# CVEs published 2015-04-16

92 CVEs were published on April 16, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2013-4866](https://cve.now/CVE-2013-4866.md): The LIXIL Corporation My SATIS Genius Toilet application for Android has a hardcoded Bluetooth PIN, which allows physically proximate attack (no CVSS)
- [CVE-2015-1314](https://cve.now/CVE-2015-1314.md): The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, wh (no CVSS)
- [CVE-2015-3320](https://cve.now/CVE-2015-3320.md): Lenovo USB Enhanced Performance Keyboard software before 2.0.2.2 includes active debugging code in SKHOOKS.DLL, which allows local users to (no CVSS)
- [CVE-2015-3322](https://cve.now/CVE-2015-3322.md): Lenovo ThinkServer RD350, RD450, RD550, RD650, and TD350 servers before 1.26.0 use weak encryption to store (1) user and (2) administrator B (no CVSS)
- [CVE-2015-3323](https://cve.now/CVE-2015-3323.md): The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, (no CVSS)
- [CVE-2015-3324](https://cve.now/CVE-2015-3324.md): The ThinkServer System Manager (TSM) Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, (no CVSS)
- [CVE-2015-0405](https://cve.now/CVE-2015-0405.md): Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0423](https://cve.now/CVE-2015-0423.md): Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0433](https://cve.now/CVE-2015-0433.md): Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2015-0438](https://cve.now/CVE-2015-0438.md): Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0439](https://cve.now/CVE-2015-0439.md): Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0440](https://cve.now/CVE-2015-0440.md): Unspecified vulnerability in the Oracle Knowledge component in Oracle Right Now Service Cloud 8.2.3.10.1 and 8.4.7.2 allows remote attackers (no CVSS)
- [CVE-2015-0441](https://cve.now/CVE-2015-0441.md): Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2015-0447](https://cve.now/CVE-2015-0447.md): Unspecified vulnerability in the Oracle Applications Technology Stack component in Oracle E-Business Suite 11.5.10.2, 12.0.6, 12.1.3, 12.2.3 (no CVSS)
- [CVE-2015-0448](https://cve.now/CVE-2015-0448.md): Unspecified vulnerability in Oracle Sun Solaris 11.2 allows local users to affect confidentiality, integrity, and availability via vectors r (no CVSS)
- [CVE-2015-0449](https://cve.now/CVE-2015-0449.md): Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 10.3.6.0, 12.1.1.0, and 12.1.2.0 allows remote (no CVSS)
- [CVE-2015-0450](https://cve.now/CVE-2015-0450.md): Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect (no CVSS)
- [CVE-2015-0451](https://cve.now/CVE-2015-0451.md): Unspecified vulnerability in the Oracle OpenSSO component in Oracle Fusion Middleware 3.0-04 allows remote authenticated users to affect con (no CVSS)
- [CVE-2015-0452](https://cve.now/CVE-2015-0452.md): Unspecified vulnerability in the Oracle VM Server for SPARC component in Oracle Sun Systems Products Suite 3.1 and 3.2 allows remote attacke (no CVSS)
- [CVE-2015-0453](https://cve.now/CVE-2015-0453.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote attac (no CVSS)
- [CVE-2015-0455](https://cve.now/CVE-2015-0455.md): Unspecified vulnerability in the XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows re (no CVSS)
- [CVE-2015-0456](https://cve.now/CVE-2015-0456.md): Unspecified vulnerability in the Oracle WebCenter Portal component in Oracle Fusion Middleware 11.1.1.8.0 allows remote attackers to affect (no CVSS)
- [CVE-2015-0457](https://cve.now/CVE-2015-0457.md): Unspecified vulnerability in the Java VM component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows rem (no CVSS)
- [CVE-2015-0458](https://cve.now/CVE-2015-0458.md): Unspecified vulnerability in in Oracle Java SE 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and availa (no CVSS)
- [CVE-2015-0459](https://cve.now/CVE-2015-0459.md): Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiali (no CVSS)
- [CVE-2015-0460](https://cve.now/CVE-2015-0460.md): Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and a (no CVSS)
- [CVE-2015-0461](https://cve.now/CVE-2015-0461.md): Unspecified vulnerability in the Oracle Access Manager component in Oracle Fusion Middleware 11.1.1.5 and 11.1.1.7 allows remote authenticat (no CVSS)
- [CVE-2015-0462](https://cve.now/CVE-2015-0462.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6. (no CVSS)
- [CVE-2015-0463](https://cve.now/CVE-2015-0463.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.2, 6.3.0, 6.3.1, 6.3.2, (no CVSS)
- [CVE-2015-0464](https://cve.now/CVE-2015-0464.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6. (no CVSS)
- [CVE-2015-0465](https://cve.now/CVE-2015-0465.md): Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6. (no CVSS)
- [CVE-2015-0466](https://cve.now/CVE-2015-0466.md): Unspecified vulnerability in the Oracle Retail Back Office component in Oracle Retail Applications 12.0, 12.0IN, 13.0, 13.1, 13.2, 13.3, 13. (no CVSS)
