# CVEs published 2015-06-12

16 CVEs were published on June 12, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-0768](https://cve.now/CVE-2015-0768.md): The Device Work Center (DWC) component in Cisco Prime Network Control System (NCS) 2.1(0.0.85), 2.2(0.0.58), and 2.2(0.0.69) does not proper (no CVSS)
- [CVE-2015-0769](https://cve.now/CVE-2015-0769.md): Cisco IOS XR 4.0.1 through 4.2.0 for CRS-3 Carrier Routing System allows remote attackers to cause a denial of service (NPU ASIC scan and li (no CVSS)
- [CVE-2015-0772](https://cve.now/CVE-2015-0772.md): Cisco TelePresence Video Communication Server (VCS) X8.5RC4 allows remote attackers to cause a denial of service (CPU consumption or device (no CVSS)
- [CVE-2015-0775](https://cve.now/CVE-2015-0775.md): The banner (aka MOTD) implementation in Cisco NX-OS 4.1(2)E1(1f) on Nexus 4000 devices, 5.2(1)SV3(2.1) on Nexus 1000V devices, 6.0(2)N2(2) o (no CVSS)
- [CVE-2015-0776](https://cve.now/CVE-2015-0776.md): telnetd in Cisco IOS XR 5.0.1 on Network Convergence System 6000 devices allows remote attackers to cause a denial of service (device reload (no CVSS)
- [CVE-2015-4182](https://cve.now/CVE-2015-4182.md): The administrative web interface in Cisco Identity Services Engine (ISE) before 1.3 allows remote authenticated users to bypass intended acc (no CVSS)
- [CVE-2015-0737](https://cve.now/CVE-2015-0737.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSIGHT System Software 5.3.1.1 allow remote attackers to inject arbitrary we (no CVSS)
- [CVE-2015-0771](https://cve.now/CVE-2015-0771.md): The IKE implementation in the WS-IPSEC-3 service module in Cisco IOS 12.2 on Catalyst 6500 devices allows remote authenticated users to caus (no CVSS)
- [CVE-2015-0773](https://cve.now/CVE-2015-0773.md): Cisco FireSIGHT System Software 5.3.1.3 and 6.0.0 allows remote authenticated users to delete an arbitrary user's dashboard via a modified V (no CVSS)
- [CVE-2015-0774](https://cve.now/CVE-2015-0774.md): Cross-site scripting (XSS) vulnerability in Cisco Application and Content Networking System (ACNS) 5.5(9) allows remote attackers to inject (no CVSS)
- [CVE-2014-8176](https://cve.now/CVE-2014-8176.md): The dtls1\_clear\_queues function in ssl/d1\_lib.c in OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h frees data structure (no CVSS)
- [CVE-2015-1788](https://cve.now/CVE-2015-1788.md): The BN\_GF2m\_mod\_inv function in crypto/bn/bn\_gf2m.c in OpenSSL before 0.9.8s, 1.0.0 before 1.0.0e, 1.0.1 before 1.0.1n, and 1.0.2 before 1.0 (no CVSS)
- [CVE-2015-1789](https://cve.now/CVE-2015-1789.md): The X509\_cmp\_time function in crypto/x509/x509\_vfy.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1 (no CVSS)
- [CVE-2015-1790](https://cve.now/CVE-2015-1790.md): The PKCS7\_dataDecodefunction in crypto/pkcs7/pk7\_doit.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 befor (no CVSS)
- [CVE-2015-1791](https://cve.now/CVE-2015-1791.md): Race condition in the ssl3\_get\_new\_session\_ticket function in ssl/s3\_clnt.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0 (no CVSS)
- [CVE-2015-1792](https://cve.now/CVE-2015-1792.md): The do\_free\_upto function in crypto/cms/cms\_smime.c in OpenSSL before 0.9.8zg, 1.0.0 before 1.0.0s, 1.0.1 before 1.0.1n, and 1.0.2 before 1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-06-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.