# Vulnerabilities published in 2015


- [CVE-2015-1500](https://insights.sbomify.com/CVE-2015-1500/): Memory corruption in solarwinds:server and application monitor (medium 6.8)
- [CVE-2015-1499](https://insights.sbomify.com/CVE-2015-1499/): Missing authorization in samsung:samsung security manager (high 8.5)
- [CVE-2015-1498](https://insights.sbomify.com/CVE-2015-1498/): Missing authorization in persistent systems:radia client automation (critical 10.0)
- [CVE-2015-1497](https://insights.sbomify.com/CVE-2015-1497/): Command injection in persistent systems:radia client automation (critical 10.0)
- [CVE-2015-1496](https://insights.sbomify.com/CVE-2015-1496/): Misconfiguration in motorola:motorola scanner sdk (high 7.2)
- [CVE-2015-1495](https://insights.sbomify.com/CVE-2015-1495/): Memory corruption in motorola:motorola scanner sdk (medium 6.8)
- [CVE-2015-1494](https://insights.sbomify.com/CVE-2015-1494/): Cross-site scripting in colorlib:fancybox (medium 4.3)
- [CVE-2015-1493](https://insights.sbomify.com/CVE-2015-1493/): Moodle directory traversal vulnerability (medium 6.8)
- [CVE-2015-1492](https://insights.sbomify.com/CVE-2015-1492/): Privilege escalation in symantec:endpoint protection manager (high 8.5)
- [CVE-2015-1491](https://insights.sbomify.com/CVE-2015-1491/): SQL injection in symantec:endpoint protection manager (medium 6.0)
- [CVE-2015-1490](https://insights.sbomify.com/CVE-2015-1490/): Path traversal in symantec:endpoint protection manager (medium 5.5)
- [CVE-2015-1489](https://insights.sbomify.com/CVE-2015-1489/): Privilege escalation in symantec:endpoint protection manager (high 8.5)
- [CVE-2015-1488](https://insights.sbomify.com/CVE-2015-1488/): Path traversal in symantec:endpoint protection manager (medium 4.0)
- [CVE-2015-1487](https://insights.sbomify.com/CVE-2015-1487/): Path traversal in symantec:endpoint protection manager (medium 5.5)
- [CVE-2015-1486](https://insights.sbomify.com/CVE-2015-1486/): Auth bypass in symantec:endpoint protection manager (high 7.5)
- [CVE-2015-1485](https://insights.sbomify.com/CVE-2015-1485/): Cross-site request forgery in symantec:data loss prevention (medium 6.8)
- [CVE-2015-1484](https://insights.sbomify.com/CVE-2015-1484/): Privilege escalation in symantec:workspace streaming (medium 6.9)
- [CVE-2015-1483](https://insights.sbomify.com/CVE-2015-1483/): Cross-site scripting in symantec:netbackup opscenter (high 7.5)
- [CVE-2015-1482](https://insights.sbomify.com/CVE-2015-1482/): Auth bypass in ansible:tower (medium 5.0)
- [CVE-2015-1481](https://insights.sbomify.com/CVE-2015-1481/): Privilege escalation in ansible:tower (medium 6.5)
- [CVE-2015-1480](https://insights.sbomify.com/CVE-2015-1480/): Information disclosure in manageengine:servicedesk plus (medium 4.0)
- [CVE-2015-1479](https://insights.sbomify.com/CVE-2015-1479/): SQL injection in zohocorp:servicedesk plus (medium 6.5)
- [CVE-2015-1478](https://insights.sbomify.com/CVE-2015-1478/): Cross-site scripting in cmsjunkie:j-classifiedsmanager (medium 4.3)
- [CVE-2015-1477](https://insights.sbomify.com/CVE-2015-1477/): SQL injection in cmsjunkie:j-classifiedsmanager (high 7.5)
