# CVEs published 2015-06-10

70 CVEs were published on June 10, 2015: 0 critical, 2 high. 2 are now in CISA KEV. Days are UTC.

- [CVE-2014-8603](https://cve.now/CVE-2014-8603.md): cloner.functions.php in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to execute arbitrary code (no CVSS)
- [CVE-2014-8604](https://cve.now/CVE-2014-8604.md): The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! returns the MySQL password in cleartext to a text box in the configuration pane (no CVSS)
- [CVE-2014-8605](https://cve.now/CVE-2014-8605.md): The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! stores database backup files with predictable names under the web root with ins (no CVSS)
- [CVE-2014-8606](https://cve.now/CVE-2014-8606.md): Directory traversal vulnerability in the XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! allows remote administrators to read arbit (no CVSS)
- [CVE-2014-8607](https://cve.now/CVE-2014-8607.md): The XCloner plugin 3.1.1 for WordPress and 3.5.1 for Joomla! provides the MySQL username and password on the command line, which allows loca (no CVSS)
- [CVE-2015-3923](https://cve.now/CVE-2015-3923.md): Coppermine Photo Gallery before 1.5.36 allows remote attackers to enumerate directories via a full path in the folder parameter to minibrows (no CVSS)
- [CVE-2015-4108](https://cve.now/CVE-2015-4108.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Wing FTP Server before 4.4.7 allow remote attackers to hijack the authenticati (no CVSS)
- [CVE-2015-4153](https://cve.now/CVE-2015-4153.md): Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and e (no CVSS)
- [CVE-2015-4171](https://cve.now/CVE-2015-4171.md): strongSwan 4.3.0 through 5.x before 5.3.2 and strongSwan VPN Client before 1.4.6, when using EAP or pre-shared keys for authenticating an IK (no CVSS)
- [CVE-2015-4465](https://cve.now/CVE-2015-4465.md): Cross-site scripting (XSS) vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to inject (no CVSS)
- [CVE-2015-3935](https://cve.now/CVE-2015-3935.md): Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 3.5 and 3.6 allow remote attackers to inject arbitrary web script or (no CVSS, dolibarr/dolibarr)
- [CVE-2015-4415](https://cve.now/CVE-2015-4415.md): Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and exe (no CVSS)
- [CVE-2015-1687](https://cve.now/CVE-2015-1687.md): Microsoft Internet Explorer 6 through 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) v (no CVSS)
- [CVE-2015-1719](https://cve.now/CVE-2015-1719.md): The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP (no CVSS)
- [CVE-2015-1720](https://cve.now/CVE-2015-1720.md): Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2 (no CVSS)
- [CVE-2015-1721](https://cve.now/CVE-2015-1721.md): The kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP (no CVSS)
- [CVE-2015-1722](https://cve.now/CVE-2015-1722.md): Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2 (no CVSS)
- [CVE-2015-1723](https://cve.now/CVE-2015-1723.md): Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2 (no CVSS)
- [CVE-2015-1724](https://cve.now/CVE-2015-1724.md): Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2 (no CVSS)
- [CVE-2015-1725](https://cve.now/CVE-2015-1725.md): Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R (no CVSS)
- [CVE-2015-1726](https://cve.now/CVE-2015-1726.md): Use-after-free vulnerability in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2 (no CVSS)
- [CVE-2015-1727](https://cve.now/CVE-2015-1727.md): Buffer overflow in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R (no CVSS)
- [CVE-2015-1728](https://cve.now/CVE-2015-1728.md): Microsoft Windows Media Player 10 through 12 allows remote attackers to execute arbitrary code via a crafted DataObject on a web site, aka " (no CVSS)
- [CVE-2015-1730](https://cve.now/CVE-2015-1730.md): Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2015-1731](https://cve.now/CVE-2015-1731.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2015-1732](https://cve.now/CVE-2015-1732.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1735](https://cve.now/CVE-2015-1735.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1736](https://cve.now/CVE-2015-1736.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2015-1737](https://cve.now/CVE-2015-1737.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2015-1739](https://cve.now/CVE-2015-1739.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation of (no CVSS)
- [CVE-2015-1740](https://cve.now/CVE-2015-1740.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1741](https://cve.now/CVE-2015-1741.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1742](https://cve.now/CVE-2015-1742.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1743](https://cve.now/CVE-2015-1743.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation (no CVSS)
