# Vulnerabilities published in 2015


- [CVE-2015-1384](https://insights.sbomify.com/CVE-2015-1384/): Cross-site scripting in banner effect header project:banner effect header (medium 4.3)
- [CVE-2015-1383](https://insights.sbomify.com/CVE-2015-1383/): Cross-site scripting in cyberhobo:geo mashup (medium 4.3)
- [CVE-2015-1382](https://insights.sbomify.com/CVE-2015-1382/): Denial of service in debian:debian linux (medium 5.0)
- [CVE-2015-1381](https://insights.sbomify.com/CVE-2015-1381/): Denial of service in debian:debian linux (medium 5.0)
- [CVE-2015-1380](https://insights.sbomify.com/CVE-2015-1380/): Denial of service in opensuse:opensuse (medium 5.0)
- [CVE-2015-1379](https://insights.sbomify.com/CVE-2015-1379/): Denial of service in dest-unreach:socat (high 7.5)
- [CVE-2015-1378](https://insights.sbomify.com/CVE-2015-1378/): Privilege escalation in grml:grml-debootstrap (high 7.5)
- [CVE-2015-1377](https://insights.sbomify.com/CVE-2015-1377/): Path traversal in webmin:webmin (medium 4.9)
- [CVE-2015-1376](https://insights.sbomify.com/CVE-2015-1376/): File upload in pixabay images project:pixabay images (medium 4.0)
- [CVE-2015-1375](https://insights.sbomify.com/CVE-2015-1375/): Missing authorization in pixabay images project:pixabay images (high 7.5)
- [CVE-2015-1374](https://insights.sbomify.com/CVE-2015-1374/): Cross-site request forgery in ferretcms project:ferretcms (medium 6.8)
- [CVE-2015-1373](https://insights.sbomify.com/CVE-2015-1373/): Cross-site scripting in ferretcms project:ferretcms (medium 4.3)
- [CVE-2015-1372](https://insights.sbomify.com/CVE-2015-1372/): SQL injection in ferretcms project:ferretcms (high 7.5)
- [CVE-2015-1371](https://insights.sbomify.com/CVE-2015-1371/): File upload in ferretcms project:ferretcms (high 7.5)
- [CVE-2015-1370](https://insights.sbomify.com/CVE-2015-1370/): VBScript Content Injection in marked (medium 4.3)
- [CVE-2015-1369](https://insights.sbomify.com/CVE-2015-1369/): SQL Injection in sequelize (high 7.5)
- [CVE-2015-1368](https://insights.sbomify.com/CVE-2015-1368/): Cross-site scripting in ansible:tower (medium 4.3)
- [CVE-2015-1367](https://insights.sbomify.com/CVE-2015-1367/): SQL injection in catbot project:catbot (high 7.5)
- [CVE-2015-1366](https://insights.sbomify.com/CVE-2015-1366/): Cross-site scripting in pixabay images project:pixabay images (medium 4.3)
- [CVE-2015-1365](https://insights.sbomify.com/CVE-2015-1365/): Path traversal in pixabay images project:pixabay images (medium 5.0)
- [CVE-2015-1364](https://insights.sbomify.com/CVE-2015-1364/): SQL injection in freereprintables:articlefr (high 7.5)
- [CVE-2015-1363](https://insights.sbomify.com/CVE-2015-1363/): Cross-site scripting in freereprintables:articlefr (medium 4.3)
- [CVE-2015-1362](https://insights.sbomify.com/CVE-2015-1362/): Memory corruption in two pilots:exif pilot (high 7.5)
- [CVE-2015-1361](https://insights.sbomify.com/CVE-2015-1361/): Memory corruption in google:chrome (medium 6.8)
- [CVE-2015-1360](https://insights.sbomify.com/CVE-2015-1360/): Memory corruption in google:chrome (high 7.5)
- [CVE-2015-1359](https://insights.sbomify.com/CVE-2015-1359/): Memory corruption in google:chrome (medium 6.8)
- [CVE-2015-1358](https://insights.sbomify.com/CVE-2015-1358/): Weak cryptography in siemens:wincc (medium 5.0)
- [CVE-2015-1357](https://insights.sbomify.com/CVE-2015-1357/): Information disclosure in siemens:ruggedcom firmware (medium 5.0)
- [CVE-2015-1356](https://insights.sbomify.com/CVE-2015-1356/): Security feature bypass in siemens:simatic step 7 (medium 4.4)
- [CVE-2015-1355](https://insights.sbomify.com/CVE-2015-1355/): Weak cryptography in siemens:simatic step 7 (low 2.1)
- [CVE-2015-1352](https://insights.sbomify.com/CVE-2015-1352/): Null dereference in apple:mac os x (medium 5.0)
- [CVE-2015-1351](https://insights.sbomify.com/CVE-2015-1351/): Use after free in apple:mac os x (high 7.5)
- [CVE-2015-1350](https://insights.sbomify.com/CVE-2015-1350/): Privilege escalation in linux:linux kernel (medium 5.5)
