# Vulnerabilities published in 2015


- [CVE-2015-0360](https://insights.sbomify.com/CVE-2015-0360/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0359](https://insights.sbomify.com/CVE-2015-0359/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0358](https://insights.sbomify.com/CVE-2015-0358/): Use after free in adobe:flash player (critical 10.0)
- [CVE-2015-0357](https://insights.sbomify.com/CVE-2015-0357/): Information disclosure in adobe:flash player (medium 5.0)
- [CVE-2015-0356](https://insights.sbomify.com/CVE-2015-0356/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0355](https://insights.sbomify.com/CVE-2015-0355/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0354](https://insights.sbomify.com/CVE-2015-0354/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0353](https://insights.sbomify.com/CVE-2015-0353/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0352](https://insights.sbomify.com/CVE-2015-0352/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0351](https://insights.sbomify.com/CVE-2015-0351/): Use after free in adobe:flash player (critical 10.0)
- [CVE-2015-0350](https://insights.sbomify.com/CVE-2015-0350/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0349](https://insights.sbomify.com/CVE-2015-0349/): Use after free in adobe:flash player (critical 10.0)
- [CVE-2015-0348](https://insights.sbomify.com/CVE-2015-0348/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0347](https://insights.sbomify.com/CVE-2015-0347/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0346](https://insights.sbomify.com/CVE-2015-0346/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0345](https://insights.sbomify.com/CVE-2015-0345/): Cross-site scripting in adobe:coldfusion (medium 4.3)
- [CVE-2015-0344](https://insights.sbomify.com/CVE-2015-0344/): Cross-site scripting in adobe:connect (medium 4.3)
- [CVE-2015-0343](https://insights.sbomify.com/CVE-2015-0343/): Cross-site scripting in adobe:connect (medium 4.3)
- [CVE-2015-0342](https://insights.sbomify.com/CVE-2015-0342/): Use after free in adobe:flash player (critical 10.0)
- [CVE-2015-0341](https://insights.sbomify.com/CVE-2015-0341/): Use after free in adobe:flash player (critical 10.0)
- [CVE-2015-0340](https://insights.sbomify.com/CVE-2015-0340/): Security feature bypass in adobe:flash player (medium 5.0)
- [CVE-2015-0339](https://insights.sbomify.com/CVE-2015-0339/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0338](https://insights.sbomify.com/CVE-2015-0338/): Integer overflow in adobe:flash player (critical 10.0)
- [CVE-2015-0337](https://insights.sbomify.com/CVE-2015-0337/): Security feature bypass in adobe:flash player (medium 5.0)
- [CVE-2015-0336](https://insights.sbomify.com/CVE-2015-0336/): Memory corruption in adobe:flash player (critical 9.3)
- [CVE-2015-0335](https://insights.sbomify.com/CVE-2015-0335/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0334](https://insights.sbomify.com/CVE-2015-0334/): Memory corruption in adobe:flash player (critical 9.3)
- [CVE-2015-0333](https://insights.sbomify.com/CVE-2015-0333/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0332](https://insights.sbomify.com/CVE-2015-0332/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0331](https://insights.sbomify.com/CVE-2015-0331/): Use after free in adobe:flash player (critical 10.0)
- [CVE-2015-0330](https://insights.sbomify.com/CVE-2015-0330/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0329](https://insights.sbomify.com/CVE-2015-0329/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0328](https://insights.sbomify.com/CVE-2015-0328/): Null dereference in adobe:flash player (critical 10.0)
- [CVE-2015-0327](https://insights.sbomify.com/CVE-2015-0327/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0326](https://insights.sbomify.com/CVE-2015-0326/): Null dereference in adobe:flash player (critical 10.0)
