# CVEs published 2015-02-06 39 CVEs were published on February 6, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-9632](https://cve.now/CVE-2014-9632.md): The TDI driver (avgtdix.sys) in AVG Internet Security before 2013.3495 Hot Fix 18 and 2015.x before 2015.5315 and Protection before 2015.531 (no CVSS) - [CVE-2014-9636](https://cve.now/CVE-2014-9636.md): unzip 6.0 allows remote attackers to cause a denial of service (out-of-bounds read or write and crash) via an extra field with an uncompress (no CVSS) - [CVE-2014-9641](https://cve.now/CVE-2014-9641.md): The tmeext.sys driver before 2.0.0.1015 in Trend Micro Antivirus Plus, Internet Security, and Maximum Security allows local users to write t (no CVSS) - [CVE-2014-9642](https://cve.now/CVE-2014-9642.md): bdagent.sys in BullGuard Antivirus, Internet Security, Premium Protection, and Online Backup before 15.0.288 allows local users to write dat (no CVSS) - [CVE-2014-9643](https://cve.now/CVE-2014-9643.md): K7Sentry.sys in K7 Computing Ultimate Security, Anti-Virus Plus, and Total Security before 14.2.0.253 allows local users to write to arbitra (no CVSS) - [CVE-2015-1305](https://cve.now/CVE-2015-1305.md): McAfee Data Loss Prevention Endpoint (DLPe) before 9.3.400 allows local users to write to arbitrary memory locations, and consequently gain (no CVSS) - [CVE-2015-1442](https://cve.now/CVE-2015-1442.md): SQL injection vulnerability in views/zero\_transact\_user.php in the administrative backend in ZeroCMS 1.3.3, 1.3.2, and earlier allows remote (no CVSS) - [CVE-2015-1444](https://cve.now/CVE-2015-1444.md): Multiple cross-site scripting (XSS) vulnerabilities in the web administration frontend in the httpd package in fli4l before 3.10.1 and 4.0 b (no CVSS) - [CVE-2015-1467](https://cve.now/CVE-2015-1467.md): Multiple SQL injection vulnerabilities in Translations in Fork CMS before 3.8.6 allow remote authenticated users to execute arbitrary SQL co (no CVSS) - [CVE-2015-1512](https://cve.now/CVE-2015-1512.md): Multiple cross-site scripting (XSS) vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or (no CVSS) - [CVE-2015-1513](https://cve.now/CVE-2015-1513.md): SQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute arbitrary SQL commands via the Username. (no CVSS) - [CVE-2015-1514](https://cve.now/CVE-2015-1514.md): Multiple SQL injection vulnerabilities in FancyFon FAMOC before 3.17.4 allow (1) remote attackers to execute arbitrary SQL commands via the (no CVSS) - [CVE-2014-0603](https://cve.now/CVE-2014-0603.md): The rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attackers to cause a denial of service (me (no CVSS) - [CVE-2014-0604](https://cve.now/CVE-2014-0604.md): Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attac (no CVSS) - [CVE-2014-0605](https://cve.now/CVE-2014-0605.md): Directory traversal vulnerability in the rftpcom.dll ActiveX control in Attachmate Reflection FTP Client before 14.1.429 allows remote attac (no CVSS) - [CVE-2014-5332](https://cve.now/CVE-2014-5332.md): Race condition in NVMap in NVIDIA Tegra Linux Kernel 3.10 allows local users to gain privileges via a crafted NVMAP\_IOC\_CREATE IOCTL call, w (no CVSS) - [CVE-2014-9353](https://cve.now/CVE-2014-9353.md): NetApp OnCommand Balance before 4.2P2 contains a "default privileged account," which allows remote attackers to gain privileges via unspecif (no CVSS) - [CVE-2014-9354](https://cve.now/CVE-2014-9354.md): NetApp OnCommand Balance before 4.2P3 allows local users to obtain sensitive information via unspecified vectors related to cleartext storag (no CVSS) - [CVE-2015-1209](https://cve.now/CVE-2015-1209.md): Use-after-free vulnerability in the VisibleSelection::nonBoundaryShadowTreeRootNode function in core/editing/VisibleSelection.cpp in the DOM (no CVSS) - [CVE-2015-1210](https://cve.now/CVE-2015-1210.md): The V8ThrowException::createDOMException function in bindings/core/v8/V8ThrowException.cpp in the V8 bindings in Blink, as used in Google Ch (no CVSS) - [CVE-2015-1211](https://cve.now/CVE-2015-1211.md): The OriginCanAccessServiceWorkers function in content/browser/service\_worker/service\_worker\_dispatcher\_host.cc in Google Chrome before 40.0. (no CVSS) - [CVE-2015-1212](https://cve.now/CVE-2015-1212.md): Multiple unspecified vulnerabilities in Google Chrome before 40.0.2214.111 on Windows, OS X, and Linux and before 40.0.2214.109 on Android a (no CVSS) - [CVE-2015-0314](https://cve.now/CVE-2015-0314.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0315](https://cve.now/CVE-2015-0315.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before (no CVSS) - [CVE-2015-0316](https://cve.now/CVE-2015-0316.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0317](https://cve.now/CVE-2015-0317.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0318](https://cve.now/CVE-2015-0318.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0319](https://cve.now/CVE-2015-0319.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0320](https://cve.now/CVE-2015-0320.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before (no CVSS) - [CVE-2015-0321](https://cve.now/CVE-2015-0321.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0322](https://cve.now/CVE-2015-0322.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before (no CVSS) - [CVE-2015-0323](https://cve.now/CVE-2015-0323.md): Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11 (no CVSS) - [CVE-2015-0324](https://cve.now/CVE-2015-0324.md): Buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 (no CVSS) - [CVE-2015-0325](https://cve.now/CVE-2015-0325.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0326](https://cve.now/CVE-2015-0326.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0327](https://cve.now/CVE-2015-0327.md): Heap-based buffer overflow in Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11 (no CVSS) - [CVE-2015-0328](https://cve.now/CVE-2015-0328.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0329](https://cve.now/CVE-2015-0329.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) - [CVE-2015-0330](https://cve.now/CVE-2015-0330.md): Adobe Flash Player before 13.0.0.269 and 14.x through 16.x before 16.0.0.305 on Windows and OS X and before 11.2.202.442 on Linux allows att (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-02-06 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.