# CVEs published 2015-06-08

14 CVEs were published on June 8, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-6284](https://cve.now/CVE-2014-6284.md): SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and respons (no CVSS)
- [CVE-2015-2993](https://cve.now/CVE-2015-2993.md): SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to (1) create adminis (no CVSS)
- [CVE-2015-2994](https://cve.now/CVE-2015-2994.md): Unrestricted file upload vulnerability in ChangePhoto.jsp in SysAid Help Desk before 15.2 allows remote administrators to execute arbitrary (no CVSS)
- [CVE-2015-2995](https://cve.now/CVE-2015-2995.md): The RdsLogsEntry servlet in SysAid Help Desk before 15.2 does not properly check file extensions, which allows remote attackers to upload an (no CVSS)
- [CVE-2015-2996](https://cve.now/CVE-2015-2996.md): Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (no CVSS)
- [CVE-2015-2997](https://cve.now/CVE-2015-2997.md): SysAid Help Desk before 15.2 allows remote attackers to obtain sensitive information via an invalid value in the accountid parameter to getA (no CVSS)
- [CVE-2015-2998](https://cve.now/CVE-2015-2998.md): SysAid Help Desk before 15.2 uses a hardcoded encryption key, which makes it easier for remote attackers to obtain sensitive information, as (no CVSS)
- [CVE-2015-2999](https://cve.now/CVE-2015-2999.md): Multiple SQL injection vulnerabilities in SysAid Help Desk before 15.2 allow remote administrators to execute arbitrary SQL commands via the (no CVSS)
- [CVE-2015-3000](https://cve.now/CVE-2015-3000.md): SysAid Help Desk before 15.2 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large number of nested (no CVSS)
- [CVE-2015-3001](https://cve.now/CVE-2015-3001.md): SysAid Help Desk before 15.2 uses a hardcoded password of Password1 for the sa SQL Server Express user account, which allows remote authenti (no CVSS)
- [CVE-2015-3201](https://cve.now/CVE-2015-3201.md): Thermostat before 2.0.0 uses world-readable permissions for the web.xml configuration file, which allows local users to obtain user credenti (no CVSS)
- [CVE-2015-3905](https://cve.now/CVE-2015-3905.md): Buffer overflow in the set\_cs\_start function in t1disasm.c in t1utils before 1.39 allows remote attackers to cause a denial of service (cras (no CVSS)
- [CVE-2015-4051](https://cve.now/CVE-2015-4051.md): Beckhoff IPC Diagnostics before 1.8 does not properly restrict access to functions in /config, which allows remote attackers to cause a deni (no CVSS)
- [CVE-2015-4053](https://cve.now/CVE-2015-4053.md): The admin command in ceph-deploy before 1.5.25 uses world-readable permissions for /etc/ceph/ceph.client.admin.keyring, which allows local u (no CVSS, ceph-deploy)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-06-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.