# CVEs published 2015-02-12

18 CVEs were published on February 12, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-8110](https://cve.now/CVE-2014-8110.md): Multiple cross-site scripting (XSS) vulnerabilities in the web based administration console in Apache ActiveMQ 5.x before 5.10.1 allow remot (no CVSS, org.apache.activemq:activemq-client)
- [CVE-2014-9512](https://cve.now/CVE-2014-9512.md): rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path. (no CVSS)
- [CVE-2015-0227](https://cve.now/CVE-2015-0227.md): Apache WSS4J before 1.6.17 and 2.x before 2.0.2 allows remote attackers to bypass the requireSignedEncryptedDataElements configuration via a (no CVSS, org.apache.ws.security:wss4j · wss4j:wss4j)
- [CVE-2015-1345](https://cve.now/CVE-2015-1345.md): The bmexec\_trans function in kwset.c in grep 2.19 through 2.21 allows local users to cause a denial of service (out-of-bounds heap read and (no CVSS)
- [CVE-2015-1471](https://cve.now/CVE-2015-1471.md): SQL injection vulnerability in userprofile.lib.php in Pragyan CMS 3.0 allows remote attackers to execute arbitrary SQL commands via the user (no CVSS)
- [CVE-2015-1545](https://cve.now/CVE-2015-1545.md): The deref\_parseCtrl function in servers/slapd/overlays/deref.c in OpenLDAP 2.4.13 through 2.4.40 allows remote attackers to cause a denial o (no CVSS)
- [CVE-2015-1546](https://cve.now/CVE-2015-1546.md): Double free vulnerability in the get\_vrFilter function in servers/slapd/filter.c in OpenLDAP 2.4.40 allows remote attackers to cause a denia (no CVSS)
- [CVE-2014-2147](https://cve.now/CVE-2014-2147.md): The web interface in Cisco Prime Infrastructure 2.1 and earlier does not properly restrict use of IFRAME elements, which makes it easier for (no CVSS)
- [CVE-2014-2152](https://cve.now/CVE-2014-2152.md): Cross-site request forgery (CSRF) vulnerability in the INSERT page in Cisco Prime Infrastructure (PI) allows remote attackers to hijack the (no CVSS)
- [CVE-2014-2153](https://cve.now/CVE-2014-2153.md): Multiple cross-site scripting (XSS) vulnerabilities in INSERT pages in Cisco Prime Infrastructure allow remote attackers to inject arbitrary (no CVSS)
- [CVE-2014-3365](https://cve.now/CVE-2014-3365.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Prime Security Manager (PRSM) 9.2(.1-2) and earlier allow remote attackers to i (no CVSS)
- [CVE-2015-0580](https://cve.now/CVE-2015-0580.md): Multiple SQL injection vulnerabilities in the ACS View reporting interface pages in Cisco Secure Access Control System (ACS) before 5.5 patc (no CVSS)
- [CVE-2015-0592](https://cve.now/CVE-2015-0592.md): The Zone-Based Firewall implementation in Cisco IOS 15.4(2)T3 and earlier allows remote attackers to cause a denial of service (device reloa (no CVSS)
- [CVE-2015-0606](https://cve.now/CVE-2015-0606.md): The IOS Shell in Cisco IOS allows local users to cause a denial of service (device crash) via unspecified commands, aka Bug ID CSCur59696. (no CVSS)
- [CVE-2015-0608](https://cve.now/CVE-2015-0608.md): Race condition in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Cisco IOS 15.4(2)T3 and earlier allows remot (no CVSS)
- [CVE-2015-0610](https://cve.now/CVE-2015-0610.md): Race condition in the object-group ACL feature in Cisco IOS 15.5(2)T and earlier allows remote attackers to bypass intended access restricti (no CVSS)
- [CVE-2015-0611](https://cve.now/CVE-2015-0611.md): The administrative web-management portal in Cisco IX 8 (.0.1) and earlier on Cisco TelePresence IX5000 devices does not properly restrict th (no CVSS)
- [CVE-2015-0619](https://cve.now/CVE-2015-0619.md): Memory leak in the embedded web server in the WebVPN subsystem in Cisco Adaptive Security Appliance (ASA) Software allows remote attackers t (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-02-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.