- [CVE-2015-0325](https://insights.sbomify.com/CVE-2015-0325/): Null dereference in adobe:flash player (critical 10.0)
- [CVE-2015-0324](https://insights.sbomify.com/CVE-2015-0324/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0323](https://insights.sbomify.com/CVE-2015-0323/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0322](https://insights.sbomify.com/CVE-2015-0322/): Use after free in adobe:flash player (critical 10.0)
- [CVE-2015-0321](https://insights.sbomify.com/CVE-2015-0321/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0320](https://insights.sbomify.com/CVE-2015-0320/): Use after free in adobe:flash player (critical 10.0)
- [CVE-2015-0319](https://insights.sbomify.com/CVE-2015-0319/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0318](https://insights.sbomify.com/CVE-2015-0318/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0317](https://insights.sbomify.com/CVE-2015-0317/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0316](https://insights.sbomify.com/CVE-2015-0316/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0315](https://insights.sbomify.com/CVE-2015-0315/): Use after free in adobe:flash player (critical 10.0)
- [CVE-2015-0314](https://insights.sbomify.com/CVE-2015-0314/): Memory corruption in adobe:flash player (critical 10.0)
- [CVE-2015-0313](https://insights.sbomify.com/CVE-2015-0313/): Adobe Flash Player Use-After-Free (high 7.8, exploited in the wild)
- [CVE-2015-0312](https://insights.sbomify.com/CVE-2015-0312/): Memory corruption in adobe:flash player (critical 9.3)
- [CVE-2015-0311](https://insights.sbomify.com/CVE-2015-0311/): Adobe Flash Player Remote Code Execution (high 7.8, exploited in the wild)
- [CVE-2015-0310](https://insights.sbomify.com/CVE-2015-0310/): Adobe Flash Player ASLR Bypass (high 7.8, exploited in the wild)
- [CVE-2015-0309](https://insights.sbomify.com/CVE-2015-0309/): Memory corruption in adobe:adobe air (critical 10.0)
- [CVE-2015-0308](https://insights.sbomify.com/CVE-2015-0308/): Use after free in adobe:adobe air (critical 10.0)
- [CVE-2015-0307](https://insights.sbomify.com/CVE-2015-0307/): Memory corruption in adobe:adobe air (high 8.5)
- [CVE-2015-0306](https://insights.sbomify.com/CVE-2015-0306/): Memory corruption in adobe:adobe air (critical 10.0)
- [CVE-2015-0305](https://insights.sbomify.com/CVE-2015-0305/): Memory corruption in adobe:adobe air (critical 9.3)
- [CVE-2015-0304](https://insights.sbomify.com/CVE-2015-0304/): Memory corruption in adobe:adobe air (critical 10.0)
- [CVE-2015-0303](https://insights.sbomify.com/CVE-2015-0303/): Memory corruption in adobe:adobe air (critical 10.0)
- [CVE-2015-0302](https://insights.sbomify.com/CVE-2015-0302/): Information disclosure in adobe:adobe air (medium 5.0)
- [CVE-2015-0301](https://insights.sbomify.com/CVE-2015-0301/): Other in adobe:adobe air (critical 10.0)
- [CVE-2015-0299](https://insights.sbomify.com/CVE-2015-0299/): Cross-site scripting in open source point of sale project:open source point of sale (medium 4.0)
- [CVE-2015-0298](https://insights.sbomify.com/CVE-2015-0298/): Cross-site scripting in redhat:mod cluster (medium 4.3)
- [CVE-2015-0297](https://insights.sbomify.com/CVE-2015-0297/): Missing authorization in redhat:jboss operations network (critical 9.0)
- [CVE-2015-0296](https://insights.sbomify.com/CVE-2015-0296/): Other in tug:texlive (medium 4.7)
- [CVE-2015-0295](https://insights.sbomify.com/CVE-2015-0295/): Denial of service in digia:qt (medium 5.0)
- [CVE-2015-0294](https://insights.sbomify.com/CVE-2015-0294/): Security feature bypass in GnuTLS (high 7.5)
- [CVE-2015-0293](https://insights.sbomify.com/CVE-2015-0293/): Denial of service in openssl:openssl (medium 5.0)
- [CVE-2015-0292](https://insights.sbomify.com/CVE-2015-0292/): Integer overflow in openssl:openssl (high 7.5)
- [CVE-2015-0291](https://insights.sbomify.com/CVE-2015-0291/): Null dereference in openssl:openssl (medium 5.0)
