Vulnerabilities published in 2015
8,124 vulnerabilities were published in 2015: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 60 of 82.
- CVE-2015-2308 Symfony Vulnerable to PHP Eval Injection
- CVE-2015-2305 Integer overflow in canonical:ubuntu linux
- CVE-2015-2304 Path traversal in canonical:ubuntu linux
- CVE-2015-2301 Use after free in apple:mac os x
- CVE-2015-2298 Information disclosure in etherpad:etherpad
- CVE-2015-2297 Null dereference in libcsoap project:libcsoap
- CVE-2015-2296 Python Requests Session Fixation
- CVE-2015-2295 Cross-site request forgery in netgate:pfsense
- CVE-2015-2294 Cross-site scripting in netgate:pfsense
- CVE-2015-2293 Cross-site request forgery in yoast:wordpress seo
- CVE-2015-2292 SQL injection in yoast:wordpress seo
- CVE-2015-2291 Intel Ethernet Diagnostics Driver for Windows Denial-of-Service
- CVE-2015-2289 Cross-site scripting in s9y:serendipity
- CVE-2015-2286 Information disclosure in edx:open edx
- CVE-2015-2285 Privilege escalation in ubuntu:upstart
- CVE-2015-2284 Privilege escalation in solarwinds:firewall security manager
- CVE-2015-2282 Memory corruption in sap:gui
- CVE-2015-2281 Memory corruption in fortinet:single sign on
- CVE-2015-2280 Command injection in airlink101:skyipcam1620w wireless n mpeg4 3gpp firmware
- CVE-2015-2279 Command injection in airlive:bu-2015 firmware
- CVE-2015-2278 Memory corruption in sap:gui
- CVE-2015-2275 Cross-site scripting in wotlab:community gallery
- CVE-2015-2273 Moodle cross-site scripting (XSS) vulnerability
- CVE-2015-2272 Moodle allows attackers to bypass a forced-password-change requirement
- CVE-2015-2271 Moodle does not consider the moodle/tag:flag capability
- CVE-2015-2270 Moodle allows attackers to obtain sensitive course information
- CVE-2015-2269 Moodle XSS Vulnerability
- CVE-2015-2268 Moodle allows attackers to cause a denial of service
- CVE-2015-2267 Moodle allows attackers to extract archives to arbitrary directories
- CVE-2015-2266 Moodle allows attackers to obtain sensitive personal-contact and unread-message-count information
- CVE-2015-2265 Command injection in canonical:ubuntu linux
- CVE-2015-2264 Other in telerik:analytics monitor library
- CVE-2015-2263 Misconfiguration in cloudera:cloudera manager
- CVE-2015-2255 Denial of service in huawei:ar1220 firmware
- CVE-2015-2254 Information disclosure in huawei:oceanstor uds firmware
- CVE-2015-2253 Information disclosure in huawei:oceanstor uds firmware
- CVE-2015-2252 Code injection in huawei:oceanstor uds firmware
- CVE-2015-2251 Information disclosure in huawei:oceanstor uds firmware
- CVE-2015-2250 Cross-site scripting in concrete5:concrete5
- CVE-2015-2249 Cross-site scripting in synacor:zimbra collaboration server
- CVE-2015-2248 Cross-site request forgery in sonicwall:remote access firmware
- CVE-2015-2247 Other in boosted:boosted boards
- CVE-2015-2246 Information disclosure in P7-L10 V100R001C00B136 and earlier versions
- CVE-2015-2245 Denial of service in huawei:p7-l09 firmware
- CVE-2015-2244 Cross-site scripting in webshophun:webshop hun
- CVE-2015-2243 Path traversal in webshophun:webshop hun
- CVE-2015-2242 SQL injection in webshophun:webshop hun
- CVE-2015-2241 Django Cross-site Scripting Vulnerability
- CVE-2015-2239 Security feature bypass in google:chrome
- CVE-2015-2238 Other in canonical:ubuntu linux
- CVE-2015-2237 SQL injection in betster project:betster
- CVE-2015-2234 Race condition in lenovo:system update
- CVE-2015-2233 Security feature bypass in lenovo:system update
- CVE-2015-2230 Cross-site scripting in synacor:zimbra collaboration server
- CVE-2015-2223 Cross-site scripting in palo alto networks:traps
- CVE-2015-2222 Denial of service in canonical:ubuntu linux
- CVE-2015-2221 Denial of service in canonical:ubuntu linux
- CVE-2015-2220 Cross-site scripting in ninjaforms:ninja forms
- CVE-2015-2219 Privilege escalation in lenovo:system update
- CVE-2015-2218 Cross-site scripting in magic hills:wonderplugin audio player
- CVE-2015-2217 Cross-site scripting in myupb:ultimate php board
- CVE-2015-2216 SQL injection in photocati media:photocrati
- CVE-2015-2215 Open redirect in services single sign-on server helper project:services single sign-on server helper
- CVE-2015-2214 Information disclosure in netcat:netcat
- CVE-2015-2213 SQL injection in wordpress:wordpress
- CVE-2015-2210 Command injection in epicor:crs retail store
- CVE-2015-2209 Information disclosure in dlguard:dlguard
- CVE-2015-2208 Command injection in avinu:phpmoadmin
- CVE-2015-2207 Cross-site scripting in netcracker:resource management system
- CVE-2015-2206 Information disclosure in fedoraproject:fedora
- CVE-2015-2204 Missing authorization in evergreen-ils:evergreen
- CVE-2015-2203 Information disclosure in evergreen-ils:evergreen
- CVE-2015-2202 Privilege escalation in arubanetworks:airwave
- CVE-2015-2201 Command injection in arubanetworks:airwave
- CVE-2015-2199 SQL injection in wonderplugin:audio player
- CVE-2015-2198 Cross-site scripting in beehive forum:beehive forum
- CVE-2015-2197 Cross-site scripting in entity api project:entity api
- CVE-2015-2196 SQL injection in web-dorado:spider calendar
- CVE-2015-2195 Cross-site scripting in wp media cleaner project:wp media cleaner
- CVE-2015-2194 File upload in digitalnature:fusion
- CVE-2015-2192 Integer overflow in opensuse:opensuse
- CVE-2015-2191 Integer overflow in debian:debian linux
- CVE-2015-2190 Denial of service in opensuse:opensuse
- CVE-2015-2189 Memory corruption in debian:debian linux
- CVE-2015-2188 Memory corruption in debian:debian linux
- CVE-2015-2187 Memory corruption in opensuse:opensuse
- CVE-2015-2186 Misconfiguration in edx:configuration
- CVE-2015-2184 Information disclosure in ajsquare:zeuscart
- CVE-2015-2183 SQL injection in zeuscart:zeuscart
- CVE-2015-2182 Cross-site scripting in ajsquare:zeuscart
- CVE-2015-2181 Memory corruption in roundcube:webmail
- CVE-2015-2180 Command injection in roundcube:webmail
- CVE-2015-2179 xaviershay-dm-rails Gem for Ruby exposes sensitive information via the process table
- CVE-2015-2177 Denial of service in siemens:simatic s7-300 cpu
- CVE-2015-2172 Missing authorization in dokuwiki:dokuwiki
- CVE-2015-2171 Slim vulnerable to PHP object injection
- CVE-2015-2170 Denial of service in canonical:ubuntu linux
- CVE-2015-2169 Cross-site scripting in zohocorp:manageengine assetexplorer
- CVE-2015-2167 Open redirect in ericsson:drutt mobile service delivery platform
- CVE-2015-2166 Path traversal in ericsson:drutt mobile service delivery platform