# Vulnerabilities published in 2015


- [CVE-2015-2046](https://insights.sbomify.com/CVE-2015-2046/): Cross-site scripting in mantisbt:mantisbt (medium 6.1)
- [CVE-2015-2045](https://insights.sbomify.com/CVE-2015-2045/): Information disclosure in debian:debian linux (low 2.1)
- [CVE-2015-2044](https://insights.sbomify.com/CVE-2015-2044/): Information disclosure in xen:xen (low 2.1)
- [CVE-2015-2043](https://insights.sbomify.com/CVE-2015-2043/): Cross-site scripting in visualware:myconnection server (medium 4.3)
- [CVE-2015-2042](https://insights.sbomify.com/CVE-2015-2042/): Information disclosure in linux:linux kernel (medium 4.6)
- [CVE-2015-2041](https://insights.sbomify.com/CVE-2015-2041/): Information disclosure in debian:debian linux (medium 4.6)
- [CVE-2015-2040](https://insights.sbomify.com/CVE-2015-2040/): Cross-site scripting in cfdbplugin:contact form db (medium 4.3)
- [CVE-2015-2039](https://insights.sbomify.com/CVE-2015-2039/): Cross-site request forgery in acobot live chat \& contact form project:acobot live chat \& contact form (medium 6.8)
- [CVE-2015-2035](https://insights.sbomify.com/CVE-2015-2035/): SQL injection in piwigo:piwigo (medium 6.5)
- [CVE-2015-2034](https://insights.sbomify.com/CVE-2015-2034/): Cross-site scripting in piwigo:piwigo (medium 4.3)
- [CVE-2015-2033](https://insights.sbomify.com/CVE-2015-2033/): Auth bypass in infoblox:netmri (critical 10.0)
- [CVE-2015-2031](https://insights.sbomify.com/CVE-2015-2031/): Cross-site scripting in ibm:websphere extreme scale (low 3.5)
- [CVE-2015-2030](https://insights.sbomify.com/CVE-2015-2030/): Auth bypass in ibm:websphere extreme scale (medium 5.0)
- [CVE-2015-2029](https://insights.sbomify.com/CVE-2015-2029/): Auth bypass in ibm:websphere extreme scale (medium 4.3)
- [CVE-2015-2028](https://insights.sbomify.com/CVE-2015-2028/): Other in ibm:websphere extreme scale (medium 4.3)
- [CVE-2015-2027](https://insights.sbomify.com/CVE-2015-2027/): Auth bypass in ibm:websphere extreme scale (low 2.1)
- [CVE-2015-2026](https://insights.sbomify.com/CVE-2015-2026/): Cross-site request forgery in ibm:websphere extreme scale (medium 6.0)
- [CVE-2015-2025](https://insights.sbomify.com/CVE-2015-2025/): Information disclosure in ibm:websphere extreme scale (medium 4.3)
- [CVE-2015-2023](https://insights.sbomify.com/CVE-2015-2023/): Memory corruption in ibm:i access (high 8.8)
- [CVE-2015-2020](https://insights.sbomify.com/CVE-2015-2020/): Deserialization in myscript:myscript (critical 9.8)
- [CVE-2015-2019](https://insights.sbomify.com/CVE-2015-2019/): Information disclosure in ibm:tivoli directory server (low 2.1)
- [CVE-2015-2018](https://insights.sbomify.com/CVE-2015-2018/): Information disclosure in ibm:integration bus (low 3.5)
- [CVE-2015-2017](https://insights.sbomify.com/CVE-2015-2017/): Other in ibm:websphere application server (medium 4.3)
- [CVE-2015-2016](https://insights.sbomify.com/CVE-2015-2016/): Command injection in ibm:qradar security information and event manager (critical 9.0)
- [CVE-2015-2015](https://insights.sbomify.com/CVE-2015-2015/): Cross-site scripting in ibm:domino (medium 4.3)
- [CVE-2015-2014](https://insights.sbomify.com/CVE-2015-2014/): Open redirect in ibm:domino (medium 5.8)
- [CVE-2015-2013](https://insights.sbomify.com/CVE-2015-2013/): Denial of service in ibm:websphere mq (medium 5.0)
