# CVEs published 2015-08-20 29 CVEs were published on August 20, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-3219](https://cve.now/CVE-2015-3219.md): Cross-site scripting (XSS) vulnerability in the Orchestration/Stack section in OpenStack Dashboard (Horizon) 2014.2 before 2014.2.4 and 2015 (no CVSS, horizon) - [CVE-2015-6528](https://cve.now/CVE-2015-6528.md): Multiple cross-site scripting (XSS) vulnerabilities in install\_classic.php in Coppermine Photo Gallery (CPG) 1.5.36 allow remote attackers t (no CVSS) - [CVE-2015-6529](https://cve.now/CVE-2015-6529.md): Multiple cross-site scripting (XSS) vulnerabilities in phpipam 1.1.010 allow remote attackers to inject arbitrary web script or HTML via the (no CVSS) - [CVE-2015-6530](https://cve.now/CVE-2015-6530.md): Cross-site scripting (XSS) vulnerability in OpenText Secure MFT 2013 before 2013 R3 P6 and 2014 before 2014 R2 P2 allows remote attackers to (no CVSS) - [CVE-2015-4318](https://cve.now/CVE-2015-4318.md): Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid varia (no CVSS) - [CVE-2015-0533](https://cve.now/CVE-2015-0533.md): EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier allow remote SSL ser (no CVSS) - [CVE-2015-0534](https://cve.now/CVE-2015-0534.md): EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-J before 6.2, RSA BSAFE SSL-J before 6.2 (no CVSS) - [CVE-2015-0535](https://cve.now/CVE-2015-0535.md): EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier do not properly rest (no CVSS) - [CVE-2015-0536](https://cve.now/CVE-2015-0536.md): EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA BSAFE SSL-C 2.8.9 and earlier, when client authent (no CVSS) - [CVE-2015-0537](https://cve.now/CVE-2015-0537.md): Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 (no CVSS) - [CVE-2015-0542](https://cve.now/CVE-2015-0542.md): Multiple cross-site request forgery (CSRF) vulnerabilities in EMC RSA Archer GRC 5.5 SP1 before P3 allow remote attackers to hijack the auth (no CVSS) - [CVE-2015-4303](https://cve.now/CVE-2015-4303.md): Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute arbitrary commands in the context of (no CVSS) - [CVE-2015-4316](https://cve.now/CVE-2015-4316.md): The Mobile and Remote Access (MRA) endpoint-validation feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 impr (no CVSS) - [CVE-2015-4319](https://cve.now/CVE-2015-4319.md): The password-change feature in the administrative web interface in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 imp (no CVSS) - [CVE-2015-4321](https://cve.now/CVE-2015-4321.md): The Unicast Reverse Path Forwarding (uRPF) implementation in Cisco Adaptive Security Appliance (ASA) Software 9.3(1.50), 9.3(2.100), 9.3(3), (no CVSS) - [CVE-2015-4329](https://cve.now/CVE-2015-4329.md): The administrator web interface in Cisco TelePresence Video Communication Server (VCS) X8.5.2 allows remote authenticated users to execute a (no CVSS) - [CVE-2015-4530](https://cve.now/CVE-2015-4530.md): Cross-site request forgery (CSRF) vulnerability in EMC Documentum WebTop before 6.8P01, Documentum Administrator through 7.2, Documentum Dig (no CVSS) - [CVE-2015-4531](https://cve.now/CVE-2015-4531.md): EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly che (no CVSS) - [CVE-2015-4532](https://cve.now/CVE-2015-4532.md): EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly che (no CVSS) - [CVE-2015-4533](https://cve.now/CVE-2015-4533.md): EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P02 does not properly che (no CVSS) - [CVE-2015-4534](https://cve.now/CVE-2015-4534.md): Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 befo (no CVSS) - [CVE-2015-4535](https://cve.now/CVE-2015-4535.md): Java Method Server (JMS) in EMC Documentum Content Server before 6.7SP1 P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 befo (no CVSS) - [CVE-2015-4536](https://cve.now/CVE-2015-4536.md): EMC Documentum Content Server before 7.0 P20, 7.1 before P18, and 7.2 before P02, when RPC tracing is configured, stores certain obfuscated (no CVSS) - [CVE-2015-4314](https://cve.now/CVE-2015-4314.md): The System Snapshot feature in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 allows remote authenticated users to ob (no CVSS) - [CVE-2015-4315](https://cve.now/CVE-2015-4315.md): The Call Policy Configuration page in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.3 improperly validates external DT (no CVSS) - [CVE-2015-4317](https://cve.now/CVE-2015-4317.md): Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote attackers to cause a denial of service via invalid varia (no CVSS) - [CVE-2015-4320](https://cve.now/CVE-2015-4320.md): The Configuration Log File component in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated us (no CVSS) - [CVE-2015-4327](https://cve.now/CVE-2015-4327.md): The CLI in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to obtain root privileges by writing scr (no CVSS) - [CVE-2015-4328](https://cve.now/CVE-2015-4328.md): Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 improperly checks for a user account's read-only attribute, which allo (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-08-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.