# CVEs published 2015-07-20 22 CVEs were published on July 20, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-0253](https://cve.now/CVE-2015-0253.md): The read\_request\_line function in server/protocol.c in the Apache HTTP Server 2.4.12 does not initialize the protocol structure member, whic (no CVSS) - [CVE-2015-2862](https://cve.now/CVE-2015-2862.md): Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14 (no CVSS) - [CVE-2015-2863](https://cve.now/CVE-2015-2863.md): Open redirect vulnerability in Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.29, 8.x before 8.0.0.18, 9.0 before 9.0.0.14, and (no CVSS) - [CVE-2015-3183](https://cve.now/CVE-2015-3183.md): The chunked transfer coding implementation in the Apache HTTP Server before 2.4.14 does not properly parse chunk headers, which allows remot (no CVSS) - [CVE-2015-3185](https://cve.now/CVE-2015-3185.md): The ap\_some\_auth\_required function in server/request.c in the Apache HTTP Server 2.4.x before 2.4.14 does not consider that a Require direct (no CVSS) - [CVE-2015-4279](https://cve.now/CVE-2015-4279.md): The Manager component in Cisco Unified Computing System (UCS) 2.2(3b) on B Blade Server devices allows local users to gain privileges for ex (no CVSS) - [CVE-2015-5124](https://cve.now/CVE-2015-5124.md): Adobe Flash Player before 13.0.0.302 and 14.x through 18.x before 18.0.0.203 on Windows and OS X and before 11.2.202.481 on Linux, Adobe AIR (no CVSS) - [CVE-2015-2418](https://cve.now/CVE-2015-2418.md): Race condition in Microsoft Malicious Software Removal Tool (MSRT) before 5.26 allows local users to gain privileges via a crafted DLL, aka (no CVSS) - [CVE-2015-2426](https://cve.now/CVE-2015-2426.md): Buffer underflow in atmfd.dll in the Windows Adobe Type Manager Library in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, (CVSS 8.8, KEV) - [CVE-2014-8910](https://cve.now/CVE-2014-8910.md): IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated use (no CVSS) - [CVE-2014-9196](https://cve.now/CVE-2014-9196.md): Eaton’s Cooper Power Series Form 6 Control and Idea/IdeaPlus Relays with Ethernet (no CVSS, Eaton’s Cooper Power Systems Series Form · Eaton’s Cooper P…) - [CVE-2015-0130](https://cve.now/CVE-2015-0130.md): Cross-site scripting (XSS) vulnerability in Jazz Team Server in Jazz Foundation in IBM Rational Collaborative Lifecycle Management (CLM) 4.x (no CVSS) - [CVE-2015-0157](https://cve.now/CVE-2015-0157.md): IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated use (no CVSS) - [CVE-2015-1883](https://cve.now/CVE-2015-1883.md): IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Windows allows remote authenticated use (no CVSS) - [CVE-2015-1922](https://cve.now/CVE-2015-1922.md): The Data Movement implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and Win (no CVSS) - [CVE-2015-1935](https://cve.now/CVE-2015-1935.md): The scalar-function implementation in IBM DB2 9.7 through FP10, 9.8 through FP5, 10.1 before FP5, and 10.5 through FP5 on Linux, UNIX, and W (no CVSS) - [CVE-2015-1968](https://cve.now/CVE-2015-1968.md): Cross-site scripting (XSS) vulnerability in IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 befo (no CVSS) - [CVE-2015-1979](https://cve.now/CVE-2015-1979.md): Multiple cross-site scripting (XSS) vulnerabilities in the Error dialog in IBM Case Manager 5.2.1 before 5.2.1.2 allow remote authenticated (no CVSS) - [CVE-2015-1980](https://cve.now/CVE-2015-1980.md): IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to (no CVSS) - [CVE-2015-1982](https://cve.now/CVE-2015-1982.md): IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to (no CVSS) - [CVE-2015-1984](https://cve.now/CVE-2015-1984.md): IBM InfoSphere Master Data Management Collaborative Edition 9.1, 10.1, 11.0, 11.3, and 11.4 before FP03 allows remote authenticated users to (no CVSS) - [CVE-2015-4111](https://cve.now/CVE-2015-4111.md): mc\_demux\_mp4\_ds.ax in an unspecified third-party codec demux in BlackBerry Link before 1.2.3.53 with installer before 1.1.0.22 allows remote (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-07-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.