# Vulnerabilities published in 2015


- [CVE-2015-1849](https://insights.sbomify.com/CVE-2015-1849/): Information disclosure in redhat:jboss enterprise application platform (medium 5.9)
- [CVE-2015-1848](https://insights.sbomify.com/CVE-2015-1848/): Information disclosure in fedora:pacemaker configuration system (medium 6.8)
- [CVE-2015-1847](https://insights.sbomify.com/CVE-2015-1847/): Path traversal in appserver:appserver (high 7.5)
- [CVE-2015-1846](https://insights.sbomify.com/CVE-2015-1846/): Denial of service in unzoo:unzoo (high 7.8)
- [CVE-2015-1845](https://insights.sbomify.com/CVE-2015-1845/): Memory corruption in unzoo:unzoo (critical 10.0)
- [CVE-2015-1844](https://insights.sbomify.com/CVE-2015-1844/): Missing authorization in theforeman:foreman (medium 4.0)
- [CVE-2015-1843](https://insights.sbomify.com/CVE-2015-1843/): Security feature bypass in redhat:docker (medium 4.3)
- [CVE-2015-1842](https://insights.sbomify.com/CVE-2015-1842/): Hardcoded credentials in redhat:openstack (critical 10.0)
- [CVE-2015-1841](https://insights.sbomify.com/CVE-2015-1841/): Security feature bypass in redhat:enterprise virtualization (low 3.7)
- [CVE-2015-1840](https://insights.sbomify.com/CVE-2015-1840/): jquery-rails and jquery-ujs subject to Exposure of Sensitive Information (medium 5.0)
- [CVE-2015-1839](https://insights.sbomify.com/CVE-2015-1839/): SaltStack has insecure /tmp file handling in salt/modules/chef.py (medium 5.3)
- [CVE-2015-1838](https://insights.sbomify.com/CVE-2015-1838/): Salt improper handling of tmp files (medium 5.3)
- [CVE-2015-1836](https://insights.sbomify.com/CVE-2015-1836/): High severity vulnerability that affects org.apache.hbase:hbase (high 7.3)
- [CVE-2015-1835](https://insights.sbomify.com/CVE-2015-1835/): Other in apache:cordova (medium 5.3)
- [CVE-2015-1834](https://insights.sbomify.com/CVE-2015-1834/): Path traversal in Cloud Foundry (medium 6.5)
- [CVE-2015-1833](https://insights.sbomify.com/CVE-2015-1833/): Improper Input Validation in Apache Jackrabbit (medium 6.4)
- [CVE-2015-1832](https://insights.sbomify.com/CVE-2015-1832/): Improper Restriction of XML External Entity Reference in Apace Derby (critical 9.1)
- [CVE-2015-1831](https://insights.sbomify.com/CVE-2015-1831/): Incomplete exclude pattern in Apache Struts (high 7.5)
- [CVE-2015-1830](https://insights.sbomify.com/CVE-2015-1830/): Improper Limitation of a Pathname to a Restricted Directory in Apache ActiveMQ (medium 5.0)
- [CVE-2015-1829](https://insights.sbomify.com/CVE-2015-1829/): Denial of service in oracle:fusion middleware (medium 5.0)
- [CVE-2015-1828](https://insights.sbomify.com/CVE-2015-1828/): http vulnerable to Exposure of Sensitive Information to an Unauthorized Actor (medium 5.9)
- [CVE-2015-1827](https://insights.sbomify.com/CVE-2015-1827/): Denial of service in fedoraproject:fedora (medium 5.0)
- [CVE-2015-1822](https://insights.sbomify.com/CVE-2015-1822/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2015-1821](https://insights.sbomify.com/CVE-2015-1821/): Memory corruption in debian:debian linux (medium 6.5)
- [CVE-2015-1820](https://insights.sbomify.com/CVE-2015-1820/): rest-client Gem Vulnerable to Session Fixation (critical 9.8)
- [CVE-2015-1819](https://insights.sbomify.com/CVE-2015-1819/): Nokogiri vulnerable to libxml XML Entity Expansion (medium 5.0)
- [CVE-2015-1818](https://insights.sbomify.com/CVE-2015-1818/): XML external entity in redhat:jboss bpm suite (high 7.5)
- [CVE-2015-1817](https://insights.sbomify.com/CVE-2015-1817/): Memory corruption in musl-libc:musl (critical 9.8)
- [CVE-2015-1816](https://insights.sbomify.com/CVE-2015-1816/): Weak cryptography in theforeman:foreman (medium 5.0)
- [CVE-2015-1815](https://insights.sbomify.com/CVE-2015-1815/): Command injection in fedoraproject:fedora (critical 10.0)
- [CVE-2015-1814](https://insights.sbomify.com/CVE-2015-1814/): Jenkins allows for Privilege Escalation by Remote Authenticated Users (high 7.5)
- [CVE-2015-1813](https://insights.sbomify.com/CVE-2015-1813/): Jenkins allows Cross-Site Scripting (XSS) (medium 4.3)
