# CVEs published 2015-02-16 20 CVEs were published on February 16, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-9375](https://cve.now/CVE-2014-9375.md): Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users (no CVSS) - [CVE-2015-0260](https://cve.now/CVE-2015-0260.md): RhodeCode before 2.2.7 and Kallithea 0.1 allows remote authenticated users to obtain API keys and other sensitive information via the get\_re (no CVSS, kallithea ยท rhodecode) - [CVE-2015-0268](https://cve.now/CVE-2015-0268.md): The vgic\_v2\_to\_sgi function in arch/arm/vgic-v2.c in Xen 4.5.x, when running on ARM hardware with general interrupt controller (GIC) version (no CVSS) - [CVE-2015-1434](https://cve.now/CVE-2015-1434.md): Multiple SQL injection vulnerabilities in my little forum before 2.3.4 allow remote administrators to execute arbitrary SQL commands via the (no CVSS) - [CVE-2015-1435](https://cve.now/CVE-2015-1435.md): Cross-site scripting (XSS) vulnerability in my little forum before 2.3.4 allows remote attackers to inject arbitrary web script or HTML via (no CVSS) - [CVE-2015-1436](https://cve.now/CVE-2015-1436.md): Cross-site scripting (XSS) vulnerability in the Easing Slider plugin before 2.2.0.7 for WordPress allows remote attackers to inject arbitrar (no CVSS) - [CVE-2015-1495](https://cve.now/CVE-2015-1495.md): Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the O (no CVSS) - [CVE-2015-1496](https://cve.now/CVE-2015-1496.md): Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerService.exe, which allo (no CVSS) - [CVE-2015-1497](https://cve.now/CVE-2015-1497.md): radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary command (no CVSS) - [CVE-2015-1498](https://cve.now/CVE-2015-1498.md): Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumer (no CVSS) - [CVE-2015-1499](https://cve.now/CVE-2015-1499.md): The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to delete arbitrary files, and consequently cause (no CVSS) - [CVE-2015-1500](https://cve.now/CVE-2015-1500.md): Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote att (no CVSS) - [CVE-2015-1501](https://cve.now/CVE-2015-1501.md): The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote att (no CVSS) - [CVE-2015-1613](https://cve.now/CVE-2015-1613.md): RhodeCode before 2.2.7 allows remote authenticated users to obtain API keys and other sensitive information via the (1) update\_repo, (2) get (no CVSS, rhodecode) - [CVE-2015-1608](https://cve.now/CVE-2015-1608.md): Topline Opportunity Form (aka XLS Opp form) before 2015-02-15 does not properly restrict access to database-connection strings, which allows (no CVSS) - [CVE-2014-0227](https://cve.now/CVE-2014-0227.md): java/org/apache/coyote/http11/filters/ChunkedInputFilter.java in Apache Tomcat 6.x before 6.0.42, 7.x before 7.0.55, and 8.x before 8.0.9 do (no CVSS, org.apache.tomcat:tomcat) - [CVE-2014-6113](https://cve.now/CVE-2014-6113.md): Cross-site scripting (XSS) vulnerability in the Web Reports component in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attac (no CVSS) - [CVE-2014-6137](https://cve.now/CVE-2014-6137.md): Cross-site scripting (XSS) vulnerability in the Relay Diagnostic page in IBM Tivoli Endpoint Manager 9.1 before 9.1.1229 allows remote attac (no CVSS) - [CVE-2015-0609](https://cve.now/CVE-2015-0609.md): Race condition in the Common Classification Engine (CCE) in the Measurement, Aggregation, and Correlation Engine (MACE) implementation in Ci (no CVSS) - [CVE-2015-1474](https://cve.now/CVE-2015-1474.md): Multiple integer overflows in the GraphicBuffer::unflatten function in platform/frameworks/native/libs/ui/GraphicBuffer.cpp in Android throu (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-02-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.