Vulnerabilities published in 2015
8,124 vulnerabilities were published in 2015: CVEs, GitHub and ecosystem advisories, and malicious packages. Page 62 of 82.
- CVE-2015-2046 Cross-site scripting in mantisbt:mantisbt
- CVE-2015-2045 Information disclosure in debian:debian linux
- CVE-2015-2044 Information disclosure in xen:xen
- CVE-2015-2043 Cross-site scripting in visualware:myconnection server
- CVE-2015-2042 Information disclosure in linux:linux kernel
- CVE-2015-2041 Information disclosure in debian:debian linux
- CVE-2015-2040 Cross-site scripting in cfdbplugin:contact form db
- CVE-2015-2039 Cross-site request forgery in acobot live chat \& contact form project:acobot live chat \& contact form
- CVE-2015-2035 SQL injection in piwigo:piwigo
- CVE-2015-2034 Cross-site scripting in piwigo:piwigo
- CVE-2015-2033 Auth bypass in infoblox:netmri
- CVE-2015-2031 Cross-site scripting in ibm:websphere extreme scale
- CVE-2015-2030 Auth bypass in ibm:websphere extreme scale
- CVE-2015-2029 Auth bypass in ibm:websphere extreme scale
- CVE-2015-2028 Other in ibm:websphere extreme scale
- CVE-2015-2027 Auth bypass in ibm:websphere extreme scale
- CVE-2015-2026 Cross-site request forgery in ibm:websphere extreme scale
- CVE-2015-2025 Information disclosure in ibm:websphere extreme scale
- CVE-2015-2023 Memory corruption in ibm:i access
- CVE-2015-2020 Deserialization in myscript:myscript
- CVE-2015-2019 Information disclosure in ibm:tivoli directory server
- CVE-2015-2018 Information disclosure in ibm:integration bus
- CVE-2015-2017 Other in ibm:websphere application server
- CVE-2015-2016 Command injection in ibm:qradar security information and event manager
- CVE-2015-2015 Cross-site scripting in ibm:domino
- CVE-2015-2014 Open redirect in ibm:domino
- CVE-2015-2013 Denial of service in ibm:websphere mq
- CVE-2015-20129 CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/
- CVE-2015-20128 FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx
- CVE-2015-20125 Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_pdf_exporter_download.php
- CVE-2015-20124 Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.php
- CVE-2015-20123 Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.php
- CVE-2015-20122 Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jsp
- CVE-2015-20121 RealtyScript 4.0.2 SQL Injection via u_id and agent Parameters
- CVE-2015-20120 RealtyScript 4.0.2 Multiple Time-based Blind SQL Injection
- CVE-2015-2012 Information disclosure in ibm:websphere mq
- CVE-2015-20119 RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.php
- CVE-2015-20118 RealtyScript 4.0.2 Stored Cross-Site Scripting via location_name Parameter
- CVE-2015-20117 RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation
- CVE-2015-20116 RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload Filename
- CVE-2015-20115 RealtyScript 4.0.2 Stored Cross-Site Scripting via File Upload Parameter
- CVE-2015-20114 RealtyScript 4.0.2 Cross-Site Scripting via Multiple Parameters
- CVE-2015-20113 RealtyScript 4.0.2 Multiple Cross-Site Request Forgery and Persistent Cross-Site Scripting Vulnerabilities
- CVE-2015-20112 Weak cryptography in RLPx
- CVE-2015-20111 miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffe
- CVE-2015-20110 generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character
- CVE-2015-2011 Command injection in ibm:qradar security information and event manager
- CVE-2015-20109 Memory corruption in gnu:glibc
- CVE-2015-20108 ruby-saml vulnerable to XPath injection
- CVE-2015-20107 Command injection in fedoraproject:fedora
- CVE-2015-20106 ClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site Scripting
- CVE-2015-20105 ClickBank Affiliate Ads <= 1.20 - CSRF to Stored Cross-Site Scripting
- CVE-2015-2009 Cross-site request forgery in ibm:qradar security information and event manager
- CVE-2015-2008 Information disclosure in ibm:qradar security information and event manager
- CVE-2015-2007 Path traversal in ibm:qradar security information and event manager
- CVE-2015-20067 WP Attachment Export < 0.2.4 - Unauthenticated Posts Download
- CVE-2015-2005 Information disclosure in ibm:qradar security information and event manager
- CVE-2015-2004 Deserialization in gracenote:gnsdk
- CVE-2015-2003 Deserialization in pjsip:pjsua2 sdk
- CVE-2015-2002 Deserialization in esri:arcgisruntime sdk
- CVE-2015-20019 Content text slider on post < 6.9 - Authenticated Stored Cross-Site Scripting (XSS)
- CVE-2015-2001 Deserialization in metaio:metaio sdk
- CVE-2015-20001 Memory corruption in rust-lang:rust
- CVE-2015-2000 Deserialization in jumio:jumio sdk
- CVE-2015-1999 Information disclosure in ibm:security qradar incident forensics
- CVE-2015-1997 Cross-site request forgery in ibm:security qradar incident forensics
- CVE-2015-1996 Information disclosure in ibm:security qradar incident forensics
- CVE-2015-1995 Cross-site scripting in ibm:security qradar incident forensics
- CVE-2015-1994 Information disclosure in ibm:security qradar incident forensics
- CVE-2015-1993 Misconfiguration in ibm:security qradar incident forensics
- CVE-2015-1992 Privilege escalation in ibm:systems director
- CVE-2015-1989 SQL injection in ibm:security qradar incident forensics
- CVE-2015-1988 Cross-site scripting in ibm:tivoli storage flashcopy manager
- CVE-2015-1987 Denial of service in ibm:websphere mq light
- CVE-2015-1986 Command injection in ibm:tivoli storage manager fastback
- CVE-2015-1985 Auth bypass in ibm:mq appliance m2000
- CVE-2015-1984 Missing authorization in ibm:infosphere master data management
- CVE-2015-1983 Cross-site scripting in ibm:urbancode build
- CVE-2015-1982 Information disclosure in ibm:infosphere master data management
- CVE-2015-1981 Cross-site scripting in ibm:domino
- CVE-2015-1980 Other in ibm:infosphere master data management
- CVE-2015-1979 Cross-site scripting in ibm:case manager
- CVE-2015-1978 Cross-site scripting in ibm:tivoli directory server
- CVE-2015-1977 Path traversal in ibm:security directory server
- CVE-2015-1976 Command injection in Directory Server
- CVE-2015-1975 Command injection in ibm:tivoli directory server
- CVE-2015-1974 Security feature bypass in ibm:tivoli directory server
- CVE-2015-1972 Information disclosure in ibm:tivoli directory server
- CVE-2015-1971 Denial of service in ibm:rational collaborative lifecycle management
- CVE-2015-1970 Information disclosure in ibm:websphere datapower xc10 appliance firmware
- CVE-2015-1969 Cross-site scripting in ibm:tivoli common reporting
- CVE-2015-1968 Cross-site scripting in ibm:infosphere master data management
- CVE-2015-1967 Information disclosure in ibm:websphere mq
- CVE-2015-1966 Cross-site scripting in ibm:tivoli federated identity manager
- CVE-2015-1965 Memory corruption in ibm:tivoli storage manager fastback
- CVE-2015-1964 Memory corruption in ibm:tivoli storage manager fastback
- CVE-2015-1963 Memory corruption in ibm:tivoli storage manager fastback
- CVE-2015-1962 Memory corruption in ibm:tivoli storage manager fastback
- CVE-2015-1961 Code injection in ibm:business process manager
- CVE-2015-1959 Missing authorization in ibm:tivoli directory server