# CVEs published 2015-07-29

10 CVEs were published on July 29, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-2977](https://cve.now/CVE-2015-2977.md): Webservice-DIC yoyaku\_v41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vector (no CVSS)
- [CVE-2015-2978](https://cve.now/CVE-2015-2978.md): Webservice-DIC yoyaku\_v41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vector (no CVSS)
- [CVE-2015-2979](https://cve.now/CVE-2015-2979.md): Webservice-DIC yoyaku\_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors. (no CVSS)
- [CVE-2015-4286](https://cve.now/CVE-2015-4286.md): The web framework in Cisco UCS Central Software 1.3(0.99) allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bu (no CVSS)
- [CVE-2015-4290](https://cve.now/CVE-2015-4290.md): The kernel extension in Cisco AnyConnect Secure Mobility Client 4.0(2049) on OS X allows local users to cause a denial of service (panic) vi (no CVSS)
- [CVE-2015-5477](https://cve.now/CVE-2015-5477.md): named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial of service (REQUIRE assertion fa (CVSS 7.5, KEV)
- [CVE-2015-0732](https://cve.now/CVE-2015-0732.md): Cross-site scripting (XSS) vulnerability in Cisco AsyncOS on the Web Security Appliance (WSA) 9.0.0-193; Email Security Appliance (ESA) 8.5. (no CVSS)
- [CVE-2015-2974](https://cve.now/CVE-2015-2974.md): LEMON-S PHP Gazou BBS plus before 2.36 allows remote attackers to upload arbitrary HTML documents via vectors involving a crafted image file (no CVSS)
- [CVE-2015-4287](https://cve.now/CVE-2015-4287.md): Cisco Firepower Extensible Operating System 1.1(1.86) on Firepower 9000 devices allows remote attackers to bypass intended access restrictio (no CVSS)
- [CVE-2015-4288](https://cve.now/CVE-2015-4288.md): The LDAP implementation on the Cisco Web Security Appliance (WSA) 8.5.0-000, Email Security Appliance (ESA) 8.5.7-042, and Content Security (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-07-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.