- [CVE-2015-0469](https://cve.now/CVE-2015-0469.md): Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect confidentiality, integrity, and a (no CVSS)
- [CVE-2015-0470](https://cve.now/CVE-2015-0470.md): Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect integrity via unknown vectors related to Hotspot. (no CVSS)
- [CVE-2015-0471](https://cve.now/CVE-2015-0471.md): Unspecified vulnerability in Oracle Sun Solaris 10 and 11.2 allows local users to affect confidentiality, integrity, and availability via un (no CVSS)
- [CVE-2015-0472](https://cve.now/CVE-2015-0472.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authe (no CVSS)
- [CVE-2015-0473](https://cve.now/CVE-2015-0473.md): Unspecified vulnerability in the Enterprise Manager Base Platform component in Oracle Enterprise Manager Grid Control MOS 12.1.0.5 and 12.1. (no CVSS)
- [CVE-2015-0474](https://cve.now/CVE-2015-0474.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local use (no CVSS)
- [CVE-2015-0475](https://cve.now/CVE-2015-0475.md): Unspecified vulnerability in the JD Edwards EnterpriseOne Technology component in Oracle JD Edwards Products 9.1 allows remote authenticated (no CVSS)
- [CVE-2015-0476](https://cve.now/CVE-2015-0476.md): Unspecified vulnerability in the SQL Trace Analyzer component in Oracle Support Tools before 12.1.11 allows remote authenticated users to af (no CVSS)
- [CVE-2015-0477](https://cve.now/CVE-2015-0477.md): Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity via unknown vectors rel (no CVSS)
- [CVE-2015-0478](https://cve.now/CVE-2015-0478.md): Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect confidentia (no CVSS)
- [CVE-2015-0479](https://cve.now/CVE-2015-0479.md): Unspecified vulnerability in the XDK and XDB - XML Database component in Oracle Database Server 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remo (no CVSS)
- [CVE-2015-0480](https://cve.now/CVE-2015-0480.md): Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40 allows remote attackers to affect integrity and availability via un (no CVSS)
- [CVE-2015-0482](https://cve.now/CVE-2015-0482.md): Unspecified vulnerability in the Oracle WebLogic Server component in Oracle Fusion Middleware 12.1.2.0 and 12.1.3.0 allows remote authentica (no CVSS)
- [CVE-2015-0483](https://cve.now/CVE-2015-0483.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, 12.1.0.1, and 12.1.0.2 allows (no CVSS)
- [CVE-2015-0484](https://cve.now/CVE-2015-0484.md): Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidentiality, integrity, (no CVSS)
- [CVE-2015-0485](https://cve.now/CVE-2015-0485.md): Unspecified vulnerability in the PeopleSoft Enterprise SCM Strategic Sourcing component in Oracle PeopleSoft Products 9.1 and 9.2 allows rem (no CVSS)
- [CVE-2015-0486](https://cve.now/CVE-2015-0486.md): Unspecified vulnerability in Oracle Java SE 8u40 allows remote attackers to affect confidentiality via unknown vectors related to Deployment (no CVSS)
- [CVE-2015-0487](https://cve.now/CVE-2015-0487.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authe (no CVSS)
- [CVE-2015-0488](https://cve.now/CVE-2015-0488.md): Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and JRockit R28.3.5, allows remote attackers to affect availabilit (no CVSS)
- [CVE-2015-0489](https://cve.now/CVE-2015-0489.md): Unspecified vulnerability in the Application Management Pack for Oracle E-Business Suite component in Oracle E-Business Suite AMP 121030 and (no CVSS)
- [CVE-2015-0490](https://cve.now/CVE-2015-0490.md): Unspecified vulnerability in the Oracle Agile Engineering Data Management component in Oracle Supply Chain Products Suite 6.1.3.0 allows rem (no CVSS)
- [CVE-2015-0491](https://cve.now/CVE-2015-0491.md): Unspecified vulnerability in Oracle Java SE 5.0u81, 6u91, 7u76, and 8u40, and Java FX 2.2.76, allows remote attackers to affect confidential (no CVSS)
- [CVE-2015-0492](https://cve.now/CVE-2015-0492.md): Unspecified vulnerability in Oracle Java SE 7u76 and 8u40, and JavaFX 2.2.76, allows remote attackers to affect confidentiality, integrity, (no CVSS)
- [CVE-2015-0493](https://cve.now/CVE-2015-0493.md): Unspecified vulnerability in the Oracle Outside In Technology component in Oracle Fusion Middleware 8.4.1, 8.5.0, and 8.5.1 allows local use (no CVSS)
- [CVE-2015-0494](https://cve.now/CVE-2015-0494.md): Unspecified vulnerability in the Oracle Retail Central Office component in Oracle Retail Applications 13.1, 13.2, 13.3, 13.4, 14.0, and 14.1 (no CVSS)
- [CVE-2015-0495](https://cve.now/CVE-2015-0495.md): Unspecified vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager component in Oracle Commerce Platform 3. (no CVSS)
- [CVE-2015-0496](https://cve.now/CVE-2015-0496.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 and 8.54 allows remote authe (no CVSS)
- [CVE-2015-0497](https://cve.now/CVE-2015-0497.md): Unspecified vulnerability in the PeopleSoft Enterprise Portal Interaction Hub component in Oracle PeopleSoft Products 9.1.00 allows remote a (no CVSS)