- [CVE-2015-20129](https://insights.sbomify.com/CVE-2015-20129/): CrushFTP before 7.3.0 Cross-Site Request Forgery via /WebInterface/function/ (high 8.6)
- [CVE-2015-20128](https://insights.sbomify.com/CVE-2015-20128/): FooSun DotNetCMS 1.0 / 2.0 SQL Injection via City_ajax.aspx (high 8.8)
- [CVE-2015-20125](https://insights.sbomify.com/CVE-2015-20125/): Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_pdf_exporter_download.php (high 8.7)
- [CVE-2015-20124](https://insights.sbomify.com/CVE-2015-20124/): Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.php (high 8.7)
- [CVE-2015-20123](https://insights.sbomify.com/CVE-2015-20123/): Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.php (high 8.7)
- [CVE-2015-20122](https://insights.sbomify.com/CVE-2015-20122/): Seeyon A6 OA Unauthenticated SQL Injection via downloadAtt.jsp (high 8.7)
- [CVE-2015-20121](https://insights.sbomify.com/CVE-2015-20121/): RealtyScript 4.0.2 SQL Injection via u_id and agent Parameters (high 8.8)
- [CVE-2015-20120](https://insights.sbomify.com/CVE-2015-20120/): RealtyScript 4.0.2 Multiple Time-based Blind SQL Injection (high 8.8)
- [CVE-2015-2012](https://insights.sbomify.com/CVE-2015-2012/): Information disclosure in ibm:websphere mq (medium 4.0)
- [CVE-2015-20119](https://insights.sbomify.com/CVE-2015-20119/): RealtyScript 4.0.2 Stored Cross-Site Scripting via text Parameter in pages.php (medium 5.1)
- [CVE-2015-20118](https://insights.sbomify.com/CVE-2015-20118/): RealtyScript 4.0.2 Stored Cross-Site Scripting via location_name Parameter (medium 5.1)
- [CVE-2015-20117](https://insights.sbomify.com/CVE-2015-20117/): RealtyScript 4.0.2 Cross-Site Request Forgery Unauthorized User Creation (medium 6.9)
- [CVE-2015-20116](https://insights.sbomify.com/CVE-2015-20116/): RealtyScript 4.0.2 Stored Cross-Site Scripting via CSV File Upload Filename (medium 5.1)
- [CVE-2015-20115](https://insights.sbomify.com/CVE-2015-20115/): RealtyScript 4.0.2 Stored Cross-Site Scripting via File Upload Parameter (medium 5.1)
- [CVE-2015-20114](https://insights.sbomify.com/CVE-2015-20114/): RealtyScript 4.0.2 Cross-Site Scripting via Multiple Parameters (medium 5.1)
- [CVE-2015-20113](https://insights.sbomify.com/CVE-2015-20113/): RealtyScript 4.0.2 Multiple Cross-Site Request Forgery and Persistent Cross-Site Scripting Vulnerabilities (medium 6.9)
- [CVE-2015-20112](https://insights.sbomify.com/CVE-2015-20112/): Weak cryptography in RLPx (low 3.4)
- [CVE-2015-20111](https://insights.sbomify.com/CVE-2015-20111/): miniupnp before 4c90b87, as used in Bitcoin Core before 0.12 and other products, lacks checks for snprintf return values, leading to a buffe (critical 9.8)
- [CVE-2015-20110](https://insights.sbomify.com/CVE-2015-20110/): generator-jhipster allows a timing attack against validateToken due to a string comparison that stops at the first character (high 7.5)
- [CVE-2015-2011](https://insights.sbomify.com/CVE-2015-2011/): Command injection in ibm:qradar security information and event manager (critical 9.0)
- [CVE-2015-20109](https://insights.sbomify.com/CVE-2015-20109/): Memory corruption in gnu:glibc (medium 5.5)
- [CVE-2015-20108](https://insights.sbomify.com/CVE-2015-20108/): ruby-saml vulnerable to XPath injection (critical 9.8)
