# Vulnerabilities published in 2015


- [CVE-2015-2165](https://insights.sbomify.com/CVE-2015-2165/): Cross-site scripting in ericsson:drutt mobile service delivery platform (medium 4.3)
- [CVE-2015-2158](https://insights.sbomify.com/CVE-2015-2158/): Memory corruption in pngcrush project:pngcrush (high 7.8)
- [CVE-2015-2157](https://insights.sbomify.com/CVE-2015-2157/): Information disclosure in debian:debian linux (low 2.1)
- [CVE-2015-2156](https://insights.sbomify.com/CVE-2015-2156/): Information Exposure in Netty (high 7.5)
- [CVE-2015-2155](https://insights.sbomify.com/CVE-2015-2155/): Memory corruption in debian:debian linux (high 7.5)
- [CVE-2015-2154](https://insights.sbomify.com/CVE-2015-2154/): Memory corruption in tcpdump:tcpdump (medium 5.0)
- [CVE-2015-2153](https://insights.sbomify.com/CVE-2015-2153/): Memory corruption in tcpdump:tcpdump (medium 5.0)
- [CVE-2015-2152](https://insights.sbomify.com/CVE-2015-2152/): Misconfiguration in fedoraproject:fedora (low 1.9)
- [CVE-2015-2151](https://insights.sbomify.com/CVE-2015-2151/): Memory corruption in debian:debian linux (high 7.2)
- [CVE-2015-2150](https://insights.sbomify.com/CVE-2015-2150/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2015-2149](https://insights.sbomify.com/CVE-2015-2149/): Cross-site scripting in mybb:mybb (low 3.5)
- [CVE-2015-2148](https://insights.sbomify.com/CVE-2015-2148/): Cross-site scripting in phpbugtracker project:phpbugtracker (medium 4.8)
- [CVE-2015-2147](https://insights.sbomify.com/CVE-2015-2147/): SQL injection in phpbugtracker project:phpbugtracker (critical 9.8)
- [CVE-2015-2146](https://insights.sbomify.com/CVE-2015-2146/): SQL injection in phpbugtracker project:phpbugtracker (critical 9.8)
- [CVE-2015-2145](https://insights.sbomify.com/CVE-2015-2145/): Cross-site scripting in phpbugtracker project:phpbugtracker (medium 4.8)
- [CVE-2015-2144](https://insights.sbomify.com/CVE-2015-2144/): Cross-site scripting in phpbugtracker project:phpbugtracker (medium 4.8)
- [CVE-2015-2143](https://insights.sbomify.com/CVE-2015-2143/): Cross-site request forgery in phpbugtracker project:phpbugtracker (high 8.8)
- [CVE-2015-2142](https://insights.sbomify.com/CVE-2015-2142/): Cross-site request forgery in phpbugtracker project:phpbugtracker (high 8.0)
- [CVE-2015-2141](https://insights.sbomify.com/CVE-2015-2141/): Weak cryptography in cryptopp:crypto\+\+ library (medium 5.0)
- [CVE-2015-2140](https://insights.sbomify.com/CVE-2015-2140/): Other in hp:systems insight manager (medium 6.5)
- [CVE-2015-2139](https://insights.sbomify.com/CVE-2015-2139/): Information disclosure in hp:systems insight manager (medium 4.0)
- [CVE-2015-2137](https://insights.sbomify.com/CVE-2015-2137/): Other in hp:operations manager i (critical 10.0)
- [CVE-2015-2136](https://insights.sbomify.com/CVE-2015-2136/): Missing authorization in hp:arcsight logger (medium 4.0)
- [CVE-2015-2135](https://insights.sbomify.com/CVE-2015-2135/): Other in hp:intelligent provisioning (critical 10.0)
- [CVE-2015-2134](https://insights.sbomify.com/CVE-2015-2134/): Cross-site request forgery in hp:system management homepage (medium 6.0)
- [CVE-2015-2132](https://insights.sbomify.com/CVE-2015-2132/): Privilege escalation in hp:operations manager i (medium 4.4)
- [CVE-2015-2126](https://insights.sbomify.com/CVE-2015-2126/): Privilege escalation in hp:hp-ux (high 7.2)
- [CVE-2015-2125](https://insights.sbomify.com/CVE-2015-2125/): Security feature bypass in hp:webinspect (medium 4.0)
- [CVE-2015-2124](https://insights.sbomify.com/CVE-2015-2124/): Privilege escalation in hp:smart zero core (high 7.2)
- [CVE-2015-2123](https://insights.sbomify.com/CVE-2015-2123/): Privilege escalation in hp:nonstop safeguard security (critical 9.0)
- [CVE-2015-2122](https://insights.sbomify.com/CVE-2015-2122/): Denial of service in hp:sdn van controller (high 7.8)
- [CVE-2015-2121](https://insights.sbomify.com/CVE-2015-2121/): Path traversal in hp:network virtualization (high 7.8)
- [CVE-2015-2120](https://insights.sbomify.com/CVE-2015-2120/): Privilege escalation in hp:sitescope (high 8.7)
