CVEs published July 29, 2015
10 CVEs were published on July 29, 2015: 0 critical, 1 high. 1 is now in CISA KEV.
- Published
- 10
- Critical
- 0
- High
- 1
- Medium
- 0
- Low
- 0
- Unrated
- 9
- Now in CISA KEV
- 1
- Fix available
- 0
High 1
Medium, low and unrated 9
- CVE-2015-2977Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vector
- CVE-2015-2978Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vector
- CVE-2015-2979Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
- CVE-2015-4286The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bu
- CVE-2015-4290The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users to cause a denial of service (panic) vi
- CVE-2015-0732Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5.
- CVE-2015-2974LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file
- CVE-2015-4287Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictio
- CVE-2015-4288The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security