# Vulnerabilities published in 2015


- [CVE-2015-0255](https://insights.sbomify.com/CVE-2015-0255/): Information disclosure in opensuse:opensuse (medium 6.4)
- [CVE-2015-0254](https://insights.sbomify.com/CVE-2015-0254/): XXE in Apache Standard Taglibs (high 7.5)
- [CVE-2015-0253](https://insights.sbomify.com/CVE-2015-0253/): Null dereference in apache:http server (medium 5.0)
- [CVE-2015-0252](https://insights.sbomify.com/CVE-2015-0252/): Denial of service in apache:xerces-c\+\+ (medium 5.0)
- [CVE-2015-0251](https://insights.sbomify.com/CVE-2015-0251/): Other in apache:subversion (medium 4.0)
- [CVE-2015-0250](https://insights.sbomify.com/CVE-2015-0250/): Improper Input Validation in Apache Batik (medium 6.4)
- [CVE-2015-0249](https://insights.sbomify.com/CVE-2015-0249/): Code injection in apache:roller (high 7.2)
- [CVE-2015-0248](https://insights.sbomify.com/CVE-2015-0248/): Denial of service in apache:subversion (medium 5.0)
- [CVE-2015-0247](https://insights.sbomify.com/CVE-2015-0247/): Memory corruption in canonical:ubuntu linux (medium 4.6)
- [CVE-2015-0245](https://insights.sbomify.com/CVE-2015-0245/): Race condition in freedesktop:dbus (low 1.9)
- [CVE-2015-0244](https://insights.sbomify.com/CVE-2015-0244/): SQL injection in PostgreSQL (critical 9.8)
- [CVE-2015-0243](https://insights.sbomify.com/CVE-2015-0243/): Memory corruption in PostgreSQL (high 8.8)
- [CVE-2015-0242](https://insights.sbomify.com/CVE-2015-0242/): Memory corruption in PostgreSQL (high 8.8)
- [CVE-2015-0241](https://insights.sbomify.com/CVE-2015-0241/): Memory corruption in PostgreSQL (high 8.8)
- [CVE-2015-0240](https://insights.sbomify.com/CVE-2015-0240/): Memory corruption in canonical:ubuntu linux (critical 10.0)
- [CVE-2015-0239](https://insights.sbomify.com/CVE-2015-0239/): Privilege escalation in canonical:ubuntu linux (medium 4.4)
- [CVE-2015-0238](https://insights.sbomify.com/CVE-2015-0238/): Information disclosure in redhat:openshift (low 3.3)
- [CVE-2015-0237](https://insights.sbomify.com/CVE-2015-0237/): Denial of service in redhat:enterprise virtualization manager (medium 6.8)
- [CVE-2015-0236](https://insights.sbomify.com/CVE-2015-0236/): Information disclosure in canonical:ubuntu linux (low 3.5)
- [CVE-2015-0235](https://insights.sbomify.com/CVE-2015-0235/): Memory corruption in apple:mac os x (critical 10.0)
- [CVE-2015-0234](https://insights.sbomify.com/CVE-2015-0234/): Other in pki-core project:pki-core (high 7.5)
- [CVE-2015-0233](https://insights.sbomify.com/CVE-2015-0233/): Other in fedoraproject:389 administration server (medium 4.2)
- [CVE-2015-0232](https://insights.sbomify.com/CVE-2015-0232/): Memory corruption in php:php (medium 6.8)
- [CVE-2015-0231](https://insights.sbomify.com/CVE-2015-0231/): Use after free in php:php (high 7.5)
- [CVE-2015-0228](https://insights.sbomify.com/CVE-2015-0228/): Denial of service in apache:http server (medium 5.0)
- [CVE-2015-0227](https://insights.sbomify.com/CVE-2015-0227/): Improper Access Control in Apache WSS4J (medium 5.0)
- [CVE-2015-0226](https://insights.sbomify.com/CVE-2015-0226/): Use of a Broken or Risky Cryptographic Algorithm in Apache WSS4J (high 7.5)
- [CVE-2015-0225](https://insights.sbomify.com/CVE-2015-0225/): Improper Neutralization of Special Elements used in a Command in Apache Cassandra (high 7.5)
- [CVE-2015-0224](https://insights.sbomify.com/CVE-2015-0224/): Denial of service in apache:qpid (high 7.5)
- [CVE-2015-0223](https://insights.sbomify.com/CVE-2015-0223/): Auth bypass in apache:qpid (medium 5.0)
- [CVE-2015-0222](https://insights.sbomify.com/CVE-2015-0222/): Django database denial-of-service with ModelMultipleChoiceField (medium 5.0)
- [CVE-2015-0221](https://insights.sbomify.com/CVE-2015-0221/): Django DoS in django.views.static.serve (medium 5.0)
- [CVE-2015-0220](https://insights.sbomify.com/CVE-2015-0220/): Django Cross-site Scripting Vulnerability (medium 4.3)
- [CVE-2015-0219](https://insights.sbomify.com/CVE-2015-0219/): Django WSGI Header Spoofing Vulnerability (medium 5.0)
- [CVE-2015-0218](https://insights.sbomify.com/CVE-2015-0218/): Moodle cross-site request forgery (CSRF) vulnerability (medium 6.8)
