ubuntu linux (low 3.7)
- [CVE-2015-2807](https://insights.sbomify.com/CVE-2015-2807/): Cross-site scripting in documentcloud:navis documentcloud (medium 4.3)
- [CVE-2015-2806](https://insights.sbomify.com/CVE-2015-2806/): Memory corruption in canonical:ubuntu linux (critical 10.0)
- [CVE-2015-2805](https://insights.sbomify.com/CVE-2015-2805/): Cross-site request forgery in alcatel-lucent:omniswitch firmware (medium 6.8)
- [CVE-2015-2804](https://insights.sbomify.com/CVE-2015-2804/): Weak cryptography in alcatel-lucent:omniswitch firmware (medium 4.3)
- [CVE-2015-2803](https://insights.sbomify.com/CVE-2015-2803/): SQL injection in akronymmanager project:akronymmanager (medium 6.0)
- [CVE-2015-2802](https://insights.sbomify.com/CVE-2015-2802/): Weak cryptography in hp:asset manager (high 7.5)
- [CVE-2015-2800](https://insights.sbomify.com/CVE-2015-2800/): Denial of service in huawei:s5300 firmware (high 7.5)
- [CVE-2015-2798](https://insights.sbomify.com/CVE-2015-2798/): SQL injection in web-dorado:contact form maker (critical 9.8)
- [CVE-2015-2797](https://insights.sbomify.com/CVE-2015-2797/): Memory corruption in airties:air firmware (critical 10.0)
- [CVE-2015-2796](https://insights.sbomify.com/CVE-2015-2796/): Cross-site scripting in projectpier:projectpier (medium 6.1)
- [CVE-2015-2794](https://insights.sbomify.com/CVE-2015-2794/): The installation wizard in DotNetNuke (DNN) allows privilege escalation (critical 9.8)
- [CVE-2015-2793](https://insights.sbomify.com/CVE-2015-2793/): Cross-site scripting in ikiwiki (medium 6.1)
- [CVE-2015-2792](https://insights.sbomify.com/CVE-2015-2792/): Cross-site request forgery in wpml:wpml (high 7.5)
- [CVE-2015-2791](https://insights.sbomify.com/CVE-2015-2791/): Missing authorization in wpml:wpml (medium 6.4)
- [CVE-2015-2790](https://insights.sbomify.com/CVE-2015-2790/): Memory corruption in foxitsoftware:enterprise reader (medium 4.3)
- [CVE-2015-2789](https://insights.sbomify.com/CVE-2015-2789/): Privilege escalation in foxitsoftware:foxit reader (medium 4.4)
- [CVE-2015-2788](https://insights.sbomify.com/CVE-2015-2788/): Memory corruption in debian:dbd-firebird (critical 10.0)
- [CVE-2015-2787](https://insights.sbomify.com/CVE-2015-2787/): Use after free in apple:mac os x (high 7.5)
- [CVE-2015-2786](https://insights.sbomify.com/CVE-2015-2786/): Other in mybb:mybb (critical 10.0)
- [CVE-2015-2785](https://insights.sbomify.com/CVE-2015-2785/): Memory corruption in gnome:byzanz (high 7.5)
- [CVE-2015-2784](https://insights.sbomify.com/CVE-2015-2784/): papercrop does not properly handle crop input (critical 9.8)
- [CVE-2015-2783](https://insights.sbomify.com/CVE-2015-2783/): Memory corruption in apple:mac os x (medium 5.8)
- [CVE-2015-2782](https://insights.sbomify.com/CVE-2015-2782/): Memory corruption in arj software:arj archiver (high 7.5)
- [CVE-2015-2781](https://insights.sbomify.com/CVE-2015-2781/): Cross-site scripting in hotspot express:hotex billing manager (medium 4.3)
- [CVE-2015-2780](https://insights.sbomify.com/CVE-2015-2780/): File upload in berta:berta cms (critical 9.8)
- [CVE-2015-2779](https://insights.sbomify.com/CVE-2015-2779/): Denial of service in quassel-irc:quassel (medium 5.0)
- [CVE-2015-2778](https://insights.sbomify.com/CVE-2015-2778/): Denial of service in quassel-irc:quassel (medium 5.0)
- [CVE-2015-2776](https://insights.sbomify.com/CVE-2015-2776/): Denial of service in debian:debian linux (medium 4.3)
- [CVE-2015-2775](https://insights.sbomify.com/CVE-2015-2775/): Path traversal in canonical:ubuntu linux (high 7.6)
- [CVE-2015-2774](https://insights.sbomify.com/CVE-2015-2774/): Weak cryptography in erlang:erlang\/otp (medium 5.9)
- [CVE-2015-2773](https://insights.sbomify.com/CVE-2015-2773/): Information disclosure in websense:v-series appliances (medium 5.0)
- [CVE-2015-2772](https://insights.sbomify.com/CVE-2015-2772/): File upload in websense:v-series appliances (high 7.5)
- [CVE-2015-2771](https://insights.sbomify.com/CVE-2015-2771/): Information disclosure in websense:triton ap email (medium 5.0)
- [CVE-2015-2770](https://insights.sbomify.com/CVE-2015-2770/): Cross-site request forgery in websense:v-series appliances (medium 6.8)
- [CVE-2015-2769](https://insights.sbomify.com/CVE-2015-2769/): Cross-site request forgery in websense:triton ap email (medium 6.8)
- [CVE-2015-2768](https://insights.sbomify.com/CVE-2015-2768/): Cross-site scripting in websense:triton ap email (medium 4.3)
- [CVE-2015-2767](https://insights.sbomify.com/CVE-2015-2767/): Other in websense:triton ap email (critical 10.0)
- [CVE-2015-2766](https://insights.sbomify.com/CVE-2015-2766/): Other in websense:triton ap email (medium 5.0)
- [CVE-2015-2765](https://insights.sbomify.com/CVE-2015-2765/): Other in websense:triton ap email (medium 4.3)
- [CVE-2015-2764](https://insights.sbomify.com/CVE-2015-2764/): Cross-site scripting in websense:triton ap data (medium 4.3)
- [CVE-2015-2763](https://insights.sbomify.com/CVE-2015-2763/): Other in websense:triton ap email (critical 10.0)
- [CVE-2015-2762](https://insights.sbomify.com/CVE-2015-2762/): Information disclosure in websense:triton ap web (medium 5.0)
- [CVE-2015-2761](https://insights.sbomify.com/CVE-2015-2761/): Cross-site scripting in websense:triton ap web (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/55/