# CVEs published 2015-06-19

11 CVEs were published on June 19, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-2797](https://cve.now/CVE-2015-2797.md): Stack-based buffer overflow in AirTies Air 6372, 5760, 5750, 5650TT, 5453, 5444TT, 5443, 5442, 5343, 5342, 5341, and 5021 DSL modems with fi (no CVSS)
- [CVE-2015-4640](https://cve.now/CVE-2015-4640.md): The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm (no CVSS)
- [CVE-2015-4641](https://cve.now/CVE-2015-4641.md): Directory traversal vulnerability in the SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices allo (no CVSS)
- [CVE-2015-4675](https://cve.now/CVE-2015-4675.md): Buffer overflow in the Tiny SRP library (aka TinySRP) allows remote attackers to cause a denial of service (crash) or possibly execute arbit (no CVSS)
- [CVE-2015-4676](https://cve.now/CVE-2015-4676.md): SQL injection vulnerability in ticket.php in TickFa 1.x allows remote authenticated users to execute arbitrary SQL commands via the tid para (no CVSS)
- [CVE-2015-4677](https://cve.now/CVE-2015-4677.md): Cross-site request forgery (CSRF) vulnerability in FiverrScript (aka Fiverr Script) 7.2 allows remote attackers to hijack the authentication (no CVSS)
- [CVE-2015-4678](https://cve.now/CVE-2015-4678.md): SQL injection vulnerability in Persian Car CMS 1.0 allows remote attackers to execute arbitrary SQL commands via the cat\_id parameter to the (no CVSS)
- [CVE-2015-4679](https://cve.now/CVE-2015-4679.md): Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Airties RT-210 allow remote attackers to inject arbitrary web sc (no CVSS)
- [CVE-2015-4191](https://cve.now/CVE-2015-4191.md): Cisco IOS XR 5.2.1 allows remote attackers to cause a denial of service (ipv6\_io service reload) via a malformed IPv6 packet, aka Bug ID CSC (no CVSS)
- [CVE-2015-4194](https://cve.now/CVE-2015-4194.md): The web-based administrative interface in Cisco WebEx Meeting Center provides different error messages for failed login attempts depending o (no CVSS)
- [CVE-2015-4195](https://cve.now/CVE-2015-4195.md): Cisco IOS XR 5.1.1.K9SEC allows remote authenticated users to cause a denial of service (vty error, and SSH and TELNET outage) via a crafted (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-06-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.