# CVEs published 2015-10-02

7 CVEs were published on October 2, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-5653](https://cve.now/CVE-2015-5653.md): Buffer overflow in Canary Labs Trend Web Server before 9.5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet. (no CVSS)
- [CVE-2015-6308](https://cve.now/CVE-2015-6308.md): Cisco NX-OS 6.0(2)U6(0.46) on N3K devices allows remote authenticated users to cause a denial of service (temporary SNMP outage) via an… (no CVSS)
- [CVE-2015-6309](https://cve.now/CVE-2015-6309.md): Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to cause a denial of service… (no CVSS)
- [CVE-2015-2858](https://cve.now/CVE-2015-2858.md): Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified… (no CVSS)
- [CVE-2015-3876](https://cve.now/CVE-2015-3876.md): libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2)… (no CVSS)
- [CVE-2015-4546](https://cve.now/CVE-2015-4546.md): Directory traversal vulnerability in EMC RSA OneStep 6.9 before build 559, as used in RSA Certificate Manager and RSA Registration Manager… (no CVSS)
- [CVE-2015-6602](https://cve.now/CVE-2015-6602.md): libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-10-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.