# CVEs published 2015-02-09

8 CVEs were published on February 9, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1564](https://cve.now/CVE-2015-1564.md): Cross-site scripting (XSS) vulnerability in style-underground/search in Plain Black WebGUI 7.10.29 and earlier allows remote attackers to in (no CVSS)
- [CVE-2015-1565](https://cve.now/CVE-2015-1565.md): Cross-site scripting (XSS) vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Glob (no CVSS)
- [CVE-2015-1566](https://cve.now/CVE-2015-1566.md): Cross-site scripting (XSS) vulnerability in DotNetNuke (DNN) before 7.4.0 allows remote attackers to inject arbitrary web script or HTML via (no CVSS, DotNetNuke.Core)
- [CVE-2015-1567](https://cve.now/CVE-2015-1567.md): Cross-site scripting (XSS) vulnerability in the admin page in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote authenti (no CVSS)
- [CVE-2015-1568](https://cve.now/CVE-2015-1568.md): Cross-site request forgery (CSRF) vulnerability in the GD Infinite Scroll module before 7.x-1.4 for Drupal allows remote attackers to hijack (no CVSS)
- [CVE-2015-1558](https://cve.now/CVE-2015-1558.md): Asterisk Open Source 12.x before 12.8.1 and 13.x before 13.1.1, when using the PJSIP channel driver, does not properly reclaim RTP ports, wh (no CVSS)
- [CVE-2015-1562](https://cve.now/CVE-2015-1562.md): Multiple cross-site scripting (XSS) vulnerabilities in Saurus CMS 4.7.0 allow remote attackers to inject arbitrary web script or HTML via th (no CVSS)
- [CVE-2015-1563](https://cve.now/CVE-2015-1563.md): The ARM GIC distributor virtualization in Xen 4.4.x and 4.5.x allows local guests to cause a denial of service by causing a large number mes (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-02-09
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.