- [CVE-2015-1812](https://insights.sbomify.com/CVE-2015-1812/): Jenkins Cross-site Scripting vulnerability (medium 4.3)
- [CVE-2015-1811](https://insights.sbomify.com/CVE-2015-1811/): XML external entity (XXE) vulnerability in Jenkins (high 7.5)
- [CVE-2015-1810](https://insights.sbomify.com/CVE-2015-1810/): Jenkins does not Restrict Reserved Names Allowing for Privilege Escalation (medium 4.6)
- [CVE-2015-1809](https://insights.sbomify.com/CVE-2015-1809/): XML external entity (XXE) vulnerability in Jenkins (high 7.5)
- [CVE-2015-1808](https://insights.sbomify.com/CVE-2015-1808/): Jenkins Vulnerable to Denial of Service (DoS) (low 3.5)
- [CVE-2015-1807](https://insights.sbomify.com/CVE-2015-1807/): Path traversal in jenkins:jenkins (low 3.5)
- [CVE-2015-1806](https://insights.sbomify.com/CVE-2015-1806/): Jenkins allows for Privilege Escalation by Remote Authenticated Users (medium 6.5)
- [CVE-2015-1805](https://insights.sbomify.com/CVE-2015-1805/): Memory corruption in google:android (high 7.2)
- [CVE-2015-1804](https://insights.sbomify.com/CVE-2015-1804/): Memory corruption in x:libxfont (high 8.5)
- [CVE-2015-1803](https://insights.sbomify.com/CVE-2015-1803/): Null dereference in canonical:ubuntu linux (high 8.5)
- [CVE-2015-1802](https://insights.sbomify.com/CVE-2015-1802/): Memory corruption in x:libxfont (high 8.5)
- [CVE-2015-1801](https://insights.sbomify.com/CVE-2015-1801/): Memory corruption in samsung:galaxy s4 firmware (critical 9.8)
- [CVE-2015-1800](https://insights.sbomify.com/CVE-2015-1800/): Information disclosure in samsung:galaxy s4 firmware (high 7.5)
- [CVE-2015-1799](https://insights.sbomify.com/CVE-2015-1799/): Denial of service in ntp:ntp (medium 4.3)
- [CVE-2015-1798](https://insights.sbomify.com/CVE-2015-1798/): Security feature bypass in ntp:ntp (low 1.8)
- [CVE-2015-1796](https://insights.sbomify.com/CVE-2015-1796/): Improper Certificate Validation in Shibboleth Identity Provider and OpenSAML (medium 4.3)
- [CVE-2015-1795](https://insights.sbomify.com/CVE-2015-1795/): Privilege escalation in redhat:gluster storage (high 7.8)
- [CVE-2015-1794](https://insights.sbomify.com/CVE-2015-1794/): Denial of service in openssl:openssl (medium 5.0)
- [CVE-2015-1793](https://insights.sbomify.com/CVE-2015-1793/): Security feature bypass in openssl:openssl (medium 6.5)
- [CVE-2015-1792](https://insights.sbomify.com/CVE-2015-1792/): Denial of service in openssl:openssl (medium 5.0)
- [CVE-2015-1791](https://insights.sbomify.com/CVE-2015-1791/): Race condition in openssl:openssl (medium 6.8)
- [CVE-2015-1790](https://insights.sbomify.com/CVE-2015-1790/): Null dereference in openssl:openssl (medium 5.0)
- [CVE-2015-1789](https://insights.sbomify.com/CVE-2015-1789/): Memory corruption in openssl:openssl (high 7.5)
- [CVE-2015-1788](https://insights.sbomify.com/CVE-2015-1788/): Denial of service in openssl:openssl (medium 4.3)
- [CVE-2015-1787](https://insights.sbomify.com/CVE-2015-1787/): Denial of service in openssl:openssl (low 2.6)
- [CVE-2015-1786](https://insights.sbomify.com/CVE-2015-1786/): Zend Framework CSRF Vulnerability (high 8.8)
- [CVE-2015-1785](https://insights.sbomify.com/CVE-2015-1785/): File upload in nextgen-gallery (medium 6.5)
- [CVE-2015-1784](https://insights.sbomify.com/CVE-2015-1784/): File upload in nextgen-gallery (high 8.8)
- [CVE-2015-1783](https://insights.sbomify.com/CVE-2015-1783/): Memory corruption in entrouvert:lasso (high 7.5)
- [CVE-2015-1782](https://insights.sbomify.com/CVE-2015-1782/): Memory corruption in debian:debian linux (medium 6.8)
- [CVE-2015-1781](https://insights.sbomify.com/CVE-2015-1781/): Memory corruption in canonical:ubuntu linux (medium 6.8)
- [CVE-2015-1780](https://insights.sbomify.com/CVE-2015-1780/): Missing authorization in oVirt (medium 6.5)
- [CVE-2015-1779](https://insights.sbomify.com/CVE-2015-1779/): Denial of service in canonical:ubuntu linux (high 8.6)
- [CVE-2015-1778](https://insights.sbomify.com/CVE-2015-1778/): Opendaylight will authenticate any username and password combination (critical 9.8)
- [CVE-2015-1777](https://insights.sbomify.com/CVE-2015-1777/): Security feature bypass in redhat:rhn-client-tools (medium 5.9)