- [CVE-2015-1476](https://insights.sbomify.com/CVE-2015-1476/): SQL injection in ecommercemajor project:ecommercemajor (high 7.5)
- [CVE-2015-1475](https://insights.sbomify.com/CVE-2015-1475/): Cross-site scripting in mylittleforum:my little forum (medium 4.3)
- [CVE-2015-1474](https://insights.sbomify.com/CVE-2015-1474/): Integer overflow in google:android (critical 10.0)
- [CVE-2015-1473](https://insights.sbomify.com/CVE-2015-1473/): Memory corruption in canonical:ubuntu linux (medium 6.4)
- [CVE-2015-1472](https://insights.sbomify.com/CVE-2015-1472/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2015-1471](https://insights.sbomify.com/CVE-2015-1471/): SQL injection in pragyan cms project:pragyan cms (high 7.5)
- [CVE-2015-1469](https://insights.sbomify.com/CVE-2015-1469/): Privilege escalation in servision:hvg video gateway firmware (critical 9.0)
- [CVE-2015-1467](https://insights.sbomify.com/CVE-2015-1467/): SQL injection in fork-cms:fork cms (high 7.5)
- [CVE-2015-1465](https://insights.sbomify.com/CVE-2015-1465/): Denial of service in canonical:ubuntu linux (high 7.8)
- [CVE-2015-1464](https://insights.sbomify.com/CVE-2015-1464/): Auth bypass in bestpractical:request tracker (medium 6.4)
- [CVE-2015-1463](https://insights.sbomify.com/CVE-2015-1463/): Denial of service in clamav:clamav (medium 5.0)
- [CVE-2015-1462](https://insights.sbomify.com/CVE-2015-1462/): Memory corruption in clamav:clamav (high 7.5)
- [CVE-2015-1461](https://insights.sbomify.com/CVE-2015-1461/): Memory corruption in clamav:clamav (high 7.5)
- [CVE-2015-1460](https://insights.sbomify.com/CVE-2015-1460/): Privilege escalation in huawei:quidway firmware (high 7.5)
- [CVE-2015-1459](https://insights.sbomify.com/CVE-2015-1459/): Cross-site scripting in fortinet:fortiauthenticator (medium 4.3)
- [CVE-2015-1458](https://insights.sbomify.com/CVE-2015-1458/): Privilege escalation in fortinet:fortiauthenticator (medium 6.9)
- [CVE-2015-1457](https://insights.sbomify.com/CVE-2015-1457/): Information disclosure in fortinet:fortiauthenticator (medium 4.9)
- [CVE-2015-1456](https://insights.sbomify.com/CVE-2015-1456/): Information disclosure in fortinet:fortiauthenticator (medium 4.0)
- [CVE-2015-1455](https://insights.sbomify.com/CVE-2015-1455/): Hardcoded credentials in fortinet:fortiauthenticator (high 7.5)
- [CVE-2015-1454](https://insights.sbomify.com/CVE-2015-1454/): Weak cryptography in bluecoat:proxyclient (high 7.1)
- [CVE-2015-1453](https://insights.sbomify.com/CVE-2015-1453/): Hardcoded credentials in fortinet:forticlient (medium 5.0)
- [CVE-2015-1452](https://insights.sbomify.com/CVE-2015-1452/): Denial of service in fortinet:fortios (high 7.8)
- [CVE-2015-1451](https://insights.sbomify.com/CVE-2015-1451/): Cross-site scripting in fortinet:fortios (low 3.5)
- [CVE-2015-1450](https://insights.sbomify.com/CVE-2015-1450/): SQL injection in restaurantbiller:restaurant biller (high 7.5)
- [CVE-2015-1449](https://insights.sbomify.com/CVE-2015-1449/): Memory corruption in siemens:ruggedcom firmware (critical 10.0)
