# CVEs published 2015-04-06

15 CVEs were published on April 6, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1843](https://cve.now/CVE-2015-1843.md): The Red Hat docker package before 1.5.0-28, when using the --add-registry option, falls back to HTTP when the HTTPS connection to the regist (no CVSS)
- [CVE-2015-2165](https://cve.now/CVE-2015-2165.md): Multiple cross-site scripting (XSS) vulnerabilities in the Report Viewer in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4.x, 5.x, (no CVSS)
- [CVE-2015-2166](https://cve.now/CVE-2015-2166.md): Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remot (no CVSS)
- [CVE-2015-2167](https://cve.now/CVE-2015-2167.md): Open redirect vulnerability in the 3PI Manager in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers (no CVSS)
- [CVE-2015-2824](https://cve.now/CVE-2015-2824.md): Multiple SQL injection vulnerabilities in the Simple Ads Manager plugin before 2.7.97 for WordPress allow remote attackers to execute arbitr (no CVSS)
- [CVE-2015-0877](https://cve.now/CVE-2015-0877.md): Unrestricted file upload vulnerability in app/lib/mlf.pl in C-BOARD Moyuku before 1.03b3 allows remote attackers to execute arbitrary code b (no CVSS)
- [CVE-2015-1601](https://cve.now/CVE-2015-1601.md): Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 allows man-in-the-middle attackers to obtain sensitive information or modif (no CVSS)
- [CVE-2015-1602](https://cve.now/CVE-2015-1602.md): Siemens SIMATIC STEP 7 (TIA Portal) 12 and 13 before 13 SP1 Upd1 improperly stores password data within project files, which makes it easier (no CVSS)
- [CVE-2014-6221](https://cve.now/CVE-2014-6221.md): The MSCAPI/MSCNG interface implementation in GSKit in IBM Rational ClearCase 7.1.2.x before 7.1.2.17, 8.0.0.x before 8.0.0.14, and 8.0.1.x b (no CVSS)
- [CVE-2015-0117](https://cve.now/CVE-2015-0117.md): The LDAP Server in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows remote attackers to execute arbitrary code or c (no CVSS)
- [CVE-2015-0119](https://cve.now/CVE-2015-0119.md): FastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote attackers to execute arbitrary code by connecting (no CVSS)
- [CVE-2015-0134](https://cve.now/CVE-2015-0134.md): Buffer overflow in the SSLv2 implementation in IBM Domino 8.5.x before 8.5.1 FP5 IF3, 8.5.2 before FP4 IF3, 8.5.3 before FP6 IF6, 9.0 before (no CVSS)
- [CVE-2015-0179](https://cve.now/CVE-2015-0179.md): Notes System Diagnostic (NSD) in IBM Domino 8.5.x before 8.5.3 FP6 IF6 and 9.x before 9.0.1 FP3 IF1 allows local users to obtain the System (no CVSS)
- [CVE-2015-1890](https://cve.now/CVE-2015-1890.md): /usr/lpp/mmfs/bin/gpfs.snap in IBM General Parallel File System (GPFS) 4.1 before 4.1.0.7 produces an archive potentially containing clearte (no CVSS)
- [CVE-2015-1893](https://cve.now/CVE-2015-1893.md): The IBM WebSphere DataPower XC10 appliance 2.1 before 2.1.0.3 allows remote attackers to hijack the sessions of arbitrary users, and consequ (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-04-06
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.