CVEs published June 23, 2015
16 CVEs were published on June 23, 2015: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 16
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 15
- Now in CISA KEV
- 1
- Fix available
- 0
High 1
Medium, low and unrated 15
- CVE-2015-2859Intel McAfee ePolicy Orchestrator (ePO) 4.x through 4.6.9 and 5.x through 5.1.2 does not validate server names and Certification Authority n
- CVE-2014-4882Aptexx Resident Anywhere does not require authentication, which allows remote attackers to obtain sensitive information or modify data via a
- CVE-2015-0972Pearson ProctorCache before 2015.1.17 uses the same hardcoded password across different customers' installations, which allows remote attack
- CVE-2015-2860Directory traversal vulnerability in Avigilon Control Center (ACC) 4 before 4.12.0.54 and 5 before 5.4.2.22 allows remote attackers to read
- CVE-2015-4189Cross-site request forgery (CSRF) vulnerability in Cisco Data Center Analytics Framework (DCAF) 1.4 allows remote attackers to hijack the au
- CVE-2015-4203Race condition in Cisco IOS 12.2SCH in the Performance Routing Engine (PRE) module on uBR10000 devices, when NetFlow and an MPLS IPv6 VPN ar
- CVE-2015-4205Cisco IOS XR 5.3.1 on ASR 9000 devices allows remote attackers to cause a denial of service (NPU chip reset or line-card reload) by sending
- CVE-2015-4207Cisco WebEx Meeting Center places a meeting's access number in a URL, which allows remote attackers to obtain sensitive information and bypa
- CVE-2015-4209Cisco WebEx Meeting Center does not properly determine authorization for reading a host calendar, which allows remote attackers to obtain se
- CVE-2015-4210Cross-site scripting (XSS) vulnerability in Cisco WebEx Meeting Center allows remote attackers to inject arbitrary web script or HTML via a
- CVE-2015-4586Cross-site request forgery (CSRF) vulnerability in Alcatel-Lucent CellPipe 7130 RG 5Ae.M2013 HOL with firmware 1.0.0.20h.HOL allows remote a
- CVE-2015-4725Cross-site scripting (XSS) vulnerability in forgot.php in AudioShare 2.0.2 allows remote attackers to inject arbitrary web script or HTML vi
- CVE-2015-4726PHP remote file inclusion vulnerability in ajax/myajaxphp.php in AudioShare 2.0.2 allows remote attackers to execute arbitrary PHP code via
- CVE-2015-4200Memory leak in the IPv6-to-IPv4 functionality in Cisco IOS 15.3S in the Performance Routing Engine (PRE) module on UBR devices allows remote
- CVE-2015-4204Memory leak in Cisco IOS 12.2 in the Performance Routing Engine (PRE) module on uBR10000 devices allows remote authenticated users to cause