# CVEs published 2015-02-24

22 CVEs were published on February 24, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-2077](https://cve.now/CVE-2015-2077.md): The SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3 (no CVSS)
- [CVE-2015-2078](https://cve.now/CVE-2015-2078.md): The SDK for Komodia Redirector with SSL Digestor, as used in Lavasoft Ad-Aware Web Companion 1.1.885.1766 and Ad-Aware AdBlocker (alpha) 1.3 (no CVSS)
- [CVE-2014-4818](https://cve.now/CVE-2014-4818.md): dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1.x before 7.1.2 allows local users to discov (no CVSS)
- [CVE-2014-6115](https://cve.now/CVE-2014-6115.md): IBM Rational Insight 1.1.1.5 allows remote attackers to bypass authentication and obtain sensitive information via a crafted request to a Ja (no CVSS)
- [CVE-2014-9282](https://cve.now/CVE-2014-9282.md): Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2. (no CVSS)
- [CVE-2015-2064](https://cve.now/CVE-2015-2064.md): Multiple cross-site scripting (XSS) vulnerabilities in DLGuard 5, 4.6, and 4.5 allow remote attackers to inject arbitrary web script or HTML (no CVSS)
- [CVE-2015-2065](https://cve.now/CVE-2015-2065.md): SQL injection vulnerability in videogalleryrss.php in the Apptha WordPress Video Gallery (contus-video-gallery) plugin before 2.8 for WordPr (no CVSS)
- [CVE-2015-2066](https://cve.now/CVE-2015-2066.md): SQL injection vulnerability in DLGuard 4.5 allows remote attackers to execute arbitrary SQL commands via the c parameter to index.php. (no CVSS)
- [CVE-2015-2067](https://cve.now/CVE-2015-2067.md): Directory traversal vulnerability in web/ajax\_pluginconf.php in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allows remot (no CVSS, dweeves/magmi)
- [CVE-2015-2068](https://cve.now/CVE-2015-2068.md): Multiple cross-site scripting (XSS) vulnerabilities in the MAGMI (aka Magento Mass Importer) plugin for Magento Server allow remote attacker (no CVSS, dweeves/magmi)
- [CVE-2015-2069](https://cve.now/CVE-2015-2069.md): Cross-site scripting (XSS) vulnerability in the WooCommerce plugin before 2.2.11 for WordPress allows remote attackers to inject arbitrary w (no CVSS)
- [CVE-2015-2070](https://cve.now/CVE-2015-2070.md): SQL injection vulnerability in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote attackers to execute arbitrary SQL commands via (no CVSS)
- [CVE-2015-2071](https://cve.now/CVE-2015-2071.md): Directory traversal vulnerability in cm/newui/blog/export.jsp in eTouch SamePage Enterprise Edition 4.4.0.0.239 allows remote authenticated (no CVSS)
- [CVE-2013-7423](https://cve.now/CVE-2013-7423.md): The send\_dg function in resolv/res\_send.c in GNU C Library (aka glibc or libc6) before 2.20 does not properly reuse file descriptors, which (no CVSS)
- [CVE-2014-8487](https://cve.now/CVE-2014-8487.md): Kony Management (aka Enterprise Mobile Management or EMM) 1.2 and earlier allows remote authenticated users to read (1) arbitrary messages v (no CVSS)
- [CVE-2014-9402](https://cve.now/CVE-2014-9402.md): The nss\_dns implementation of getnetbyname in GNU C Library (aka glibc) before 2.21, when the DNS backend in the Name Service Switch configu (no CVSS)
- [CVE-2014-9684](https://cve.now/CVE-2014-9684.md): OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenti (no CVSS, glance)
- [CVE-2015-0555](https://cve.now/CVE-2015-0555.md): Buffer overflow in the XnsSdkDeviceIpInstaller.ocx ActiveX control in Samsung iPOLiS Device Manager 1.12.2 allows remote attackers to execut (no CVSS)
- [CVE-2015-1572](https://cve.now/CVE-2015-1572.md): Heap-based buffer overflow in closefs.c in the libext2fs library in e2fsprogs before 1.42.12 allows local users to execute arbitrary code by (no CVSS)
- [CVE-2015-1605](https://cve.now/CVE-2015-1605.md): Multiple SQL injection vulnerabilities in Dell ScriptLogic Asset Manager (aka Quest Workspace Asset Manager) before 9.5 allow remote attacke (no CVSS)
- [CVE-2015-1881](https://cve.now/CVE-2015-1881.md): OpenStack Image Registry and Delivery Service (Glance) 2014.2 through 2014.2.2 does not properly remove images, which allows remote authenti (no CVSS, glance)
- [CVE-2015-0240](https://cve.now/CVE-2015-0240.md): The Netlogon server implementation in smbd in Samba 3.5.x and 3.6.x before 3.6.25, 4.0.x before 4.0.25, 4.1.x before 4.1.17, and 4.2.x befor (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-02-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.