# CVEs published 2015-02-28 9 CVEs were published on February 28, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-0655](https://cve.now/CVE-2015-0655.md): Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remot (no CVSS) - [CVE-2015-0884](https://cve.now/CVE-2015-0884.md): Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows (no CVSS) - [CVE-2015-0885](https://cve.now/CVE-2015-0885.md): checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username. (no CVSS) - [CVE-2015-0886](https://cve.now/CVE-2015-0886.md): Integer overflow in the crypt\_raw method in the key-stretching implementation in jBCrypt before 0.4 makes it easier for remote attackers to (no CVSS, org.mindrot:jbcrypt) - [CVE-2015-0887](https://cve.now/CVE-2015-0887.md): npppd in the PPP Access Concentrator (PPPAC) on SEIL SEIL/x86 Fuji routers 1.00 through 3.30, SEIL/X1 routers 3.50 through 4.70, SEIL/X2 rou (no CVSS) - [CVE-2015-0888](https://cve.now/CVE-2015-0888.md): KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors. (no CVSS) - [CVE-2015-0889](https://cve.now/CVE-2015-0889.md): KENT-WEB Joyful Note before 5.3 allows remote attackers to delete files or write to files, and consequently execute arbitrary code, via vect (no CVSS) - [CVE-2014-9676](https://cve.now/CVE-2014-9676.md): The seg\_write\_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows r (no CVSS) - [CVE-2014-9682](https://cve.now/CVE-2014-9682.md): The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in th (no CVSS, dns-sync) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-02-28 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.