# CVEs published 2015-06-07 16 CVEs were published on June 7, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2010-5323](https://cve.now/CVE-2010-5323.md): Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 b (no CVSS) - [CVE-2010-5324](https://cve.now/CVE-2010-5324.md): Directory traversal vulnerability in UploadServlet in the Remote Management component in Novell ZENworks Configuration Management (ZCM) 10 b (no CVSS) - [CVE-2014-0230](https://cve.now/CVE-2014-0230.md): Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.55, and 8.x before 8.0.9 does not properly handle cases where an HTTP response occurs before (no CVSS, org.apache.tomcat:tomcat) - [CVE-2014-7810](https://cve.now/CVE-2014-7810.md): The Expression Language (EL) implementation in Apache Tomcat 6.x before 6.0.44, 7.x before 7.0.58, and 8.x before 8.0.16 does not properly c (no CVSS, org.apache.tomcat:tomcat) - [CVE-2015-0779](https://cve.now/CVE-2015-0779.md): Directory traversal vulnerability in UploadServlet in Novell ZENworks Configuration Management (ZCM) 10 and 11 before 11.3.2 allows remote a (no CVSS) - [CVE-2015-4001](https://cve.now/CVE-2015-4001.md): Integer signedness error in the oz\_hcd\_get\_desc\_cnf function in drivers/staging/ozwpan/ozhcd.c in the OZWPAN driver in the Linux kernel thro (no CVSS) - [CVE-2015-4002](https://cve.now/CVE-2015-4002.md): drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 does not ensure that certain length values are suf (no CVSS) - [CVE-2015-4003](https://cve.now/CVE-2015-4003.md): The oz\_usb\_handle\_ep\_data function in drivers/staging/ozwpan/ozusbsvc1.c in the OZWPAN driver in the Linux kernel through 4.0.5 allows remot (no CVSS) - [CVE-2015-4004](https://cve.now/CVE-2015-4004.md): The OZWPAN driver in the Linux kernel through 4.0.5 relies on an untrusted length field during packet parsing, which allows remote attackers (no CVSS) - [CVE-2014-6175](https://cve.now/CVE-2014-6175.md): Cross-site scripting (XSS) vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0. (no CVSS) - [CVE-2014-6222](https://cve.now/CVE-2014-6222.md): Directory traversal vulnerability in IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9. (no CVSS) - [CVE-2014-8887](https://cve.now/CVE-2014-8887.md): IBM Marketing Operations 7.x and 8.x before 8.5.0.7.2, 8.6.x before 8.6.0.8, 9.0.x before 9.0.0.4.1, 9.1.0.x before 9.1.0.5, and 9.1.1.x bef (no CVSS) - [CVE-2015-0112](https://cve.now/CVE-2015-0112.md): Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 3.0.1, 4.x before 4.0.7 IF5, and 5.x before 5.0 (no CVSS) - [CVE-2015-0767](https://cve.now/CVE-2015-0767.md): Cisco Edge 300 software 1.0 and 1.1 on Edge 340 devices allows local users to obtain root privileges via unspecified commands, aka Bug ID CS (no CVSS) - [CVE-2015-0770](https://cve.now/CVE-2015-0770.md): CRLF injection vulnerability in Cisco TelePresence TC 6.x before 6.3.4 and 7.x before 7.3.3 on Integrator C SX20 devices allows remote attac (no CVSS) - [CVE-2015-2125](https://cve.now/CVE-2015-2125.md): Unspecified vulnerability in HP WebInspect 7.x through 10.4 before 10.4 update 1 allows remote authenticated users to bypass intended access (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-06-07 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.