- [CVE-2015-1349](https://insights.sbomify.com/CVE-2015-1349/): Denial of service in isc:bind (medium 5.4)
- [CVE-2015-1348](https://insights.sbomify.com/CVE-2015-1348/): Memory corruption in arubanetworks:instant access point firmware (high 7.8)
- [CVE-2015-1347](https://insights.sbomify.com/CVE-2015-1347/): Cross-site scripting in enhancesoft:osticket (medium 4.3)
- [CVE-2015-1346](https://insights.sbomify.com/CVE-2015-1346/): Other in canonical:ubuntu linux (high 7.5)
- [CVE-2015-1345](https://insights.sbomify.com/CVE-2015-1345/): Memory corruption in gnu:grep (low 2.1)
- [CVE-2015-1344](https://insights.sbomify.com/CVE-2015-1344/): Privilege escalation in canonical:lxcfs (high 7.2)
- [CVE-2015-1343](https://insights.sbomify.com/CVE-2015-1343/): unity-scope-gdrive search feature logs search terms to syslog (low 2.0)
- [CVE-2015-1342](https://insights.sbomify.com/CVE-2015-1342/): Privilege escalation in canonical:lxcfs (medium 4.6)
- [CVE-2015-1341](https://insights.sbomify.com/CVE-2015-1341/): Apport privilege escalation through Python module imports (high 7.4)
- [CVE-2015-1340](https://insights.sbomify.com/CVE-2015-1340/): chmod race in doUidshiftIntoContainer (high 7.0)
- [CVE-2015-1339](https://insights.sbomify.com/CVE-2015-1339/): Denial of service in linux:linux kernel (medium 6.2)
- [CVE-2015-1338](https://insights.sbomify.com/CVE-2015-1338/): Other in apport project:apport (high 7.2)
- [CVE-2015-1337](https://insights.sbomify.com/CVE-2015-1337/): Security feature bypass in canonical:ubuntu linux (medium 6.8)
- [CVE-2015-1336](https://insights.sbomify.com/CVE-2015-1336/): Privilege escalation in man-db project:man-db (high 7.8)
- [CVE-2015-1335](https://insights.sbomify.com/CVE-2015-1335/): Privilege escalation in canonical:ubuntu linux (high 7.2)
- [CVE-2015-1334](https://insights.sbomify.com/CVE-2015-1334/): Security feature bypass in linuxcontainers:lxc (medium 4.6)
- [CVE-2015-1333](https://insights.sbomify.com/CVE-2015-1333/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2015-1332](https://insights.sbomify.com/CVE-2015-1332/): Memory corruption in canonical:ubuntu linux (high 8.8)
- [CVE-2015-1331](https://insights.sbomify.com/CVE-2015-1331/): Race condition in linuxcontainers:lxc (medium 4.9)
- [CVE-2015-1330](https://insights.sbomify.com/CVE-2015-1330/): Security feature bypass in canonical:ubuntu linux (medium 6.8)
- [CVE-2015-1329](https://insights.sbomify.com/CVE-2015-1329/): Use after free in canonical:ubuntu linux (high 8.8)
- [CVE-2015-1328](https://insights.sbomify.com/CVE-2015-1328/): Privilege escalation in canonical:ubuntu linux (high 7.8)
- [CVE-2015-1327](https://insights.sbomify.com/CVE-2015-1327/): Content-hub DBUS API doesn't prevent confined apps from passing paths to files without access (low 3.9)
- [CVE-2015-1326](https://insights.sbomify.com/CVE-2015-1326/): python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp (medium 5.7)
- [CVE-2015-1325](https://insights.sbomify.com/CVE-2015-1325/): Race condition in canonical:ubuntu linux (high 7.0)
- [CVE-2015-1324](https://insights.sbomify.com/CVE-2015-1324/): Privilege escalation in canonical:ubuntu linux (high 7.8)
- [CVE-2015-1323](https://insights.sbomify.com/CVE-2015-1323/): Information disclosure in canonical:ubuntu linux (medium 5.5)
- [CVE-2015-1322](https://insights.sbomify.com/CVE-2015-1322/): Path traversal in canonical:ubuntu linux (medium 4.6)
- [CVE-2015-1321](https://insights.sbomify.com/CVE-2015-1321/): Use after free in canonical:ubuntu linux (medium 6.8)
- [CVE-2015-1320](https://insights.sbomify.com/CVE-2015-1320/): Probe-and-enlist for SeaMicro chassis writes password to the log (medium 5.5)
- [CVE-2015-1319](https://insights.sbomify.com/CVE-2015-1319/): Security feature bypass in canonical:ubuntu linux (low 2.1)
- [CVE-2015-1318](https://insights.sbomify.com/CVE-2015-1318/): Privilege escalation in apport project:apport (high 7.2)
- [CVE-2015-1317](https://insights.sbomify.com/CVE-2015-1317/): Use after free in canonical:ubuntu linux (high 7.5)
