# CVEs published 2015-03-26 24 CVEs were published on March 26, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-0279](https://cve.now/CVE-2015-0279.md): JBoss RichFaces before 4.5.4 allows remote attackers to inject expression language (EL) expressions and execute arbitrary Java code via the (no CVSS) - [CVE-2015-2682](https://cve.now/CVE-2015-2682.md): Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 allows remote attackers to obtain credentials via a direct request to (no CVSS) - [CVE-2015-2683](https://cve.now/CVE-2015-2683.md): Citrix Command Center before 5.1 Build 35.4 and 5.2 before Build 42.7 does not properly restrict access to the Advent Java Management Extens (no CVSS) - [CVE-2015-2746](https://cve.now/CVE-2015-2746.md): The network diagnostics tool (CommandLineServlet) in the Appliance Manager command line utility (CLU) in Websense TRITON 7.8.3 and V-Series (no CVSS) - [CVE-2015-2747](https://cve.now/CVE-2015-2747.md): Multiple cross-site scripting (XSS) vulnerabilities in the data loss prevention (DLP) incident Forensics Preview in Websense Triton 7.8.3 an (no CVSS) - [CVE-2015-2748](https://cve.now/CVE-2015-2748.md): Websense TRITON AP-WEB before 8.0.0 does not properly restrict access to files in explorer\_wse/, which allows remote attackers to obtain sen (no CVSS) - [CVE-2015-0635](https://cve.now/CVE-2015-0635.md): The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through (no CVSS) - [CVE-2015-0636](https://cve.now/CVE-2015-0636.md): The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through (no CVSS) - [CVE-2015-0637](https://cve.now/CVE-2015-0637.md): The Autonomic Networking Infrastructure (ANI) implementation in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.10.xS through (no CVSS) - [CVE-2015-0638](https://cve.now/CVE-2015-0638.md): Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3, when a VRF interface is configured, allows remote attackers to cause a denial of service (interf (no CVSS) - [CVE-2015-0639](https://cve.now/CVE-2015-0639.md): The Common Flow Table (CFT) feature in Cisco IOS XE 3.6 and 3.7 before 3.7.1S, 3.8 before 3.8.0S, 3.9 before 3.9.0S, 3.10 before 3.10.0S, 3. (no CVSS) - [CVE-2015-0640](https://cve.now/CVE-2015-0640.md): The high-speed logging (HSL) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13. (no CVSS) - [CVE-2015-0641](https://cve.now/CVE-2015-0641.md): Cisco IOS XE 2.x and 3.x before 3.9.0S, 3.10 before 3.10.0S, 3.11 before 3.11.0S, 3.12 before 3.12.0S, 3.13 before 3.13.0S, 3.14 before 3.14 (no CVSS) - [CVE-2015-0642](https://cve.now/CVE-2015-0642.md): Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE (no CVSS) - [CVE-2015-0643](https://cve.now/CVE-2015-0643.md): Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 2.5.x, 2.6.x, 3.1.xS through 3.12.xS before 3.12.3S, 3.2.xE through 3.7.xE (no CVSS) - [CVE-2015-0644](https://cve.now/CVE-2015-0644.md): AppNav in Cisco IOS XE 3.8 through 3.10 before 3.10.3S, 3.11 before 3.11.3S, 3.12 before 3.12.1S, 3.13 before 3.13.0S, 3.14 before 3.14.0S, (no CVSS) - [CVE-2015-0645](https://cve.now/CVE-2015-0645.md): The Layer 4 Redirect (L4R) feature in Cisco IOS XE 2.x and 3.x before 3.10.4S, 3.11 before 3.11.3S, 3.12 before 3.12.2S, 3.13 before 3.13.1S (no CVSS) - [CVE-2015-0646](https://cve.now/CVE-2015-0646.md): Memory leak in the TCP input module in Cisco IOS 12.2, 12.4, 15.0, 15.2, 15.3, and 15.4 and IOS XE 3.3.xXO, 3.5.xE, 3.6.xE, 3.8.xS through 3 (no CVSS) - [CVE-2015-0647](https://cve.now/CVE-2015-0647.md): Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industr (no CVSS) - [CVE-2015-0648](https://cve.now/CVE-2015-0648.md): Memory leak in Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (memory consumption) via craf (no CVSS) - [CVE-2015-0649](https://cve.now/CVE-2015-0649.md): Cisco IOS 12.2, 12.4, 15.0, 15.2, and 15.3 allows remote attackers to cause a denial of service (device reload) via malformed Common Industr (no CVSS) - [CVE-2015-0650](https://cve.now/CVE-2015-0650.md): The Service Discovery Gateway (aka mDNS Gateway) in Cisco IOS 12.2, 12.4, 15.0, 15.1, 15.2, 15.3, and 15.4 and IOS XE 3.9.xS and 3.10.xS bef (no CVSS) - [CVE-2015-0672](https://cve.now/CVE-2015-0672.md): The DHCPv4 server in Cisco IOS XR 5.2.2 on ASR 9000 devices allows remote attackers to cause a denial of service (service outage) via a floo (no CVSS) - [CVE-2015-0673](https://cve.now/CVE-2015-0673.md): Cisco Mobility Services Engine (MSE) 8.0(110.0) allows remote authenticated users to discover the passwords of arbitrary users by (1) readin (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-03-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.