# CVEs published 2015-04-17 11 CVEs were published on April 17, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-3035](https://cve.now/CVE-2015-3035.md): Directory traversal vulnerability in TP-LINK Archer C5 (1.2) with firmware before 150317, C7 (2.0) with firmware before 150304, and C8 (1.0) (CVSS 7.5, KEV) - [CVE-2015-0845](https://cve.now/CVE-2015-0845.md): Format string vulnerability in Movable Type Pro, Open Source, and Advanced before 5.2.13 and Pro and Advanced 6.0.x before 6.0.8 allows remo (no CVSS) - [CVE-2015-1318](https://cve.now/CVE-2015-1318.md): The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport (no CVSS) - [CVE-2015-1852](https://cve.now/CVE-2015-1852.md): The s3\_token middleware in OpenStack keystonemiddleware before 1.6.0 and python-keystoneclient before 1.4.0 disables certification verificat (no CVSS, python-keystoneclient ยท keystonemiddleware) - [CVE-2015-1856](https://cve.now/CVE-2015-1856.md): OpenStack Object Storage (Swift) before 2.3.0, when allow\_version is configured, allows remote authenticated users to delete the latest vers (no CVSS, swift) - [CVE-2015-0530](https://cve.now/CVE-2015-0530.md): Buffer overflow in an unspecified function in nsr\_render\_log in EMC NetWorker before 8.0.4.3, 8.1.x before 8.1.2.6, and 8.2.x before 8.2.1.2 (no CVSS) - [CVE-2015-0691](https://cve.now/CVE-2015-0691.md): A certain Cisco JAR file, as distributed in Cache Cleaner in Cisco Secure Desktop (CSD), allows remote attackers to execute arbitrary comman (no CVSS) - [CVE-2015-0695](https://cve.now/CVE-2015-0695.md): Cisco IOS XR 4.3.4 through 5.3.0 on ASR 9000 devices, when uRPF, PBR, QoS, or an ACL is configured, does not properly handle bridge-group vi (no CVSS) - [CVE-2015-0700](https://cve.now/CVE-2015-0700.md): Cross-site request forgery (CSRF) vulnerability in the Dashboard page in the monitoring-and-report section in Cisco Secure Access Control Se (no CVSS) - [CVE-2015-0937](https://cve.now/CVE-2015-0937.md): Cross-site scripting (XSS) vulnerability in search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEA (no CVSS) - [CVE-2015-0938](https://cve.now/CVE-2015-0938.md): search.php on the Blue Coat Malware Analysis appliance with software before 4.2.4.20150312-RELEASE allows remote attackers to bypass intende (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-04-17 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.