- [CVE-2015-1776](https://insights.sbomify.com/CVE-2015-1776/): Exposure of Sensitive Information to an Unauthorized Actor in Apache Hadoop (medium 6.2)
- [CVE-2015-1775](https://insights.sbomify.com/CVE-2015-1775/): Apache Ambari SSRF Vulnerability (medium 5.5)
- [CVE-2015-1774](https://insights.sbomify.com/CVE-2015-1774/): Memory corruption in apache:openoffice (medium 6.8)
- [CVE-2015-1773](https://insights.sbomify.com/CVE-2015-1773/): Cross-site scripting in apache:flex (medium 4.3)
- [CVE-2015-1772](https://insights.sbomify.com/CVE-2015-1772/): Improper Authentication in org.apache.hive:hive, org.apache.hive:hive-exec, and org.apache.hive:hive-service (high 7.3)
- [CVE-2015-1771](https://insights.sbomify.com/CVE-2015-1771/): Cross-site request forgery in microsoft:exchange server (medium 6.8)
- [CVE-2015-1770](https://insights.sbomify.com/CVE-2015-1770/): Microsoft Office Uninitialized Memory Use (high 8.8, exploited in the wild)
- [CVE-2015-1769](https://insights.sbomify.com/CVE-2015-1769/): Microsoft Windows Mount Manager Privilege Escalation (medium 6.6, exploited in the wild)
- [CVE-2015-1768](https://insights.sbomify.com/CVE-2015-1768/): Memory corruption in microsoft:windows 2003 server (high 7.2)
- [CVE-2015-1767](https://insights.sbomify.com/CVE-2015-1767/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1766](https://insights.sbomify.com/CVE-2015-1766/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1765](https://insights.sbomify.com/CVE-2015-1765/): Information disclosure in microsoft:internet explorer (medium 4.3)
- [CVE-2015-1764](https://insights.sbomify.com/CVE-2015-1764/): Server-side request forgery in microsoft:exchange server (medium 4.3)
- [CVE-2015-1763](https://insights.sbomify.com/CVE-2015-1763/): Memory corruption in microsoft:sql server (high 8.5)
- [CVE-2015-1762](https://insights.sbomify.com/CVE-2015-1762/): Memory corruption in microsoft:sql server (high 7.1)
- [CVE-2015-1761](https://insights.sbomify.com/CVE-2015-1761/): Privilege escalation in microsoft:sql server (medium 6.5)
- [CVE-2015-1760](https://insights.sbomify.com/CVE-2015-1760/): Memory corruption in microsoft:office (critical 9.3)
- [CVE-2015-1759](https://insights.sbomify.com/CVE-2015-1759/): Memory corruption in microsoft:office compatibility pack (critical 9.3)
- [CVE-2015-1758](https://insights.sbomify.com/CVE-2015-1758/): Privilege escalation in microsoft:windows 7 (medium 6.9)
- [CVE-2015-1757](https://insights.sbomify.com/CVE-2015-1757/): Cross-site scripting in microsoft:active directory federation services (medium 4.3)
- [CVE-2015-1756](https://insights.sbomify.com/CVE-2015-1756/): Use after free in microsoft:windows 7 (critical 9.3)
- [CVE-2015-1755](https://insights.sbomify.com/CVE-2015-1755/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1754](https://insights.sbomify.com/CVE-2015-1754/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1753](https://insights.sbomify.com/CVE-2015-1753/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1752](https://insights.sbomify.com/CVE-2015-1752/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1751](https://insights.sbomify.com/CVE-2015-1751/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1750](https://insights.sbomify.com/CVE-2015-1750/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1748](https://insights.sbomify.com/CVE-2015-1748/): Privilege escalation in microsoft:internet explorer (medium 6.8)
- [CVE-2015-1747](https://insights.sbomify.com/CVE-2015-1747/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1745](https://insights.sbomify.com/CVE-2015-1745/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1744](https://insights.sbomify.com/CVE-2015-1744/): Memory corruption in microsoft:internet explorer (critical 9.3)
- [CVE-2015-1743](https://insights.sbomify.com/CVE-2015-1743/): Race condition in microsoft:internet explorer (medium 5.1)
- [CVE-2015-1742](https://insights.sbomify.com/CVE-2015-1742/): Memory corruption in microsoft:internet explorer (critical 9.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/64/