- [CVE-2015-0290](https://insights.sbomify.com/CVE-2015-0290/): Memory corruption in openssl:openssl (medium 5.0)
- [CVE-2015-0289](https://insights.sbomify.com/CVE-2015-0289/): Null dereference in openssl:openssl (medium 5.0)
- [CVE-2015-0288](https://insights.sbomify.com/CVE-2015-0288/): Null dereference in openssl:openssl (medium 5.0)
- [CVE-2015-0287](https://insights.sbomify.com/CVE-2015-0287/): Memory corruption in openssl:openssl (medium 5.0)
- [CVE-2015-0286](https://insights.sbomify.com/CVE-2015-0286/): Denial of service in openssl:openssl (medium 5.0)
- [CVE-2015-0285](https://insights.sbomify.com/CVE-2015-0285/): Weak cryptography in openssl:openssl (medium 4.3)
- [CVE-2015-0284](https://insights.sbomify.com/CVE-2015-0284/): Cross-site scripting in redhat:satellite (medium 5.4)
- [CVE-2015-0283](https://insights.sbomify.com/CVE-2015-0283/): Denial of service in redhat:slapi-nis (high 7.8)
- [CVE-2015-0282](https://insights.sbomify.com/CVE-2015-0282/): Weak cryptography in gnu:gnutls (medium 5.0)
- [CVE-2015-0279](https://insights.sbomify.com/CVE-2015-0279/): Code injection in redhat:richfaces (medium 6.8)
- [CVE-2015-0278](https://insights.sbomify.com/CVE-2015-0278/): Privilege escalation in fedoraproject:fedora (critical 10.0)
- [CVE-2015-0277](https://insights.sbomify.com/CVE-2015-0277/): Auth bypass in picketlink:picketlink (medium 6.0)
- [CVE-2015-0276](https://insights.sbomify.com/CVE-2015-0276/): Kallithea cross-site request forgery (CSRF) vulnerability (high 8.8)
- [CVE-2015-0275](https://insights.sbomify.com/CVE-2015-0275/): Denial of service in linux:linux kernel (medium 4.9)
- [CVE-2015-0274](https://insights.sbomify.com/CVE-2015-0274/): Integer overflow in linux:linux kernel (high 7.2)
- [CVE-2015-0273](https://insights.sbomify.com/CVE-2015-0273/): Use after free in php:php (high 7.5)
- [CVE-2015-0272](https://insights.sbomify.com/CVE-2015-0272/): Denial of service in canonical:ubuntu linux (medium 5.0)
- [CVE-2015-0271](https://insights.sbomify.com/CVE-2015-0271/): Path traversal in redhat:openstack (medium 4.0)
- [CVE-2015-0270](https://insights.sbomify.com/CVE-2015-0270/): Zend Framework Allows SQL Injection (critical 9.8)
- [CVE-2015-0269](https://insights.sbomify.com/CVE-2015-0269/): Contao Core directory traversal vulnerability (medium 4.3)
- [CVE-2015-0268](https://insights.sbomify.com/CVE-2015-0268/): Denial of service in xen:xen (medium 4.9)
- [CVE-2015-0267](https://insights.sbomify.com/CVE-2015-0267/): Race condition in redhat:kexec-tools (low 3.6)
- [CVE-2015-0266](https://insights.sbomify.com/CVE-2015-0266/): Apache Ranger allows users to bypass intended access restrictions via direct access to module URLs (high 7.1)
- [CVE-2015-0265](https://insights.sbomify.com/CVE-2015-0265/): Apache Ranger Cross-site Scripting vulnerability (medium 6.1)
- [CVE-2015-0264](https://insights.sbomify.com/CVE-2015-0264/): Apache Camel allows remote actor to read arbitrary files via external entity in invalid XML string or GenericFile object (medium 5.0)
- [CVE-2015-0263](https://insights.sbomify.com/CVE-2015-0263/): Apache Camel XML External Entity vulnerability (medium 5.0)
- [CVE-2015-0261](https://insights.sbomify.com/CVE-2015-0261/): Integer overflow in tcpdump:tcpdump (high 7.5)
- [CVE-2015-0260](https://insights.sbomify.com/CVE-2015-0260/): RhodeCode and Kallithea are vulnerable to sensitive information disclosure (medium 4.0)
- [CVE-2015-0259](https://insights.sbomify.com/CVE-2015-0259/): OpenStack Compute (Nova) has Insufficient Verification of Data Authenticity (medium 5.1)
- [CVE-2015-0258](https://insights.sbomify.com/CVE-2015-0258/): File upload in Collabtive (high 8.8)
- [CVE-2015-0257](https://insights.sbomify.com/CVE-2015-0257/): Misconfiguration in redhat:enterprise virtualization manager (low 2.1)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/79/