# CVEs published 2015-12-23

13 CVEs were published on December 23, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-7924](https://cve.now/CVE-2015-7924.md): eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off action, which… (no CVSS)
- [CVE-2015-7925](https://cve.now/CVE-2015-7925.md): Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the… (no CVSS)
- [CVE-2015-7926](https://cve.now/CVE-2015-7926.md): eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain… (no CVSS)
- [CVE-2015-7927](https://cve.now/CVE-2015-7927.md): Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web… (no CVSS)
- [CVE-2015-7928](https://cve.now/CVE-2015-7928.md): eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote… (no CVSS)
- [CVE-2015-7929](https://cve.now/CVE-2015-7929.md): eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive… (no CVSS)
- [CVE-2015-6431](https://cve.now/CVE-2015-6431.md): Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source… (no CVSS)
- [CVE-2015-6471](https://cve.now/CVE-2015-6471.md): Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize… (no CVSS)
- [CVE-2015-6851](https://cve.now/CVE-2015-6851.md): EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging… (no CVSS)
- [CVE-2015-7911](https://cve.now/CVE-2015-7911.md): Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices… (no CVSS)
- [CVE-2015-7917](https://cve.now/CVE-2015-7917.md): Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a… (no CVSS)
- [CVE-2015-7935](https://cve.now/CVE-2015-7935.md): Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors. (no CVSS)
- [CVE-2015-7936](https://cve.now/CVE-2015-7936.md): Cross-site request forgery (CSRF) vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-12-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.