- [CVE-2015-1448](https://insights.sbomify.com/CVE-2015-1448/): Auth bypass in siemens:ruggedcom firmware (critical 10.0)
- [CVE-2015-1445](https://insights.sbomify.com/CVE-2015-1445/): Other in fli4l:fli4l (high 7.2)
- [CVE-2015-1444](https://insights.sbomify.com/CVE-2015-1444/): Cross-site scripting in fli4l:fli4l (medium 4.3)
- [CVE-2015-1443](https://insights.sbomify.com/CVE-2015-1443/): Code injection in fli4l:fli4l (high 8.8)
- [CVE-2015-1442](https://insights.sbomify.com/CVE-2015-1442/): SQL injection in aas9:zerocms (high 7.5)
- [CVE-2015-1441](https://insights.sbomify.com/CVE-2015-1441/): SQL injection in piwigo:piwigo (high 7.5)
- [CVE-2015-1438](https://insights.sbomify.com/CVE-2015-1438/): Memory corruption in panda security:panda antivirus pro 2015 (high 7.8)
- [CVE-2015-1437](https://insights.sbomify.com/CVE-2015-1437/): Cross-site scripting in asus:rt-n10\+d1 firmware (medium 4.3)
- [CVE-2015-1436](https://insights.sbomify.com/CVE-2015-1436/): Cross-site scripting in easing slider project:easing slider (medium 4.3)
- [CVE-2015-1435](https://insights.sbomify.com/CVE-2015-1435/): Cross-site scripting in mylittleforum:my little forum (medium 4.3)
- [CVE-2015-1434](https://insights.sbomify.com/CVE-2015-1434/): SQL injection in mylittleforum:my little forum (medium 6.5)
- [CVE-2015-1433](https://insights.sbomify.com/CVE-2015-1433/): Cross-site scripting in fedoraproject:fedora (medium 4.3)
- [CVE-2015-1432](https://insights.sbomify.com/CVE-2015-1432/): Cross-site request forgery in phpbb:phpbb (medium 6.8)
- [CVE-2015-1431](https://insights.sbomify.com/CVE-2015-1431/): Cross-site scripting in phpbb:phpbb (medium 4.3)
- [CVE-2015-1430](https://insights.sbomify.com/CVE-2015-1430/): Buffer overflow in xymon 4.3.17-1. (critical 9.8)
- [CVE-2015-1429](https://insights.sbomify.com/CVE-2015-1429/): Path traversal in cybelesoft:thinfinity remote desktop workstation (high 7.5)
- [CVE-2015-1428](https://insights.sbomify.com/CVE-2015-1428/): SQL injection in sefrengo:sefrengo (high 7.5)
- [CVE-2015-1427](https://insights.sbomify.com/CVE-2015-1427/): Elasticsearch Groovy Scripting Engine Remote Code Execution (critical 9.8, exploited in the wild)
- [CVE-2015-1426](https://insights.sbomify.com/CVE-2015-1426/): Puppet Labs Facter allows local users to obtain sensitive Amazon EC2 IAM instance metadata (low 2.1)
- [CVE-2015-1425](https://insights.sbomify.com/CVE-2015-1425/): Other in jakweb:gecko cms (critical 9.8)
- [CVE-2015-1424](https://insights.sbomify.com/CVE-2015-1424/): Cross-site request forgery in jakweb:gecko cms (medium 6.8)
- [CVE-2015-1423](https://insights.sbomify.com/CVE-2015-1423/): SQL injection in jakweb:gecko cms (medium 6.5)
- [CVE-2015-1422](https://insights.sbomify.com/CVE-2015-1422/): Cross-site scripting in jakweb:gecko cms (medium 4.3)
- [CVE-2015-1421](https://insights.sbomify.com/CVE-2015-1421/): Use after free in canonical:ubuntu linux (critical 10.0)
- [CVE-2015-1420](https://insights.sbomify.com/CVE-2015-1420/): Race condition in debian:debian linux (low 1.9)
- [CVE-2015-1419](https://insights.sbomify.com/CVE-2015-1419/): Security feature bypass in opensuse:opensuse (medium 5.0)