- [CVE-2015-2118](https://insights.sbomify.com/CVE-2015-2118/): Information disclosure in hp:access control (medium 4.0)
- [CVE-2015-2117](https://insights.sbomify.com/CVE-2015-2117/): Auth bypass in hp:tippingpoint security management system (high 7.5)
- [CVE-2015-2116](https://insights.sbomify.com/CVE-2015-2116/): Other in hp:storage data protector (critical 9.0)
- [CVE-2015-2115](https://insights.sbomify.com/CVE-2015-2115/): Information disclosure in hp:capture and route software (low 2.7)
- [CVE-2015-2114](https://insights.sbomify.com/CVE-2015-2114/): Other in hp:support solution framework (medium 6.8)
- [CVE-2015-2113](https://insights.sbomify.com/CVE-2015-2113/): Other in hp:easy tools (critical 10.0)
- [CVE-2015-2112](https://insights.sbomify.com/CVE-2015-2112/): Other in hp:easy tools (critical 9.0)
- [CVE-2015-2111](https://insights.sbomify.com/CVE-2015-2111/): Information disclosure in hp:intelligent provisioning (low 2.1)
- [CVE-2015-2110](https://insights.sbomify.com/CVE-2015-2110/): Memory corruption in hp:loadrunner (critical 10.0)
- [CVE-2015-2109](https://insights.sbomify.com/CVE-2015-2109/): Auth bypass in hp:operations orchestration (high 7.5)
- [CVE-2015-2108](https://insights.sbomify.com/CVE-2015-2108/): Information disclosure in hp:operations orchestration (low 3.5)
- [CVE-2015-2107](https://insights.sbomify.com/CVE-2015-2107/): Command injection in hp:operations manager i management pack (medium 6.8)
- [CVE-2015-2106](https://insights.sbomify.com/CVE-2015-2106/): Security feature bypass in hp:integrated lights-out 2 firmware (medium 6.4)
- [CVE-2015-2103](https://insights.sbomify.com/CVE-2015-2103/): Cross-site scripting in cosmoshop:cosmoshop (medium 4.3)
- [CVE-2015-2102](https://insights.sbomify.com/CVE-2015-2102/): SQL injection in clip-bucket:clipbucket (high 7.5)
- [CVE-2015-2101](https://insights.sbomify.com/CVE-2015-2101/): Cross-site scripting in impliedbydesign:navigate (medium 4.3)
- [CVE-2015-2100](https://insights.sbomify.com/CVE-2015-2100/): Memory corruption in webgate:control center (high 8.8)
- [CVE-2015-2099](https://insights.sbomify.com/CVE-2015-2099/): Memory corruption in webgateinc:control center (high 8.8)
- [CVE-2015-2098](https://insights.sbomify.com/CVE-2015-2098/): Memory corruption in webgateinc:edvr manager (high 8.8)
- [CVE-2015-2097](https://insights.sbomify.com/CVE-2015-2097/): Memory corruption in webgate:webgate embedded standard protocol sdk (high 7.5)
- [CVE-2015-2096](https://insights.sbomify.com/CVE-2015-2096/): Use after free in webgateinc:edvr manager (medium 6.8)
- [CVE-2015-2095](https://insights.sbomify.com/CVE-2015-2095/): Memory corruption in webgateinc:edvr manager (medium 6.8)
- [CVE-2015-2094](https://insights.sbomify.com/CVE-2015-2094/): Memory corruption in webgateinc:winrds (high 7.5)
- [CVE-2015-2093](https://insights.sbomify.com/CVE-2015-2093/): Memory corruption in webgateinc:webeyeaudio (medium 6.8)
- [CVE-2015-2092](https://insights.sbomify.com/CVE-2015-2092/): Memory corruption in agilent technologies:feature extraction (high 7.5)
- [CVE-2015-2091](https://insights.sbomify.com/CVE-2015-2091/): Auth bypass in apache:mod-gnutls (medium 5.0)
- [CVE-2015-2090](https://insights.sbomify.com/CVE-2015-2090/): SQL injection in sympies:wordpress survey and poll (high 7.5)
- [CVE-2015-2089](https://insights.sbomify.com/CVE-2015-2089/): Cross-site request forgery in crossslide jquery project:crossslide jquery (medium 6.8)
- [CVE-2015-2088](https://insights.sbomify.com/CVE-2015-2088/): Cross-site scripting in term queue project:term queue (medium 4.3)
- [CVE-2015-2087](https://insights.sbomify.com/CVE-2015-2087/): File upload in avatar uploader project:avatar uploader (medium 6.5)
- [CVE-2015-2086](https://insights.sbomify.com/CVE-2015-2086/): Cross-site scripting in panopoly magic project:panopoly magic (low 3.5)
- [CVE-2015-2084](https://insights.sbomify.com/CVE-2015-2084/): Cross-site request forgery in cybernetikz:easy social icons (medium 6.8)
- [CVE-2015-2083](https://insights.sbomify.com/CVE-2015-2083/): Cross-site request forgery in ilch:cms (medium 6.8)