- [CVE-2015-0217](https://insights.sbomify.com/CVE-2015-0217/): Moodle allows attackers to cause a denial of service (medium 6.8)
- [CVE-2015-0216](https://insights.sbomify.com/CVE-2015-0216/): Moodle does not set the RISK_XSS bit for graders (low 3.5)
- [CVE-2015-0215](https://insights.sbomify.com/CVE-2015-0215/): Moodle allows attackers to obtain sensitive calendar-event information (medium 4.0)
- [CVE-2015-0214](https://insights.sbomify.com/CVE-2015-0214/): Moodle allows attackers to bypass a messaging-disabled setting (medium 4.0)
- [CVE-2015-0213](https://insights.sbomify.com/CVE-2015-0213/): Moodle multiple cross-site request forgery (CSRF) vulnerabilities (medium 6.8)
- [CVE-2015-0212](https://insights.sbomify.com/CVE-2015-0212/): Moodle cross-site scripting (XSS) vulnerability (low 3.5)
- [CVE-2015-0211](https://insights.sbomify.com/CVE-2015-0211/): Moodle allows attackers to obtain sensitive information (medium 4.0)
- [CVE-2015-0210](https://insights.sbomify.com/CVE-2015-0210/): Security feature bypass in w1.fi:wpa supplicant (medium 5.9)
- [CVE-2015-0209](https://insights.sbomify.com/CVE-2015-0209/): Use after free in openssl:openssl (medium 6.8)
- [CVE-2015-0208](https://insights.sbomify.com/CVE-2015-0208/): Null dereference in openssl:openssl (medium 4.3)
- [CVE-2015-0207](https://insights.sbomify.com/CVE-2015-0207/): Denial of service in openssl:openssl (medium 5.0)
- [CVE-2015-0206](https://insights.sbomify.com/CVE-2015-0206/): Denial of service in openssl:openssl (medium 5.0)
- [CVE-2015-0205](https://insights.sbomify.com/CVE-2015-0205/): Auth bypass in openssl:openssl (medium 5.0)
- [CVE-2015-0204](https://insights.sbomify.com/CVE-2015-0204/): Weak cryptography in openssl:openssl (medium 4.3)
- [CVE-2015-0203](https://insights.sbomify.com/CVE-2015-0203/): Denial of service in apache:qpid (medium 6.5)
- [CVE-2015-0202](https://insights.sbomify.com/CVE-2015-0202/): Denial of service in apache:subversion (high 7.8)
- [CVE-2015-0201](https://insights.sbomify.com/CVE-2015-0201/): Moderate severity vulnerability that affects org.springframework:spring-core (medium 5.0)
- [CVE-2015-0200](https://insights.sbomify.com/CVE-2015-0200/): Information disclosure in ibm:websphere commerce (low 2.1)
- [CVE-2015-0199](https://insights.sbomify.com/CVE-2015-0199/): Memory corruption in ibm:general parallel file system (medium 4.9)
- [CVE-2015-0198](https://insights.sbomify.com/CVE-2015-0198/): Auth bypass in ibm:general parallel file system (critical 10.0)
- [CVE-2015-0197](https://insights.sbomify.com/CVE-2015-0197/): Privilege escalation in ibm:general parallel file system (high 7.2)
- [CVE-2015-0196](https://insights.sbomify.com/CVE-2015-0196/): Other in ibm:websphere commerce (medium 5.0)
- [CVE-2015-0195](https://insights.sbomify.com/CVE-2015-0195/): Cross-site scripting in ibm:content template catalog (medium 4.3)
- [CVE-2015-0194](https://insights.sbomify.com/CVE-2015-0194/): XML external entity in ibm:sterling b2b integrator (medium 6.5)
- [CVE-2015-0193](https://insights.sbomify.com/CVE-2015-0193/): Cross-site scripting in ibm:business process manager (low 3.5)
- [CVE-2015-0192](https://insights.sbomify.com/CVE-2015-0192/): Privilege escalation in ibm:java (critical 9.8)
- [CVE-2015-0189](https://insights.sbomify.com/CVE-2015-0189/): Memory corruption in ibm:websphere mq (medium 4.0)
- [CVE-2015-0180](https://insights.sbomify.com/CVE-2015-0180/): Missing authorization in ibm:infosphere information server (medium 5.5)
- [CVE-2015-0179](https://insights.sbomify.com/CVE-2015-0179/): Privilege escalation in ibm:domino (high 7.2)
- [CVE-2015-0178](https://insights.sbomify.com/CVE-2015-0178/): Information disclosure in ibm:liberty (medium 4.3)
- [CVE-2015-0177](https://insights.sbomify.com/CVE-2015-0177/): Cross-site scripting in ibm:websphere portal (low 3.5)
- [CVE-2015-0176](https://insights.sbomify.com/CVE-2015-0176/): Cross-site scripting in ibm:websphere mq (medium 4.3)
- [CVE-2015-0175](https://insights.sbomify.com/CVE-2015-0175/): Privilege escalation in ibm:websphere application server (medium 5.5)
