# CVEs published 2015-04-13

19 CVEs were published on April 13, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9714](https://cve.now/CVE-2014-9714.md): Cross-site scripting (XSS) vulnerability in the WddxPacket::recursiveAddVar function in HHVM (aka the HipHop Virtual Machine) before 3.5.0… (no CVSS)
- [CVE-2015-0840](https://cve.now/CVE-2015-0840.md): The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification… (no CVSS)
- [CVE-2015-2775](https://cve.now/CVE-2015-2775.md): Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute… (no CVSS)
- [CVE-2015-2846](https://cve.now/CVE-2015-2846.md): BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link. (no CVSS)
- [CVE-2015-2931](https://cve.now/CVE-2015-2931.md): Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before… (no CVSS)
- [CVE-2015-2932](https://cve.now/CVE-2015-2932.md): Incomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to… (no CVSS)
- [CVE-2015-2933](https://cve.now/CVE-2015-2933.md): Cross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2… (no CVSS)
- [CVE-2015-2934](https://cve.now/CVE-2015-2934.md): MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle when the Zend interpreter xml\_parse… (no CVSS)
- [CVE-2015-2935](https://cve.now/CVE-2015-2935.md): MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to bypass the SVG filtering and obtain… (no CVSS)
- [CVE-2015-2936](https://cve.now/CVE-2015-2936.md): MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU… (no CVSS)
- [CVE-2015-2937](https://cve.now/CVE-2015-2937.md): MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend PHP, allows remote attackers to cause a… (no CVSS)
- [CVE-2015-2938](https://cve.now/CVE-2015-2938.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers… (no CVSS)
- [CVE-2015-2939](https://cve.now/CVE-2015-2939.md): Cross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script… (no CVSS)
- [CVE-2015-2940](https://cve.now/CVE-2015-2940.md): Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the… (no CVSS)
- [CVE-2015-2941](https://cve.now/CVE-2015-2941.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM… (no CVSS)
- [CVE-2015-2942](https://cve.now/CVE-2015-2942.md): MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2015-0675](https://cve.now/CVE-2015-0675.md): The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3… (no CVSS)
- [CVE-2015-0676](https://cve.now/CVE-2015-0676.md): The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before… (no CVSS)
- [CVE-2015-0677](https://cve.now/CVE-2015-0677.md): The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-04-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.