# CVEs published 2015-06-26

11 CVEs were published on June 26, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1266](https://cve.now/CVE-2015-1266.md): content/browser/webui/content\_web\_ui\_controller\_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in… (no CVSS)
- [CVE-2015-1267](https://cve.now/CVE-2015-1267.md): Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper… (no CVSS)
- [CVE-2015-1268](https://cve.now/CVE-2015-1268.md): bindings/scripts/v8\_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a… (no CVSS)
- [CVE-2015-1269](https://cve.now/CVE-2015-1269.md): The DecodeHSTSPreloadRaw function in net/http/transport\_security\_state.cc in Google Chrome before 43.0.2357.130 does not properly… (no CVSS)
- [CVE-2015-1158](https://cve.now/CVE-2015-1158.md): The add\_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value… (no CVSS)
- [CVE-2015-1159](https://cve.now/CVE-2015-1159.md): Cross-site scripting (XSS) vulnerability in the cgi\_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows… (no CVSS)
- [CVE-2015-4216](https://cve.now/CVE-2015-4216.md): The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security… (no CVSS)
- [CVE-2015-4217](https://cve.now/CVE-2015-4217.md): The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security… (no CVSS)
- [CVE-2015-4221](https://cve.now/CVE-2015-4221.md): Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows… (no CVSS)
- [CVE-2015-4222](https://cve.now/CVE-2015-4222.md): SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to… (no CVSS)
- [CVE-2015-4224](https://cve.now/CVE-2015-4224.md): Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-06-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.