# CVEs published 2015-04-13

19 CVEs were published on April 13, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9714](https://cve.now/CVE-2014-9714.md): Cross-site scripting (XSS) vulnerability in the WddxPacket::recursiveAddVar function in HHVM (aka the HipHop Virtual Machine) before 3.5.0 a (no CVSS)
- [CVE-2015-0840](https://cve.now/CVE-2015-0840.md): The dpkg-source command in Debian dpkg before 1.16.16 and 1.17.x before 1.17.25 allows remote attackers to bypass signature verification via (no CVSS)
- [CVE-2015-2775](https://cve.now/CVE-2015-2775.md): Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary (no CVSS)
- [CVE-2015-2846](https://cve.now/CVE-2015-2846.md): BitTorrent Sync allows remote attackers to execute arbitrary commands via a crafted btsync: link. (no CVSS)
- [CVE-2015-2931](https://cve.now/CVE-2015-2931.md): Incomplete blacklist vulnerability in includes/upload/UploadBase.php in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24 (no CVSS)
- [CVE-2015-2932](https://cve.now/CVE-2015-2932.md): Incomplete blacklist vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to inje (no CVSS)
- [CVE-2015-2933](https://cve.now/CVE-2015-2933.md): Cross-site scripting (XSS) vulnerability in the Html class in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows (no CVSS)
- [CVE-2015-2934](https://cve.now/CVE-2015-2934.md): MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 does not properly handle when the Zend interpreter xml\_parse function (no CVSS)
- [CVE-2015-2935](https://cve.now/CVE-2015-2935.md): MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers to bypass the SVG filtering and obtain sensit (no CVSS)
- [CVE-2015-2936](https://cve.now/CVE-2015-2936.md): MediaWiki 1.24.x before 1.24.2, when using PBKDF2 for password hashing, allows remote attackers to cause a denial of service (CPU consumptio (no CVSS)
- [CVE-2015-2937](https://cve.now/CVE-2015-2937.md): MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM or Zend PHP, allows remote attackers to cause a deni (no CVSS)
- [CVE-2015-2938](https://cve.now/CVE-2015-2938.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2 allows remote attackers t (no CVSS)
- [CVE-2015-2939](https://cve.now/CVE-2015-2939.md): Cross-site scripting (XSS) vulnerability in the Scribunto extension for MediaWiki allows remote attackers to inject arbitrary web script or (no CVSS)
- [CVE-2015-2940](https://cve.now/CVE-2015-2940.md): Cross-site request forgery (CSRF) vulnerability in the CheckUser extension for MediaWiki allows remote attackers to hijack the authenticatio (no CVSS)
- [CVE-2015-2941](https://cve.now/CVE-2015-2941.md): Cross-site scripting (XSS) vulnerability in MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows (no CVSS)
- [CVE-2015-2942](https://cve.now/CVE-2015-2942.md): MediaWiki before 1.19.24, 1.2x before 1.23.9, and 1.24.x before 1.24.2, when using HHVM, allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2015-0675](https://cve.now/CVE-2015-0675.md): The failover ipsec implementation in Cisco Adaptive Security Appliance (ASA) Software 9.1 before 9.1(6), 9.2 before 9.2(3.3), and 9.3 before (no CVSS)
- [CVE-2015-0676](https://cve.now/CVE-2015-0676.md): The DNS implementation in Cisco Adaptive Security Appliance (ASA) Software 7.2 before 7.2(5.16), 8.2 before 8.2(5.57), 8.3 before 8.3(2.44), (no CVSS)
- [CVE-2015-0677](https://cve.now/CVE-2015-0677.md): The XML parser in Cisco Adaptive Security Appliance (ASA) Software 8.4 before 8.4(7.28), 8.6 before 8.6(1.17), 9.0 before 9.0(4.33), 9.1 bef (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-04-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.