# CVEs published 2015-04-17

11 CVEs were published on April 17, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-3035](https://cve.now/CVE-2015-3035.md): Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) (CVSS 7.5, KEV)
- [CVE-2015-0845](https://cve.now/CVE-2015-0845.md): Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows… (no CVSS)
- [CVE-2015-1318](https://cve.now/CVE-2015-1318.md): The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted… (no CVSS)
- [CVE-2015-1852](https://cve.now/CVE-2015-1852.md): The s3\_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification… (no CVSS, keystonemiddleware · python-keystoneclient)
- [CVE-2015-1856](https://cve.now/CVE-2015-1856.md): OpenStack Object Storage (Swift) before 2.3.0, when allow\_version is configured, allows remote authenticated users to delete the latest… (no CVSS, swift)
- [CVE-2015-0530](https://cve.now/CVE-2015-0530.md): Buffer overflow in an unspecified function in nsr\_render\_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before… (no CVSS)
- [CVE-2015-0691](https://cve.now/CVE-2015-0691.md): A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary… (no CVSS)
- [CVE-2015-0695](https://cve.now/CVE-2015-0695.md): Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group… (no CVSS)
- [CVE-2015-0700](https://cve.now/CVE-2015-0700.md): Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control… (no CVSS)
- [CVE-2015-0937](https://cve.now/CVE-2015-0937.md): Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before… (no CVSS)
- [CVE-2015-0938](https://cve.now/CVE-2015-0938.md): search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-04-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.