- [CVE-2015-1418](https://insights.sbomify.com/CVE-2015-1418/): Command injection in freebsd:freebsd (high 7.8)
- [CVE-2015-1417](https://insights.sbomify.com/CVE-2015-1417/): Denial of service in freebsd:freebsd (high 7.5)
- [CVE-2015-1416](https://insights.sbomify.com/CVE-2015-1416/): Command injection in freebsd:freebsd (high 7.8)
- [CVE-2015-1415](https://insights.sbomify.com/CVE-2015-1415/): Information disclosure in freebsd:freebsd (low 2.1)
- [CVE-2015-1414](https://insights.sbomify.com/CVE-2015-1414/): Integer overflow in debian:debian linux (high 7.8)
- [CVE-2015-1405](https://insights.sbomify.com/CVE-2015-1405/): SQL injection in content rating extbase project:content rating extbase (high 7.5)
- [CVE-2015-1404](https://insights.sbomify.com/CVE-2015-1404/): Cross-site scripting in content rating extbase project:content rating extbase (medium 4.3)
- [CVE-2015-1403](https://insights.sbomify.com/CVE-2015-1403/): SQL injection in content rating project:content rating (high 7.5)
- [CVE-2015-1402](https://insights.sbomify.com/CVE-2015-1402/): Cross-site scripting in content rating project:content rating (medium 4.3)
- [CVE-2015-1401](https://insights.sbomify.com/CVE-2015-1401/): Auth bypass in ldap \/ sso authentication project:ldap \/ sso authentication (critical 9.8)
- [CVE-2015-1400](https://insights.sbomify.com/CVE-2015-1400/): SQL injection in npds:revolution (high 7.5)
- [CVE-2015-1399](https://insights.sbomify.com/CVE-2015-1399/): Code injection in magento:magento (medium 6.5)
- [CVE-2015-1398](https://insights.sbomify.com/CVE-2015-1398/): Path traversal in magento:magento (medium 6.5)
- [CVE-2015-1397](https://insights.sbomify.com/CVE-2015-1397/): SQL injection in magento:magento (medium 6.5)
- [CVE-2015-1396](https://insights.sbomify.com/CVE-2015-1396/): Path traversal in debian:debian linux (high 7.5)
- [CVE-2015-1395](https://insights.sbomify.com/CVE-2015-1395/): Path traversal in canonical:ubuntu linux (high 7.5)
- [CVE-2015-1394](https://insights.sbomify.com/CVE-2015-1394/): Cross-site scripting in 10web:photo gallery (medium 5.4)
- [CVE-2015-1393](https://insights.sbomify.com/CVE-2015-1393/): SQL injection in 10web:photo gallery (medium 6.5)
- [CVE-2015-1392](https://insights.sbomify.com/CVE-2015-1392/): SQL injection in arubanetworks:clearpass policy manager (medium 6.5)
- [CVE-2015-1391](https://insights.sbomify.com/CVE-2015-1391/): Cross-site request forgery in hp:airwave (high 8.8)
- [CVE-2015-1390](https://insights.sbomify.com/CVE-2015-1390/): Cross-site scripting in hp:airwave (medium 6.1)
- [CVE-2015-1389](https://insights.sbomify.com/CVE-2015-1389/): Cross-site scripting in arubanetworks:clearpass policy manager (medium 4.3)
- [CVE-2015-1388](https://insights.sbomify.com/CVE-2015-1388/): Command injection in arubanetworks:arubaos (high 7.2)
- [CVE-2015-1386](https://insights.sbomify.com/CVE-2015-1386/): Path traversal in unshield project:unshield (high 7.5)
- [CVE-2015-1385](https://insights.sbomify.com/CVE-2015-1385/): Cross-site scripting in blubrry:powerpress (medium 4.3)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/67/