# CVEs published 2015-12-29 9 CVEs were published on December 29, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-3223](https://cve.now/CVE-2015-3223.md): The ldb\_wildcard\_compare function in ldb\_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x… (no CVSS) - [CVE-2015-5252](https://cve.now/CVE-2015-5252.md): vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring… (no CVSS) - [CVE-2015-5296](https://cve.now/CVE-2015-5296.md): Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which… (no CVSS) - [CVE-2015-5299](https://cve.now/CVE-2015-5299.md): The shadow\_copy2\_get\_shadow\_copy\_data function in modules/vfs\_shadow\_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and… (no CVSS) - [CVE-2015-5330](https://cve.now/CVE-2015-5330.md): ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string… (no CVSS) - [CVE-2015-7540](https://cve.now/CVE-2015-7540.md): The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory… (no CVSS) - [CVE-2015-7791](https://cve.now/CVE-2015-7791.md): Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated… (no CVSS) - [CVE-2015-8467](https://cve.now/CVE-2015-8467.md): The samldb\_check\_user\_account\_control\_acl function in dsdb/samdb/ldb\_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and… (no CVSS) - [CVE-2015-7786](https://cve.now/CVE-2015-7786.md): Cross-site scripting (XSS) vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics… (no CVSS) --- Source: cve.now Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards. Page: https://cve.now/archive/2015-12-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.