- [CVE-2015-1744](https://cve.now/CVE-2015-1744.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1745](https://cve.now/CVE-2015-1745.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1747](https://cve.now/CVE-2015-1747.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1748](https://cve.now/CVE-2015-1748.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to gain privileges via a crafted web site, aka "Internet Explorer Elevation (no CVSS)
- [CVE-2015-1750](https://cve.now/CVE-2015-1750.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1751](https://cve.now/CVE-2015-1751.md): Microsoft Internet Explorer 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1752](https://cve.now/CVE-2015-1752.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1753](https://cve.now/CVE-2015-1753.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS)
- [CVE-2015-1754](https://cve.now/CVE-2015-1754.md): Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craft (no CVSS)
- [CVE-2015-1755](https://cve.now/CVE-2015-1755.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS)
- [CVE-2015-1756](https://cve.now/CVE-2015-1756.md): Use-after-free vulnerability in Microsoft Common Controls in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, (no CVSS)
- [CVE-2015-1757](https://cve.now/CVE-2015-1757.md): Cross-site scripting (XSS) vulnerability in adfs/ls in Active Directory Federation Services (AD FS) in Microsoft Windows Server 2008 SP2 and (no CVSS)
- [CVE-2015-1758](https://cve.now/CVE-2015-1758.md): Untrusted search path vulnerability in the LoadLibrary function in the kernel in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 (no CVSS)
- [CVE-2015-1759](https://cve.now/CVE-2015-1759.md): Microsoft Office Compatibility Pack SP3 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Offi (no CVSS)
- [CVE-2015-1760](https://cve.now/CVE-2015-1760.md): Microsoft Office Compatibility Pack SP3, Office 2010 SP2, Office 2013 SP1, and Office 2013 RT SP1 allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2015-1764](https://cve.now/CVE-2015-1764.md): The web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allow remote attackers to bypass the Same Origin Policy a (no CVSS)
- [CVE-2015-1765](https://cve.now/CVE-2015-1765.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to read the browser history via a crafted web site. (no CVSS)
- [CVE-2015-1766](https://cve.now/CVE-2015-1766.md): Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS)
- [CVE-2015-1768](https://cve.now/CVE-2015-1768.md): win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2 allows local users to gain privileges or cause a denia (no CVSS)
- [CVE-2015-1770](https://cve.now/CVE-2015-1770.md): Microsoft Office 2013 SP1 and 2013 RT SP1 allows remote attackers to execute arbitrary code via a crafted Office document, aka "Microsoft Of (CVSS 8.8, KEV)
- [CVE-2015-1771](https://cve.now/CVE-2015-1771.md): Cross-site request forgery (CSRF) vulnerability in the web applications in Microsoft Exchange Server 2013 SP1 and Cumulative Update 8 allows (no CVSS)
- [CVE-2015-2359](https://cve.now/CVE-2015-2359.md): Cross-site scripting (XSS) vulnerability in the web applications in Microsoft Exchange Server 2013 Cumulative Update 8 allows remote attacke (no CVSS)
- [CVE-2015-2360](https://cve.now/CVE-2015-2360.md): win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2003 SP2 and R2 SP2, Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1 (CVSS 8.8, KEV)
- [CVE-2015-3096](https://cve.now/CVE-2015-3096.md): Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3097](https://cve.now/CVE-2015-3097.md): Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160, Adobe AIR before 18.0.0.144, Adobe AIR SDK before 18.0.0.144, (no CVSS)
- [CVE-2015-3098](https://cve.now/CVE-2015-3098.md): Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3099](https://cve.now/CVE-2015-3099.md): Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3100](https://cve.now/CVE-2015-3100.md): Stack-based buffer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 1 (no CVSS)
- [CVE-2015-3101](https://cve.now/CVE-2015-3101.md): The Flash broker in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 (no CVSS)
- [CVE-2015-3102](https://cve.now/CVE-2015-3102.md): Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3103](https://cve.now/CVE-2015-3103.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before (no CVSS)
- [CVE-2015-3104](https://cve.now/CVE-2015-3104.md): Integer overflow in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 (no CVSS)
- [CVE-2015-3105](https://cve.now/CVE-2015-3105.md): Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR (no CVSS)
- [CVE-2015-3106](https://cve.now/CVE-2015-3106.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before (no CVSS)
- [CVE-2015-3107](https://cve.now/CVE-2015-3107.md): Use-after-free vulnerability in Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before (no CVSS)
- [CVE-2015-3108](https://cve.now/CVE-2015-3108.md): Adobe Flash Player before 13.0.0.292 and 14.x through 18.x before 18.0.0.160 on Windows and OS X and before 11.2.202.466 on Linux, Adobe AIR (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-06-10
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.