- [CVE-2015-20107](https://insights.sbomify.com/CVE-2015-20107/): Command injection in fedoraproject:fedora (high 7.8)
- [CVE-2015-20106](https://insights.sbomify.com/CVE-2015-20106/): ClickBank Affiliate Ads <= 1.20 - Admin+ Stored Cross-Site Scripting (medium 4.8)
- [CVE-2015-20105](https://insights.sbomify.com/CVE-2015-20105/): ClickBank Affiliate Ads <= 1.20 - CSRF to Stored Cross-Site Scripting (critical 9.6)
- [CVE-2015-2009](https://insights.sbomify.com/CVE-2015-2009/): Cross-site request forgery in ibm:qradar security information and event manager (high 8.8)
- [CVE-2015-2008](https://insights.sbomify.com/CVE-2015-2008/): Information disclosure in ibm:qradar security information and event manager (medium 4.4)
- [CVE-2015-2007](https://insights.sbomify.com/CVE-2015-2007/): Path traversal in ibm:qradar security information and event manager (medium 5.0)
- [CVE-2015-20067](https://insights.sbomify.com/CVE-2015-20067/): WP Attachment Export < 0.2.4 - Unauthenticated Posts Download (high 7.5)
- [CVE-2015-2005](https://insights.sbomify.com/CVE-2015-2005/): Information disclosure in ibm:qradar security information and event manager (medium 5.3)
- [CVE-2015-2004](https://insights.sbomify.com/CVE-2015-2004/): Deserialization in gracenote:gnsdk (critical 9.8)
- [CVE-2015-2003](https://insights.sbomify.com/CVE-2015-2003/): Deserialization in pjsip:pjsua2 sdk (critical 9.8)
- [CVE-2015-2002](https://insights.sbomify.com/CVE-2015-2002/): Deserialization in esri:arcgisruntime sdk (critical 9.8)
- [CVE-2015-20019](https://insights.sbomify.com/CVE-2015-20019/): Content text slider on post < 6.9 - Authenticated Stored Cross-Site Scripting (XSS) (medium 5.4)
- [CVE-2015-2001](https://insights.sbomify.com/CVE-2015-2001/): Deserialization in metaio:metaio sdk (critical 9.8)
- [CVE-2015-20001](https://insights.sbomify.com/CVE-2015-20001/): Memory corruption in rust-lang:rust (high 7.5)
- [CVE-2015-2000](https://insights.sbomify.com/CVE-2015-2000/): Deserialization in jumio:jumio sdk (critical 9.8)
- [CVE-2015-1999](https://insights.sbomify.com/CVE-2015-1999/): Information disclosure in ibm:security qradar incident forensics (medium 5.0)
- [CVE-2015-1997](https://insights.sbomify.com/CVE-2015-1997/): Cross-site request forgery in ibm:security qradar incident forensics (medium 6.8)
- [CVE-2015-1996](https://insights.sbomify.com/CVE-2015-1996/): Information disclosure in ibm:security qradar incident forensics (low 2.1)
- [CVE-2015-1995](https://insights.sbomify.com/CVE-2015-1995/): Cross-site scripting in ibm:security qradar incident forensics (medium 4.3)
- [CVE-2015-1994](https://insights.sbomify.com/CVE-2015-1994/): Information disclosure in ibm:security qradar incident forensics (medium 5.0)
- [CVE-2015-1993](https://insights.sbomify.com/CVE-2015-1993/): Misconfiguration in ibm:security qradar incident forensics (medium 5.0)
- [CVE-2015-1992](https://insights.sbomify.com/CVE-2015-1992/): Privilege escalation in ibm:systems director (high 7.2)
- [CVE-2015-1989](https://insights.sbomify.com/CVE-2015-1989/): SQL injection in ibm:security qradar incident forensics (medium 6.5)
- [CVE-2015-1988](https://insights.sbomify.com/CVE-2015-1988/): Cross-site scripting in ibm:tivoli storage flashcopy manager (low 3.5)
- [CVE-2015-1987](https://insights.sbomify.com/CVE-2015-1987/): Denial of service in ibm:websphere mq light (high 7.8)
