# CVEs published 2015-08-19 19 CVEs were published on August 19, 2015: 0 critical, 2 high. 1 is now in CISA KEV. Days are UTC. - [CVE-2015-4296](https://cve.now/CVE-2015-4296.md): Nexus Data Broker (NDB) on Cisco Nexus 3000 devices with software 6.0(2)A6(1) allows remote attackers to cause a denial of service (Java pro (no CVSS) - [CVE-2015-4310](https://cve.now/CVE-2015-4310.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Finesse 10.5(1) allow remote attackers to inject arbitrary web script or HTML v (no CVSS) - [CVE-2015-4323](https://cve.now/CVE-2015-4323.md): Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.9); Nexus 3000 devices 6.0(2)U5(1.41), 7.0(3)I2(0.373), (no CVSS) - [CVE-2015-4277](https://cve.now/CVE-2015-4277.md): The global-configuration implementation on Cisco ASR 9000 devices with software 5.1.3 and 5.3.0 improperly closes vty sessions after a commi (no CVSS) - [CVE-2015-1830](https://cve.now/CVE-2015-1830.md): Directory traversal vulnerability in the fileserver upload/download functionality for blob messages in Apache ActiveMQ 5.x before 5.11.2 for (no CVSS, org.apache.activemq:activemq-client) - [CVE-2015-4298](https://cve.now/CVE-2015-4298.md): Cisco Unified Web and E-Mail Interaction Manager 9.0(2) and 11.0(1) improperly performs authorization, which allows remote authenticated use (no CVSS) - [CVE-2015-4299](https://cve.now/CVE-2015-4299.md): Cisco Unified Web and E-Mail Interaction Manager 9.0(2) improperly performs authorization, which allows remote authenticated users to remove (no CVSS) - [CVE-2015-4301](https://cve.now/CVE-2015-4301.md): Cisco NX-OS on Nexus 9000 devices 11.1(1c) allows remote authenticated users to cause a denial of service (device hang) via large files that (no CVSS) - [CVE-2015-4308](https://cve.now/CVE-2015-4308.md): The webGUI configuration-export feature in Cisco Edge Bluebird Operating System 1.2 on Edge 340 devices allows remote authenticated users to (no CVSS) - [CVE-2015-4322](https://cve.now/CVE-2015-4322.md): Cisco Content Security Management Appliance (SMA) 8.3.6-039, 9.1.0-31, and 9.1.0-103 improperly restricts the privileges available after LDA (no CVSS) - [CVE-2015-4324](https://cve.now/CVE-2015-4324.md): Buffer overflow in Cisco NX-OS on Nexus 1000V devices for VMware vSphere 7.3(0)ZN(0.81), Nexus 3000 devices 7.3(0)ZN(0.81), Nexus 4000 devic (no CVSS) - [CVE-2015-5163](https://cve.now/CVE-2015-5163.md): The import task action in OpenStack Image Service (Glance) 2015.1.x before 2015.1.2 (kilo), when using the V2 API, allows remote authenticat (no CVSS, glance) - [CVE-2015-5621](https://cve.now/CVE-2015-5621.md): The snmp\_pdu\_parse function in snmp\_api.c in net-snmp 5.7.2 and earlier does not remove the varBind variable in a netsnmp\_variable\_list item (CVSS 7.5) - [CVE-2015-6255](https://cve.now/CVE-2015-6255.md): Cross-site scripting (XSS) vulnerability in Cisco Unified Web and E-Mail Interaction Manager 9.0(2) allows remote attackers to inject arbitr (no CVSS) - [CVE-2015-6522](https://cve.now/CVE-2015-6522.md): SQL injection vulnerability in the WP Symposium plugin before 15.8 for WordPress allows remote attackers to execute arbitrary SQL commands v (no CVSS) - [CVE-2015-6523](https://cve.now/CVE-2015-6523.md): Cross-site request forgery (CSRF) vulnerability in the Portfolio plugin before 1.05 for WordPress allows remote attackers to hijack the auth (no CVSS) - [CVE-2015-4297](https://cve.now/CVE-2015-4297.md): Open redirect vulnerability in Cisco WebEx Node for Media Convergence Server (MCS) allows remote attackers to redirect users to arbitrary we (no CVSS) - [CVE-2015-4302](https://cve.now/CVE-2015-4302.md): The web interface in Cisco FireSIGHT Management Center 5.3.1.4 allows remote attackers to delete arbitrary system policies via modified para (no CVSS) - [CVE-2015-2502](https://cve.now/CVE-2015-2502.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (CVSS 8.8, KEV) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-08-19 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.