# CVEs published 2015-08-23

14 CVEs were published on August 23, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-2904](https://cve.now/CVE-2015-2904.md): Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain (no CVSS)
- [CVE-2015-2905](https://cve.now/CVE-2015-2905.md): Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hij (no CVSS)
- [CVE-2015-2906](https://cve.now/CVE-2015-2906.md): Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, store SSH private key (no CVSS, Munic Mobile Devices (MDI) OBD-II dongles)
- [CVE-2015-2907](https://cve.now/CVE-2015-2907.md): Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, have hardcoded SSH cr (no CVSS, Munic Mobile Devices (MDI) OBD-II dongles)
- [CVE-2015-2908](https://cve.now/CVE-2015-2908.md): Mobile Devices (aka MDI) C4 OBD-II dongles with firmware 2.x and 3.4.x, as used in Metromile Pulse and other products, do not validate firmw (no CVSS, Munic Mobile Devices (MDI) OBD-II dongles)
- [CVE-2015-2018](https://cve.now/CVE-2015-2018.md): IBM Integration Bus 9 and 10 before 10.0.0.1 and WebSphere Message Broker 7 before 7.0.0.8 and 8 before 8.0.0.7 do not ensure that the corre (no CVSS)
- [CVE-2015-2872](https://cve.now/CVE-2015-2872.md): Multiple cross-site scripting (XSS) vulnerabilities in Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with s (no CVSS)
- [CVE-2015-2873](https://cve.now/CVE-2015-2873.md): Trend Micro Deep Discovery Inspector (DDI) on Deep Discovery Threat appliances with software before 3.5.1477, 3.6.x before 3.6.1217, 3.7.x b (no CVSS)
- [CVE-2015-1992](https://cve.now/CVE-2015-1992.md): IBM Systems Director 5.2.x, 6.1.x, 6.2.0.x, 6.2.1.x, 6.3.0.0, 6.3.1.x, 6.3.2.x, 6.3.3.x, 6.3.5.0, and 6.3.6.0 improperly processes events, w (no CVSS)
- [CVE-2015-4950](https://cve.now/CVE-2015-4950.md): The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 be (no CVSS)
- [CVE-2015-2014](https://cve.now/CVE-2015-2014.md): Open redirect vulnerability in the web server in IBM Domino 8.5 before 8.5.3 FP6 IF9 and 9.0 before 9.0.1 FP4 allows remote attackers to red (no CVSS)
- [CVE-2015-2015](https://cve.now/CVE-2015-2015.md): Cross-site scripting (XSS) vulnerability in pubnames.ntf (aka the Directory template) in the web server in IBM Domino before 9.0.0 allows re (no CVSS)
- [CVE-2015-4949](https://cve.now/CVE-2015-4949.md): IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 7.1 before 7.1.2, Tivoli Storage Manager for Mail: Data P (no CVSS)
- [CVE-2015-6557](https://cve.now/CVE-2015-6557.md): IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 5.5 before 5.5.6.1, 6.3 before 6.3.1.5, 6.4 before 6.4.1. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.