# CVEs published 2015-02-23

13 CVEs were published on February 23, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-1315](https://cve.now/CVE-2015-1315.md): Buffer overflow in the charset\_to\_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code… (no CVSS)
- [CVE-2015-1426](https://cve.now/CVE-2015-1426.md): Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an… (no CVSS, facter)
- [CVE-2015-1589](https://cve.now/CVE-2015-1589.md): Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. (no CVSS)
- [CVE-2015-2047](https://cve.now/CVE-2015-2047.md): The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18, when configured… (no CVSS)
- [CVE-2015-2048](https://cve.now/CVE-2015-2048.md): Cross-site request forgery (CSRF) vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote attackers to hijack the… (no CVSS)
- [CVE-2015-2049](https://cve.now/CVE-2015-2049.md): Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute… (no CVSS)
- [CVE-2015-2050](https://cve.now/CVE-2015-2050.md): D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary commands via unspecified vectors. (no CVSS)
- [CVE-2015-2051](https://cve.now/CVE-2015-2051.md): The D-Link DIR-645 Wired/Wireless Router Rev. (CVSS 8.8, KEV)
- [CVE-2015-2052](https://cve.now/CVE-2015-2052.md): Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. (no CVSS)
- [CVE-2015-2053](https://cve.now/CVE-2015-2053.md): The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is… (no CVSS)
- [CVE-2015-2054](https://cve.now/CVE-2015-2054.md): CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows… (no CVSS)
- [CVE-2015-2055](https://cve.now/CVE-2015-2055.md): Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword… (no CVSS)
- [CVE-2014-7922](https://cve.now/CVE-2014-7922.md): The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-02-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.