# CVEs published 2015-09-14

13 CVEs were published on September 14, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1943](https://cve.now/CVE-2015-1943.md): IBM WebSphere Portal 6.1.0.x through 6.1.0.6 CF27, 6.1.5.x through 6.1.5.3 CF27, 7.0.x through 7.0.0.2 CF29, 8.0.x before 8.0.0.1 CF17, and (no CVSS)
- [CVE-2015-4980](https://cve.now/CVE-2015-4980.md): Unspecified vulnerability in IBM WebSphere Commerce 7.0.0.6 through 7.0.0.9 allows remote authenticated users to obtain sensitive personal i (no CVSS)
- [CVE-2014-9745](https://cve.now/CVE-2014-9745.md): The parse\_encoding function in type1/t1load.c in FreeType before 2.5.3 allows remote attackers to cause a denial of service (infinite loop) (no CVSS)
- [CVE-2015-5997](https://cve.now/CVE-2015-5997.md): Impero Education Pro before 5105 uses a hardcoded CBC key and initialization vector derived from a hash of the Imp3ro string, which makes it (no CVSS)
- [CVE-2015-5998](https://cve.now/CVE-2015-5998.md): Impero Education Pro before 5105 relies on the -1|AUTHENTICATE\\x02PASSWORD string for authentication, which allows remote attackers to execu (no CVSS)
- [CVE-2015-2013](https://cve.now/CVE-2015-2013.md): IBM WebSphere MQ 7.0.1 before 7.0.1.13 allows remote attackers to cause a denial of service (channel-agent abend and process outage) via a c (no CVSS)
- [CVE-2015-4499](https://cve.now/CVE-2015-4499.md): Util.pm in Bugzilla 2.x, 3.x, and 4.x before 4.2.15, 4.3.x and 4.4.x before 4.4.10, and 5.x before 5.0.1 mishandles long e-mail addresses du (no CVSS)
- [CVE-2015-6285](https://cve.now/CVE-2015-6285.md): Format string vulnerability in Cisco Email Security Appliance (ESA) 7.6.0 and 8.0.0 allows remote attackers to cause a denial of service (me (no CVSS)
- [CVE-2015-6286](https://cve.now/CVE-2015-6286.md): Cisco Application Visibility and Control (AVC) 15.3(3)JA, when FlexConnect is enabled, allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2015-6287](https://cve.now/CVE-2015-6287.md): Cisco Web Security Appliance (WSA) 8.0.6-078 and 8.0.6-115 allows remote attackers to cause a denial of service (service outage) via a flood (no CVSS)
- [CVE-2015-6288](https://cve.now/CVE-2015-6288.md): Cisco Content Security Management Appliance (SMA) 7.8.0-000 does not properly validate credentials, which allows remote attackers to cause a (no CVSS)
- [CVE-2015-6290](https://cve.now/CVE-2015-6290.md): Cisco Web Security Appliance (WSA) 8.0.7 allows remote HTTP servers to cause a denial of service (memory consumption from stale TCP connecti (no CVSS)
- [CVE-2015-6830](https://cve.now/CVE-2015-6830.md): libraries/plugins/auth/AuthenticationCookie.class.php in phpMyAdmin 4.3.x before 4.3.13.2 and 4.4.x before 4.4.14.1 allows remote attackers (no CVSS, phpmyadmin/phpmyadmin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-09-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.