- [CVE-2015-0174](https://insights.sbomify.com/CVE-2015-0174/): Information disclosure in ibm:websphere application server (medium 4.0)
- [CVE-2015-0173](https://insights.sbomify.com/CVE-2015-0173/): Weak cryptography in ibm:websphere mq internet pass thru (medium 4.3)
- [CVE-2015-0172](https://insights.sbomify.com/CVE-2015-0172/): Security feature bypass in ibm:security siteprotector system (high 7.5)
- [CVE-2015-0171](https://insights.sbomify.com/CVE-2015-0171/): Path traversal in ibm:security siteprotector system (medium 5.5)
- [CVE-2015-0170](https://insights.sbomify.com/CVE-2015-0170/): Information disclosure in ibm:security siteprotector system (low 2.1)
- [CVE-2015-0169](https://insights.sbomify.com/CVE-2015-0169/): Command injection in ibm:security siteprotector system (medium 4.0)
- [CVE-2015-0168](https://insights.sbomify.com/CVE-2015-0168/): Cross-site scripting in ibm:security siteprotector system (low 3.5)
- [CVE-2015-0167](https://insights.sbomify.com/CVE-2015-0167/): Cross-site scripting in textangular:textangular (medium 4.3)
- [CVE-2015-0162](https://insights.sbomify.com/CVE-2015-0162/): Privilege escalation in ibm:security siteprotector system (high 7.0)
- [CVE-2015-0161](https://insights.sbomify.com/CVE-2015-0161/): SQL injection in ibm:security siteprotector system (medium 6.5)
- [CVE-2015-0160](https://insights.sbomify.com/CVE-2015-0160/): Command injection in ibm:security siteprotector system (critical 9.0)
- [CVE-2015-0158](https://insights.sbomify.com/CVE-2015-0158/): Cross-site scripting in ibm:business process manager (medium 4.3)
- [CVE-2015-0157](https://insights.sbomify.com/CVE-2015-0157/): Denial of service in ibm:db2 (medium 6.8)
- [CVE-2015-0156](https://insights.sbomify.com/CVE-2015-0156/): Cross-site scripting in ibm:business process manager (low 3.5)
- [CVE-2015-0153](https://insights.sbomify.com/CVE-2015-0153/): Information disclosure in dlink:dir-815 firmware (high 7.5)
- [CVE-2015-0152](https://insights.sbomify.com/CVE-2015-0152/): Information disclosure in dlink:dir-815 firmware (critical 9.8)
- [CVE-2015-0151](https://insights.sbomify.com/CVE-2015-0151/): Cross-site request forgery in dlink:dir-815 firmware (high 8.8)
- [CVE-2015-0150](https://insights.sbomify.com/CVE-2015-0150/): Auth bypass in dlink:dir-815 firmware (critical 9.8)
- [CVE-2015-0149](https://insights.sbomify.com/CVE-2015-0149/): Missing authorization in ibm:api management (medium 5.5)
- [CVE-2015-0146](https://insights.sbomify.com/CVE-2015-0146/): Security feature bypass in ibm:content collector (low 2.1)
- [CVE-2015-0145](https://insights.sbomify.com/CVE-2015-0145/): Cross-site request forgery in ibm:openpages grc platform (medium 6.8)
- [CVE-2015-0144](https://insights.sbomify.com/CVE-2015-0144/): Cross-site scripting in ibm:openpages grc platform (low 3.5)
- [CVE-2015-0143](https://insights.sbomify.com/CVE-2015-0143/): Information disclosure in ibm:openpages grc platform (medium 4.0)
- [CVE-2015-0142](https://insights.sbomify.com/CVE-2015-0142/): Denial of service in ibm:openpages grc platform (medium 4.0)
- [CVE-2015-0141](https://insights.sbomify.com/CVE-2015-0141/): Missing authorization in ibm:openpages grc platform (medium 4.0)
- [CVE-2015-0140](https://insights.sbomify.com/CVE-2015-0140/): Code injection in ibm:spss statistics (medium 6.8)
- [CVE-2015-0139](https://insights.sbomify.com/CVE-2015-0139/): Cross-site scripting in ibm:websphere portal (low 3.5)
- [CVE-2015-0138](https://insights.sbomify.com/CVE-2015-0138/): Weak cryptography in ibm:tivoli directory server (medium 4.3)
- [CVE-2015-0137](https://insights.sbomify.com/CVE-2015-0137/): Security feature bypass in ibm:powervc (medium 4.3)
- [CVE-2015-0136](https://insights.sbomify.com/CVE-2015-0136/): Information disclosure in ibm:powervc (low 2.1)
- [CVE-2015-0135](https://insights.sbomify.com/CVE-2015-0135/): Integer overflow in ibm:domino (critical 10.0)
- [CVE-2015-0134](https://insights.sbomify.com/CVE-2015-0134/): Memory corruption in ibm:domino (critical 10.0)

---
From sbomify Insights: https://insights.sbomify.com/years/2015/page/80/