# CVEs published 2015-08-13

8 CVEs were published on August 13, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-2321](https://cve.now/CVE-2015-2321.md): Cross-site scripting (XSS) vulnerability in the Job Manager plugin 0.7.22 and earlier for WordPress allows remote attackers to inject arbitr (no CVSS)
- [CVE-2015-3253](https://cve.now/CVE-2015-3253.md): The MethodClosure class in runtime/MethodClosure.java in Apache Groovy 1.7.0 through 2.4.3 allows remote attackers to execute arbitrary code (no CVSS, org.codehaus.groovy:groovy · org.codehaus.groovy:groovy-all)
- [CVE-2015-4665](https://cve.now/CVE-2015-4665.md): Cross-site scripting (XSS) vulnerability in ajax\_cmd.php in Xceedium Xsuite 2.4.4.1 and earlier allows remote attackers to inject arbitrary (no CVSS)
- [CVE-2015-4666](https://cve.now/CVE-2015-4666.md): Directory traversal vulnerability in opm/read\_sessionlog.php in Xceedium Xsuite 2.4.4.5 and earlier allows remote attackers to read arbitrar (no CVSS)
- [CVE-2015-5474](https://cve.now/CVE-2015-5474.md): BitTorrent and uTorrent allow remote attackers to inject command line parameters and execute arbitrary commands via a crafted URL using the (no CVSS)
- [CVE-2015-5535](https://cve.now/CVE-2015-5535.md): Cross-site scripting (XSS) vulnerability in the qTranslate plugin 2.5.39 and earlier for WordPress allows remote attackers to inject arbitra (no CVSS)
- [CVE-2015-5536](https://cve.now/CVE-2015-5536.md): Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10 allows remote authenticated users to execute arbitrary commands via (no CVSS)
- [CVE-2015-5685](https://cve.now/CVE-2015-5685.md): The lazy\_bdecode function in BitTorrent DHT bootstrap server (bootstrap-dht ) allows remote attackers to execute arbitrary code via a crafte (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.