# CVEs published 2015-06-03

8 CVEs were published on June 3, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9721](https://cve.now/CVE-2014-9721.md): libzmq before 4.0.6 and 4.1.x before 4.1.1 allows remote attackers to conduct downgrade attacks and bypass ZMTP v3 protocol security mechani (no CVSS)
- [CVE-2015-0263](https://cve.now/CVE-2015-0263.md): XML external entity (XXE) vulnerability in the XML converter setup in converter/jaxp/XmlConverter.java in Apache Camel before 2.13.4 and 2.1 (no CVSS, org.apache.camel:camel-core)
- [CVE-2015-0264](https://cve.now/CVE-2015-0264.md): Multiple XML external entity (XXE) vulnerabilities in builder/xml/XPathBuilder.java in Apache Camel before 2.13.4 and 2.14.x before 2.14.2 a (no CVSS, org.apache.camel:camel-core)
- [CVE-2015-4038](https://cve.now/CVE-2015-4038.md): The WP Membership plugin 1.2.3 for WordPress allows remote authenticated users to gain administrator privileges via an iv\_membership\_update\_ (no CVSS)
- [CVE-2015-4103](https://cve.now/CVE-2015-4103.md): Xen 3.3.x through 4.5.x does not properly restrict write access to the host MSI message data field, which allows local x86 HVM guest adminis (no CVSS)
- [CVE-2015-4104](https://cve.now/CVE-2015-4104.md): Xen 3.3.x through 4.5.x does not properly restrict access to PCI MSI mask bits, which allows local x86 HVM guest users to cause a denial of (no CVSS)
- [CVE-2015-4105](https://cve.now/CVE-2015-4105.md): Xen 3.3.x through 4.5.x enables logging for PCI MSI-X pass-through error messages, which allows local x86 HVM guests to cause a denial of se (no CVSS)
- [CVE-2015-4106](https://cve.now/CVE-2015-4106.md): QEMU does not properly restrict write access to the PCI config space for certain PCI pass-through devices, which might allow local x86 HVM g (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-06-03
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.