- [CVE-2015-1316](https://insights.sbomify.com/CVE-2015-1316/): Juju Joyent provider uploads user's private ssh key by default (medium 6.4)
- [CVE-2015-1315](https://insights.sbomify.com/CVE-2015-1315/): Memory corruption in canonical:ubuntu linux (high 7.5)
- [CVE-2015-1314](https://insights.sbomify.com/CVE-2015-1314/): Information disclosure in usaa:mobile banking (low 2.1)
- [CVE-2015-1313](https://insights.sbomify.com/CVE-2015-1313/): Auth bypass in TeamCity (medium 6.5)
- [CVE-2015-1312](https://insights.sbomify.com/CVE-2015-1312/): Missing authorization in sap:enterprise resource planning (high 7.5)
- [CVE-2015-1311](https://insights.sbomify.com/CVE-2015-1311/): Code injection in sap:hana extended application services (critical 10.0)
- [CVE-2015-1310](https://insights.sbomify.com/CVE-2015-1310/): SQL injection in sybase:adaptive server enterprise (high 7.5)
- [CVE-2015-1309](https://insights.sbomify.com/CVE-2015-1309/): XML external entity in sap:netweaver abap (medium 5.0)
- [CVE-2015-1308](https://insights.sbomify.com/CVE-2015-1308/): Information disclosure in kde:kde-workspace (medium 4.3)
- [CVE-2015-1307](https://insights.sbomify.com/CVE-2015-1307/): Security feature bypass in kde:plasma-workspace (medium 4.3)
- [CVE-2015-1306](https://insights.sbomify.com/CVE-2015-1306/): Information disclosure in sympa:sympa (medium 5.0)
- [CVE-2015-1305](https://insights.sbomify.com/CVE-2015-1305/): Memory corruption in mcafee:data loss prevention endpoint (medium 6.9)
- [CVE-2015-1304](https://insights.sbomify.com/CVE-2015-1304/): Security feature bypass in google:chrome (high 7.5)
- [CVE-2015-1303](https://insights.sbomify.com/CVE-2015-1303/): Security feature bypass in google:chrome (high 7.5)
- [CVE-2015-1302](https://insights.sbomify.com/CVE-2015-1302/): Security feature bypass in google:chrome (high 7.5)
- [CVE-2015-1301](https://insights.sbomify.com/CVE-2015-1301/): Other in google:chrome (high 7.5)
- [CVE-2015-1300](https://insights.sbomify.com/CVE-2015-1300/): Information disclosure in google:chrome (medium 5.0)
- [CVE-2015-1299](https://insights.sbomify.com/CVE-2015-1299/): Use after free in google:chrome (high 7.5)
- [CVE-2015-1298](https://insights.sbomify.com/CVE-2015-1298/): Security feature bypass in google:chrome (medium 4.3)
- [CVE-2015-1297](https://insights.sbomify.com/CVE-2015-1297/): Security feature bypass in google:chrome (high 7.5)
- [CVE-2015-1296](https://insights.sbomify.com/CVE-2015-1296/): Security feature bypass in google:chrome (medium 5.0)
- [CVE-2015-1295](https://insights.sbomify.com/CVE-2015-1295/): Use after free in google:chrome (high 7.5)
- [CVE-2015-1294](https://insights.sbomify.com/CVE-2015-1294/): Use after free in google:chrome (high 7.5)
- [CVE-2015-1293](https://insights.sbomify.com/CVE-2015-1293/): Security feature bypass in google:chrome (high 7.5)
- [CVE-2015-1292](https://insights.sbomify.com/CVE-2015-1292/): Security feature bypass in google:chrome (medium 5.0)
- [CVE-2015-1291](https://insights.sbomify.com/CVE-2015-1291/): Security feature bypass in google:chrome (medium 6.4)
- [CVE-2015-1290](https://insights.sbomify.com/CVE-2015-1290/): Memory corruption in google:chrome (high 8.8)
- [CVE-2015-1289](https://insights.sbomify.com/CVE-2015-1289/): Other in debian:debian linux (high 7.5)
- [CVE-2015-1288](https://insights.sbomify.com/CVE-2015-1288/): Weak cryptography in debian:debian linux (medium 6.8)
- [CVE-2015-1287](https://insights.sbomify.com/CVE-2015-1287/): Security feature bypass in debian:debian linux (medium 4.3)
- [CVE-2015-1286](https://insights.sbomify.com/CVE-2015-1286/): Cross-site scripting in debian:debian linux (medium 4.3)
- [CVE-2015-1285](https://insights.sbomify.com/CVE-2015-1285/): Information disclosure in debian:debian linux (medium 5.0)
- [CVE-2015-1284](https://insights.sbomify.com/CVE-2015-1284/): Use after free in google:chrome (high 7.5)
- [CVE-2015-1283](https://insights.sbomify.com/CVE-2015-1283/): Integer overflow in canonical:ubuntu linux (medium 6.8)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/68/