# CVEs published 2015-04-29

15 CVEs were published on April 29, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-3459](https://cve.now/CVE-2015-3459.md): The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, wh (no CVSS)
- [CVE-2015-1397](https://cve.now/CVE-2015-1397.md): SQL injection vulnerability in the getCsvFile function in the Mage\_Adminhtml\_Block\_Widget\_Grid class in Magento Community Edition (CE) 1.9.1 (no CVSS)
- [CVE-2015-1398](https://cve.now/CVE-2015-1398.md): Multiple directory traversal vulnerabilities in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote aut (no CVSS)
- [CVE-2015-1399](https://cve.now/CVE-2015-1399.md): PHP remote file inclusion vulnerability in the fetchView function in the Mage\_Core\_Block\_Template\_Zend class in Magento Community Edition (C (no CVSS)
- [CVE-2015-3457](https://cve.now/CVE-2015-3457.md): Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14.1.0 allow remote attackers to bypass authentication via the forwarde (no CVSS)
- [CVE-2015-3458](https://cve.now/CVE-2015-3458.md): The fetchView function in the Mage\_Core\_Block\_Template\_Zend class in Magento Community Edition (CE) 1.9.1.0 and Enterprise Edition (EE) 1.14 (no CVSS)
- [CVE-2015-1321](https://cve.now/CVE-2015-1321.md): Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (c (no CVSS)
- [CVE-2015-1322](https://cve.now/CVE-2015-1322.md): Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before (no CVSS)
- [CVE-2015-3026](https://cve.now/CVE-2015-3026.md): Icecast before 2.4.2, when a stream\_auth handler is defined for URL authentication, allows remote attackers to cause a denial of service (NU (no CVSS)
- [CVE-2015-3447](https://cve.now/CVE-2015-3447.md): Multiple cross-site scripting (XSS) vulnerabilities in macIpSpoofView.html in Dell SonicWall SonicOS 7.5.0.12 and 6.x allow remote attackers (no CVSS)
- [CVE-2015-3448](https://cve.now/CVE-2015-3448.md): REST client for Ruby (aka rest-client) before 1.7.3 logs usernames and passwords, which allows local users to obtain sensitive information b (no CVSS, rest-client)
- [CVE-2015-0708](https://cve.now/CVE-2015-0708.md): Cisco IOS 15.4S, 15.4SN, and 15.5S and IOS XE 3.13S and 3.14S allow remote attackers to cause a denial of service (device crash) by includin (no CVSS)
- [CVE-2015-0709](https://cve.now/CVE-2015-0709.md): Cisco IOS 15.5S and IOS XE allow remote authenticated users to cause a denial of service (device crash) by leveraging knowledge of the RADIU (no CVSS)
- [CVE-2015-0710](https://cve.now/CVE-2015-0710.md): The Overlay Transport Virtualization (OTV) implementation in Cisco IOS XE 3.10S allows remote attackers to cause a denial of service (device (no CVSS)
- [CVE-2015-0711](https://cve.now/CVE-2015-0711.md): The hamgr service in the IPv6 Proxy Mobile (PM) implementation in Cisco StarOS 18.1.0.59776 on ASR 5000 devices allows remote attackers to c (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-04-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.