# CVEs published 2015-02-27

13 CVEs were published on February 27, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1414](https://cve.now/CVE-2015-1414.md): Integer overflow in FreeBSD before 8.4 p24, 9.x before 9.3 p10. (no CVSS)
- [CVE-2015-2072](https://cve.now/CVE-2015-2072.md): Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA 73 (1.00.73.00.389160) and HANA Developer Edition 80 (1.00.80.00.391861) all (no CVSS)
- [CVE-2015-2075](https://cve.now/CVE-2015-2075.md): SAP BusinessObjects Edge 4.0 allows remote attackers to delete audit events from the auditee queue via a clearData CORBA operation, aka SAP (no CVSS)
- [CVE-2015-2076](https://cve.now/CVE-2015-2076.md): The Auditing service in SAP BusinessObjects Edge 4.0 allows remote attackers to obtain sensitive information by reading an audit event, aka (no CVSS)
- [CVE-2015-2101](https://cve.now/CVE-2015-2101.md): Cross-site scripting (XSS) vulnerability in the Navigate bar in the Navigate module before 6.x-1.1 and 7.x-1.x before 7.x-1.1 for Drupal all (no CVSS)
- [CVE-2015-2102](https://cve.now/CVE-2015-2102.md): SQL injection vulnerability in view\_item.php in ClipBucket 2.7 RC3 (2.7.0.4.v2929-rc3) allows remote attackers to execute arbitrary SQL comm (no CVSS)
- [CVE-2015-2103](https://cve.now/CVE-2015-2103.md): Cross-site scripting (XSS) vulnerability in the admin-login panel (admin/index.cgi) in Cosmoshop allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2015-0594](https://cve.now/CVE-2015-0594.md): Multiple cross-site scripting (XSS) vulnerabilities in the help pages in Cisco Common Services, as used in Cisco Prime LAN Management Soluti (no CVSS)
- [CVE-2015-0632](https://cve.now/CVE-2015-0632.md): Race condition in the Neighbor Discovery (ND) protocol implementation in Cisco IOS and IOS XE allows remote attackers to cause a denial of s (no CVSS)
- [CVE-2015-0651](https://cve.now/CVE-2015-0651.md): Cross-site request forgery (CSRF) vulnerability in the web GUI in Cisco Application Networking Manager (ANM), and Device Manager (DM) on Cis (no CVSS)
- [CVE-2015-0882](https://cve.now/CVE-2015-0882.md): Multiple cross-site scripting (XSS) vulnerabilities in zencart-ja (aka Zen Cart Japanese edition) 1.3 jp through 1.3.0.2 jp8 and 1.5 ja thro (no CVSS)
- [CVE-2015-0883](https://cve.now/CVE-2015-0883.md): SYNCK GRAPHICA Mailform Pro CGI 4.1.4 and 4.1.5, when the mailauth module is enabled, does not properly send e-mail messages, which allows r (no CVSS)
- [CVE-2015-0977](https://cve.now/CVE-2015-0977.md): Network Vision IntraVue before 2.3.0a14 on Windows allows remote attackers to execute arbitrary OS commands via unspecified vectors. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-02-27
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.