# CVEs published 2015-08-22

15 CVEs were published on August 22, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-1972](https://cve.now/CVE-2014-1972.md): Apache Tapestry before 5.3.6 relies on client-side object storage without checking whether a client has modified an object, which allows rem (no CVSS, org.apache.tapestry:tapestry-core)
- [CVE-2015-1932](https://cve.now/CVE-2015-1932.md): IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 and WebSphere Virtual Enterprise befor (no CVSS)
- [CVE-2015-2132](https://cve.now/CVE-2015-2132.md): Unspecified vulnerability in the execve system-call implementation in HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain priv (no CVSS)
- [CVE-2015-2137](https://cve.now/CVE-2015-2137.md): Unspecified vulnerability in HP Operations Manager i (OMi) 9.22, 9.23, 9.24, 9.25, 10.00, and 10.01 allows remote attackers to execute arbit (no CVSS)
- [CVE-2015-4938](https://cve.now/CVE-2015-4938.md): IBM WebSphere Application Server 7.x before 7.0.0.39, 8.0.x before 8.0.0.11, and 8.5.x before 8.5.5.7 allows remote attackers to spoof servl (no CVSS)
- [CVE-2015-5406](https://cve.now/CVE-2015-5406.md): HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Perform (no CVSS)
- [CVE-2015-5407](https://cve.now/CVE-2015-5407.md): HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Perform (no CVSS)
- [CVE-2015-5408](https://cve.now/CVE-2015-5408.md): HP CentralView Fraud Risk Management 11.1, 11.2, and 11.3; CentralView Revenue Leakage Control 4.1, 4.2, and 4.3; CentralView Dealer Perform (no CVSS)
- [CVE-2015-2982](https://cve.now/CVE-2015-2982.md): Cross-site scripting (XSS) vulnerability in jquery.lightbox-0.5.min.js in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1. (no CVSS)
- [CVE-2015-2983](https://cve.now/CVE-2015-2983.md): Cross-site request forgery (CSRF) vulnerability in admin.php in PHP Kobo Photo Gallery CMS for PC, smartphone and feature phone 1.0.1 Free a (no CVSS)
- [CVE-2015-2984](https://cve.now/CVE-2015-2984.md): I-O DATA DEVICE WN-G54/R2 routers with firmware before 1.03 and NP-BBRS routers allow remote attackers to cause a denial of service (SSDP re (no CVSS)
- [CVE-2015-4537](https://cve.now/CVE-2015-4537.md): Lockbox in EMC Documentum D2 before 4.5 uses a hardcoded passphrase when a server lacks a D2.Lockbox file, which makes it easier for remote (no CVSS)
- [CVE-2015-4331](https://cve.now/CVE-2015-4331.md): Cisco Prime Infrastructure (PI) 1.4(0.45) and earlier, when AAA authentication is used, allows remote authenticated users to bypass intended (no CVSS)
- [CVE-2015-6256](https://cve.now/CVE-2015-6256.md): Cisco ASR 5000 devices with software 19.0.M0.60828 allow remote attackers to cause a denial of service (OSPF process restart) via crafted le (no CVSS)
- [CVE-2015-6258](https://cve.now/CVE-2015-6258.md): The Internet Access Point Protocol (IAPP) module on Cisco Wireless LAN Controller (WLC) devices with software 8.1(104.37) allows remote atta (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-22
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.