- [CVE-2015-1986](https://insights.sbomify.com/CVE-2015-1986/): Command injection in ibm:tivoli storage manager fastback (critical 10.0)
- [CVE-2015-1985](https://insights.sbomify.com/CVE-2015-1985/): Auth bypass in ibm:mq appliance m2000 (medium 5.6)
- [CVE-2015-1984](https://insights.sbomify.com/CVE-2015-1984/): Missing authorization in ibm:infosphere master data management (medium 4.0)
- [CVE-2015-1983](https://insights.sbomify.com/CVE-2015-1983/): Cross-site scripting in ibm:urbancode build (low 3.5)
- [CVE-2015-1982](https://insights.sbomify.com/CVE-2015-1982/): Information disclosure in ibm:infosphere master data management (medium 4.0)
- [CVE-2015-1981](https://insights.sbomify.com/CVE-2015-1981/): Cross-site scripting in ibm:domino (low 2.1)
- [CVE-2015-1980](https://insights.sbomify.com/CVE-2015-1980/): Other in ibm:infosphere master data management (low 3.5)
- [CVE-2015-1979](https://insights.sbomify.com/CVE-2015-1979/): Cross-site scripting in ibm:case manager (low 3.5)
- [CVE-2015-1978](https://insights.sbomify.com/CVE-2015-1978/): Cross-site scripting in ibm:tivoli directory server (medium 4.3)
- [CVE-2015-1977](https://insights.sbomify.com/CVE-2015-1977/): Path traversal in ibm:security directory server (high 7.5)
- [CVE-2015-1976](https://insights.sbomify.com/CVE-2015-1976/): Command injection in Directory Server (medium 5.5)
- [CVE-2015-1975](https://insights.sbomify.com/CVE-2015-1975/): Command injection in ibm:tivoli directory server (high 7.8)
- [CVE-2015-1974](https://insights.sbomify.com/CVE-2015-1974/): Security feature bypass in ibm:tivoli directory server (medium 6.5)
- [CVE-2015-1972](https://insights.sbomify.com/CVE-2015-1972/): Information disclosure in ibm:tivoli directory server (medium 4.3)
- [CVE-2015-1971](https://insights.sbomify.com/CVE-2015-1971/): Denial of service in ibm:rational collaborative lifecycle management (medium 4.3)
- [CVE-2015-1970](https://insights.sbomify.com/CVE-2015-1970/): Information disclosure in ibm:websphere datapower xc10 appliance firmware (low 2.1)
- [CVE-2015-1969](https://insights.sbomify.com/CVE-2015-1969/): Cross-site scripting in ibm:tivoli common reporting (low 3.5)
- [CVE-2015-1968](https://insights.sbomify.com/CVE-2015-1968/): Cross-site scripting in ibm:infosphere master data management (low 3.5)
- [CVE-2015-1967](https://insights.sbomify.com/CVE-2015-1967/): Information disclosure in ibm:websphere mq (medium 4.3)
- [CVE-2015-1966](https://insights.sbomify.com/CVE-2015-1966/): Cross-site scripting in ibm:tivoli federated identity manager (medium 4.3)
- [CVE-2015-1965](https://insights.sbomify.com/CVE-2015-1965/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1964](https://insights.sbomify.com/CVE-2015-1964/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1963](https://insights.sbomify.com/CVE-2015-1963/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1962](https://insights.sbomify.com/CVE-2015-1962/): Memory corruption in ibm:tivoli storage manager fastback (high 7.8)
- [CVE-2015-1961](https://insights.sbomify.com/CVE-2015-1961/): Code injection in ibm:business process manager (critical 9.0)
- [CVE-2015-1959](https://insights.sbomify.com/CVE-2015-1959/): Missing authorization in ibm:tivoli directory server (medium 4.6)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/62/