# CVEs published 2015-02-23

13 CVEs were published on February 23, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-1315](https://cve.now/CVE-2015-1315.md): Buffer overflow in the charset\_to\_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code v (no CVSS)
- [CVE-2015-1426](https://cve.now/CVE-2015-1426.md): Puppet Labs Facter 1.6.0 through 2.4.0 allows local users to obtains sensitive Amazon EC2 IAM instance metadata by reading a fact for an Ama (no CVSS, facter)
- [CVE-2015-1589](https://cve.now/CVE-2015-1589.md): Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. (no CVSS)
- [CVE-2015-2047](https://cve.now/CVE-2015-2047.md): The rsaauth extension in TYPO3 4.3.0 through 4.3.14, 4.4.0 through 4.4.15, 4.5.0 through 4.5.39, and 4.6.0 through 4.6.18, when configured f (no CVSS)
- [CVE-2015-2048](https://cve.now/CVE-2015-2048.md): Cross-site request forgery (CSRF) vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote attackers to hijack the auth (no CVSS)
- [CVE-2015-2049](https://cve.now/CVE-2015-2049.md): Unrestricted file upload vulnerability in D-Link DCS-931L with firmware 1.04 and earlier allows remote authenticated users to execute arbitr (no CVSS)
- [CVE-2015-2050](https://cve.now/CVE-2015-2050.md): D-Link DAP-1320 Rev Ax with firmware before 1.21b05 allows attackers to execute arbitrary commands via unspecified vectors. (no CVSS)
- [CVE-2015-2051](https://cve.now/CVE-2015-2051.md): The D-Link DIR-645 Wired/Wireless Router Rev. (CVSS 8.8, KEV)
- [CVE-2015-2052](https://cve.now/CVE-2015-2052.md): Stack-based buffer overflow in the DIR-645 Wired/Wireless Router Rev. (no CVSS)
- [CVE-2015-2053](https://cve.now/CVE-2015-2053.md): The log viewer in McAfee Agent (MA) before 4.8.0 Patch 3 and 5.0.0, when the "Accept connections only from the ePO server" option is disable (no CVSS)
- [CVE-2015-2054](https://cve.now/CVE-2015-2054.md): CRLF injection vulnerability in export.cfg in the web-based administrative console for Sierra Wireless AirCard 760S, 762S, and 763S allows r (no CVSS)
- [CVE-2015-2055](https://cve.now/CVE-2015-2055.md): Zhone GPON 2520 with firmware R4.0.2.566b allows remote attackers to cause a denial of service via a long string in the oldpassword paramete (no CVSS)
- [CVE-2014-7922](https://cve.now/CVE-2014-7922.md): The GoogleAuthUtil.getToken method in the Google Play services SDK before 2015 sets parameters in OAuth token requests upon finding a corres (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-02-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.