# CVEs published 2015-06-26

11 CVEs were published on June 26, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1266](https://cve.now/CVE-2015-1266.md): content/browser/webui/content\_web\_ui\_controller\_factory.cc in Google Chrome before 43.0.2357.130 does not properly consider the scheme in de (no CVSS)
- [CVE-2015-1267](https://cve.now/CVE-2015-1267.md): Blink, as used in Google Chrome before 43.0.2357.130, does not properly restrict the creation context during creation of a DOM wrapper, whic (no CVSS)
- [CVE-2015-1268](https://cve.now/CVE-2015-1268.md): bindings/scripts/v8\_types.py in Blink, as used in Google Chrome before 43.0.2357.130, does not properly select a creation context for a retu (no CVSS)
- [CVE-2015-1269](https://cve.now/CVE-2015-1269.md): The DecodeHSTSPreloadRaw function in net/http/transport\_security\_state.cc in Google Chrome before 43.0.2357.130 does not properly canonicali (no CVSS)
- [CVE-2015-1158](https://cve.now/CVE-2015-1158.md): The add\_job function in scheduler/ipp.c in cupsd in CUPS before 2.0.3 performs incorrect free operations for multiple-value job-originating- (no CVSS)
- [CVE-2015-1159](https://cve.now/CVE-2015-1159.md): Cross-site scripting (XSS) vulnerability in the cgi\_puts function in cgi-bin/template.c in the template engine in CUPS before 2.0.3 allows r (no CVSS)
- [CVE-2015-4216](https://cve.now/CVE-2015-4216.md): The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management (no CVSS)
- [CVE-2015-4217](https://cve.now/CVE-2015-4217.md): The remote-support feature on Cisco Web Security Virtual Appliance (WSAv), Email Security Virtual Appliance (ESAv), and Security Management (no CVSS)
- [CVE-2015-4221](https://cve.now/CVE-2015-4221.md): Cisco Unified Communications Manager IM and Presence Service 9.1(1) does not properly restrict access to encrypted passwords, which allows r (no CVSS)
- [CVE-2015-4222](https://cve.now/CVE-2015-4222.md): SQL injection vulnerability in Cisco Unified Communications Manager IM and Presence Service 9.1(1) allows remote authenticated users to exec (no CVSS)
- [CVE-2015-4224](https://cve.now/CVE-2015-4224.md): Cisco Wireless LAN Controller (WLC) devices with software 7.0(240.0) allow local users to execute arbitrary OS commands in a privileged cont (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-06-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.