# CVEs published 2015-04-28

5 CVEs were published on April 28, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1150](https://cve.now/CVE-2015-1150.md): The Firewall component in Apple OS X Server before 4.1 uses an incorrect pathname in configuration files, which allows remote attackers to b (no CVSS)
- [CVE-2015-1151](https://cve.now/CVE-2015-1151.md): Wiki Server in Apple OS X Server before 4.1 allows remote attackers to bypass intended restrictions on Activity and People pages by connecti (no CVSS)
- [CVE-2015-1774](https://cve.now/CVE-2015-1774.md): The HWP filter in LibreOffice before 4.3.7 and 4.4.x before 4.4.2 and Apache OpenOffice before 4.1.2 allows remote attackers to cause a deni (no CVSS)
- [CVE-2015-1863](https://cve.now/CVE-2015-1863.md): Heap-based buffer overflow in wpa\_supplicant 1.0 through 2.4 allows remote attackers to cause a denial of service (crash), read memory, or p (no CVSS)
- [CVE-2015-3340](https://cve.now/CVE-2015-3340.md): Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensitive information from (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-04-28
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.