- [CVE-2015-0498](https://cve.now/CVE-2015-0498.md): Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0499](https://cve.now/CVE-2015-0499.md): Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2015-0500](https://cve.now/CVE-2015-0500.md): Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0501](https://cve.now/CVE-2015-0501.md): Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2015-0502](https://cve.now/CVE-2015-0502.md): Unspecified vulnerability in the Siebel UI Framework component in Oracle Siebel CRM 8.1 and 8.2 allows remote attackers to affect integrity (no CVSS)
- [CVE-2015-0503](https://cve.now/CVE-2015-0503.md): Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0504](https://cve.now/CVE-2015-0504.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 12.0.6 and 12.1.3 allows remote atta (no CVSS)
- [CVE-2015-0505](https://cve.now/CVE-2015-0505.md): Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2015-0506](https://cve.now/CVE-2015-0506.md): Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0507](https://cve.now/CVE-2015-0507.md): Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0508](https://cve.now/CVE-2015-0508.md): Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-0509](https://cve.now/CVE-2015-0509.md): Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect in (no CVSS)
- [CVE-2015-0510](https://cve.now/CVE-2015-0510.md): Unspecified vulnerability in the Oracle Commerce Platform component in Oracle Commerce Platform 9.4, 10.0, and 10.2 allows remote attackers (no CVSS)
- [CVE-2015-0511](https://cve.now/CVE-2015-0511.md): Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-2565](https://cve.now/CVE-2015-2565.md): Unspecified vulnerability in the Oracle Installed Base component in Oracle E-Business Suite 11.5.10.2, 12.0.4, 12.0.6, 12.1.1, 12.1.2, and 1 (no CVSS)
- [CVE-2015-2566](https://cve.now/CVE-2015-2566.md): Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via vectors rel (no CVSS)
- [CVE-2015-2567](https://cve.now/CVE-2015-2567.md): Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vec (no CVSS)
- [CVE-2015-2568](https://cve.now/CVE-2015-2568.md): Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote attackers to affect availability (no CVSS)
- [CVE-2015-2570](https://cve.now/CVE-2015-2570.md): Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 11.5.10, 12.0, 12.1, and 12.2 allows (no CVSS)
- [CVE-2015-2571](https://cve.now/CVE-2015-2571.md): Unspecified vulnerability in Oracle MySQL Server 5.5.42 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2015-2572](https://cve.now/CVE-2015-2572.md): Unspecified vulnerability in the Oracle Hyperion Smart View for Office component in Oracle Hyperion 11.1.2.5.216 and earlier, when running o (no CVSS)
- [CVE-2015-2573](https://cve.now/CVE-2015-2573.md): Unspecified vulnerability in Oracle MySQL Server 5.5.41 and earlier, and 5.6.22 and earlier, allows remote authenticated users to affect ava (no CVSS)
- [CVE-2015-2574](https://cve.now/CVE-2015-2574.md): Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality via unknown vectors related to Text Utilitie (no CVSS)
- [CVE-2015-2575](https://cve.now/CVE-2015-2575.md): Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect c (no CVSS, mysql:mysql-connector-java)
- [CVE-2015-2576](https://cve.now/CVE-2015-2576.md): Unspecified vulnerability in the MySQL Utilities component in Oracle MySQL 1.5.1 and earlier, when running on Windows, allows local users to (no CVSS)
- [CVE-2015-2577](https://cve.now/CVE-2015-2577.md): Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vec (no CVSS)
- [CVE-2015-2578](https://cve.now/CVE-2015-2578.md): Unspecified vulnerability in Oracle Sun Solaris 11.2 allows remote attackers to affect availability via vectors related to Kernel IDMap. (no CVSS)
- [CVE-2015-2579](https://cve.now/CVE-2015-2579.md): Unspecified vulnerability in the Oracle Health Sciences Argus Safety component in Oracle Health Sciences Applications 8.0 allows local users (no CVSS)
- [CVE-2013-7439](https://cve.now/CVE-2013-7439.md): Multiple off-by-one errors in the (1) MakeBigReq and (2) SetReqLen macros in include/X11/Xlibint.h in X11R6.x and libX11 before 1.6.0 allow (no CVSS)
- [CVE-2015-1821](https://cve.now/CVE-2015-1821.md): Heap-based buffer overflow in chrony before 1.31.1 allows remote authenticated users to cause a denial of service (chronyd crash) or possibl (no CVSS)
- [CVE-2015-1822](https://cve.now/CVE-2015-1822.md): chrony before 1.31.1 does not initialize the last "next" pointer when saving unacknowledged replies to command requests, which allows remote (no CVSS)
- [CVE-2015-3319](https://cve.now/CVE-2015-3319.md): Hotspot Express hotEx Billing Manager 73 does not include the HTTPOnly flag in a Set-Cookie header, which makes it easier for remote attacke (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-04-16
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.