# CVEs published 2015-09-20 26 CVEs were published on September 20, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-9227](https://cve.now/CVE-2014-9227.md): Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow local… (no CVSS) - [CVE-2014-9228](https://cve.now/CVE-2014-9228.md): sysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows local users to cause a denial of service… (no CVSS) - [CVE-2014-9229](https://cve.now/CVE-2014-9229.md): Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection (SEP) before… (no CVSS) - [CVE-2015-5689](https://cve.now/CVE-2015-5689.md): ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution… (no CVSS) - [CVE-2015-5690](https://cve.now/CVE-2015-5690.md): The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users… (no CVSS) - [CVE-2015-5691](https://cve.now/CVE-2015-5691.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (SWG) appliances with… (no CVSS) - [CVE-2015-5692](https://cve.now/CVE-2015-5692.md): admin\_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows… (no CVSS) - [CVE-2015-5693](https://cve.now/CVE-2015-5693.md): The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users… (no CVSS) - [CVE-2015-6547](https://cve.now/CVE-2015-6547.md): The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users… (no CVSS) - [CVE-2015-6548](https://cve.now/CVE-2015-6548.md): Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software… (no CVSS) - [CVE-2015-5632](https://cve.now/CVE-2015-5632.md): The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a… (no CVSS) - [CVE-2015-5633](https://cve.now/CVE-2015-5633.md): The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection… (no CVSS) - [CVE-2015-5634](https://cve.now/CVE-2015-5634.md): The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist… (no CVSS) - [CVE-2015-5635](https://cve.now/CVE-2015-5635.md): The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection… (no CVSS) - [CVE-2015-5636](https://cve.now/CVE-2015-5636.md): The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection… (no CVSS) - [CVE-2015-5637](https://cve.now/CVE-2015-5637.md): The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API… (no CVSS) - [CVE-2015-5638](https://cve.now/CVE-2015-5638.md): Directory traversal vulnerability in H2O before 1.4.5 and 1.5.x before 1.5.0-beta2, when the file.dir directive is enabled, allows remote… (no CVSS) - [CVE-2015-6284](https://cve.now/CVE-2015-6284.md): Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.1(2.33) on 7010, MSE… (no CVSS) - [CVE-2015-6295](https://cve.now/CVE-2015-6295.md): Cisco NX-OS 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 (N9K) devices allows remote attackers to cause a denial of service (CPU consumption… (no CVSS) - [CVE-2015-6299](https://cve.now/CVE-2015-6299.md): SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authenticated users to… (no CVSS) - [CVE-2015-6300](https://cve.now/CVE-2015-6300.md): Cisco Secure Access Control Server (ACS) Solution Engine 5.7(0.15) allows remote authenticated users to cause a denial of service (SSH… (no CVSS) - [CVE-2015-6301](https://cve.now/CVE-2015-6301.md): The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service (process… (no CVSS) - [CVE-2015-4304](https://cve.now/CVE-2015-4304.md): The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access… (no CVSS) - [CVE-2015-4305](https://cve.now/CVE-2015-4305.md): The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended… (no CVSS) - [CVE-2015-4306](https://cve.now/CVE-2015-4306.md): The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended… (no CVSS) - [CVE-2015-4307](https://cve.now/CVE-2015-4307.md): The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2015-09-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.