# CVEs published 2015-08-03 18 CVEs were published on August 3, 2015: 0 critical, 1 high. Days are UTC. - [CVE-2015-1955](https://cve.now/CVE-2015-1955.md): IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (CPU consumption) via a crafted byte sequence in authentica (no CVSS) - [CVE-2015-1956](https://cve.now/CVE-2015-1956.md): IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentic (no CVSS) - [CVE-2015-1958](https://cve.now/CVE-2015-1958.md): IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentic (no CVSS) - [CVE-2015-1970](https://cve.now/CVE-2015-1970.md): The IBM WebSphere DataPower XC10 appliance 2.1 through 2.1.0.3 and 2.5 through 2.5.0.4 retains data on SSD cards, which might allow physical (no CVSS) - [CVE-2015-1987](https://cve.now/CVE-2015-1987.md): IBM MQ Light before 1.0.0.2 allows remote attackers to cause a denial of service (disk consumption) via a crafted byte sequence in authentic (no CVSS) - [CVE-2015-4931](https://cve.now/CVE-2015-4931.md): Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbi (no CVSS) - [CVE-2015-4932](https://cve.now/CVE-2015-4932.md): Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbi (no CVSS) - [CVE-2015-4933](https://cve.now/CVE-2015-4933.md): Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbi (no CVSS) - [CVE-2015-4934](https://cve.now/CVE-2015-4934.md): Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbi (no CVSS) - [CVE-2015-4935](https://cve.now/CVE-2015-4935.md): Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbi (no CVSS) - [CVE-2015-4936](https://cve.now/CVE-2015-4936.md): Unspecified vulnerability in IBM WebSphere eXtreme Scale 8.6 through 8.6.0.8 allows remote attackers to cause a denial of service via unknow (no CVSS) - [CVE-2015-3440](https://cve.now/CVE-2015-3440.md): Cross-site scripting (XSS) vulnerability in wp-includes/wp-db.php in WordPress before 4.2.1 allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2015-5622](https://cve.now/CVE-2015-5622.md): Cross-site scripting (XSS) vulnerability in WordPress before 4.2.3 allows remote authenticated users to inject arbitrary web script or HTML (no CVSS) - [CVE-2015-5623](https://cve.now/CVE-2015-5623.md): WordPress before 4.2.3 does not properly verify the edit\_posts capability, which allows remote authenticated users to bypass intended access (no CVSS) - [CVE-2015-5084](https://cve.now/CVE-2015-5084.md): The Siemens SIMATIC WinCC Sm@rtClient and Sm@rtClient Lite applications before 01.00.01.00 for Android do not properly store passwords, whic (no CVSS) - [CVE-2015-5537](https://cve.now/CVE-2015-5537.md): The SSL layer of the HTTPS service in Siemens RuggedCom ROS before 4.2.0 and ROX II does not properly implement CBC padding, which makes it (no CVSS) - [CVE-2015-5352](https://cve.now/CVE-2015-5352.md): The x11\_open\_helper function in channels.c in ssh in OpenSSH before 6.9, when ForwardX11Trusted mode is not used, lacks a check of the refus (no CVSS) - [CVE-2015-5600](https://cve.now/CVE-2015-5600.md): The kbdint\_next\_device function in auth2-chall.c in sshd in OpenSSH through 6.9 does not properly restrict the processing of keyboard-intera (CVSS 8.1) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-08-03 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.