- [CVE-2015-2082](https://insights.sbomify.com/CVE-2015-2082/): Cross-site scripting in unit4:prosoft hrms (medium 4.3)
- [CVE-2015-2081](https://insights.sbomify.com/CVE-2015-2081/): Code injection in datto:alto 2 firmware (critical 9.8)
- [CVE-2015-2080](https://insights.sbomify.com/CVE-2015-2080/): Jetty vulnerable to exposure of sensitive information to unauthenticated remote users (high 7.5)
- [CVE-2015-2079](https://insights.sbomify.com/CVE-2015-2079/): Code injection in Usermin (critical 9.9)
- [CVE-2015-2078](https://insights.sbomify.com/CVE-2015-2078/): Weak cryptography in komodia:redirector sdk (medium 5.0)
- [CVE-2015-2077](https://insights.sbomify.com/CVE-2015-2077/): Hardcoded credentials in komodia:redirector sdk (medium 5.0)
- [CVE-2015-2076](https://insights.sbomify.com/CVE-2015-2076/): Information disclosure in sap:businessobjects edge (medium 5.0)
- [CVE-2015-2075](https://insights.sbomify.com/CVE-2015-2075/): Missing authorization in sap:businessobjects edge (medium 5.0)
- [CVE-2015-2074](https://insights.sbomify.com/CVE-2015-2074/): Path traversal in sap:businessobjects edge (high 7.5)
- [CVE-2015-2073](https://insights.sbomify.com/CVE-2015-2073/): Path traversal in sap:businessobjects edge (high 7.5)
- [CVE-2015-2072](https://insights.sbomify.com/CVE-2015-2072/): Cross-site scripting in sap:hana (medium 4.3)
- [CVE-2015-2071](https://insights.sbomify.com/CVE-2015-2071/): Path traversal in etouch:samepage (medium 4.0)
- [CVE-2015-2070](https://insights.sbomify.com/CVE-2015-2070/): SQL injection in etouch:samepage (high 7.5)
- [CVE-2015-2069](https://insights.sbomify.com/CVE-2015-2069/): Cross-site scripting in woothemes:woocommerce (medium 4.3)
- [CVE-2015-2068](https://insights.sbomify.com/CVE-2015-2068/): MAGMI cross-site scripting (XSS) (medium 4.3)
- [CVE-2015-2067](https://insights.sbomify.com/CVE-2015-2067/): MAGMI plugin for Magento Server Directory Traversal (medium 5.0)
- [CVE-2015-2066](https://insights.sbomify.com/CVE-2015-2066/): SQL injection in dlguard:dlguard (high 7.5)
- [CVE-2015-2065](https://insights.sbomify.com/CVE-2015-2065/): SQL injection in apptha:wordpress video gallery (high 7.5)
- [CVE-2015-2064](https://insights.sbomify.com/CVE-2015-2064/): Cross-site scripting in dlguard:dlguard (medium 4.3)
- [CVE-2015-2063](https://insights.sbomify.com/CVE-2015-2063/): Integer overflow in winace:unace (medium 4.3)
- [CVE-2015-2062](https://insights.sbomify.com/CVE-2015-2062/): SQL injection in huge-it:huge-it slider (high 7.2)
- [CVE-2015-2061](https://insights.sbomify.com/CVE-2015-2061/): Memory corruption in ptc:creo view (high 7.5)
- [CVE-2015-2060](https://insights.sbomify.com/CVE-2015-2060/): Path traversal in cabextract project:cabextract (medium 5.3)
- [CVE-2015-2059](https://insights.sbomify.com/CVE-2015-2059/): Memory corruption in fedoraproject:fedora (high 7.5)
- [CVE-2015-2058](https://insights.sbomify.com/CVE-2015-2058/): Information disclosure in jabberd2:jabberd2 (medium 6.5)
- [CVE-2015-2055](https://insights.sbomify.com/CVE-2015-2055/): Denial of service in zhone technologies:gpon 2520 firmware (high 7.8)
- [CVE-2015-2054](https://insights.sbomify.com/CVE-2015-2054/): Other in sierra wireless:sierra wireless aircard 760s (medium 4.3)
- [CVE-2015-2053](https://insights.sbomify.com/CVE-2015-2053/): Other in mcafee:mcafee agent (medium 4.3)
- [CVE-2015-2052](https://insights.sbomify.com/CVE-2015-2052/): Memory corruption in dlink:dir-645 firmware (critical 10.0)
- [CVE-2015-2051](https://insights.sbomify.com/CVE-2015-2051/): D-Link DIR-645 Router Remote Code Execution (high 8.8, exploited in the wild)
- [CVE-2015-2050](https://insights.sbomify.com/CVE-2015-2050/): Command injection in dlink:dap-1320 firmware (critical 10.0)
- [CVE-2015-2049](https://insights.sbomify.com/CVE-2015-2049/): File upload in dlink:dcs-931l firmware (critical 9.0)
- [CVE-2015-2048](https://insights.sbomify.com/CVE-2015-2048/): Cross-site request forgery in dlink:dcs-931l firmware (medium 6.8)
- [CVE-2015-2047](https://insights.sbomify.com/CVE-2015-2047/): Auth bypass in debian:debian linux (low 2.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/61/