# CVEs published 2015-09-17

15 CVEs were published on September 17, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1319](https://cve.now/CVE-2015-1319.md): The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly dete (no CVSS)
- [CVE-2015-4040](https://cve.now/CVE-2015-4040.md): Directory traversal vulnerability in the configuration utility in F5 BIG-IP before 12.0.0 and Enterprise Manager 3.0.0 through 3.1.1 allows (no CVSS)
- [CVE-2015-5538](https://cve.now/CVE-2015-5538.md): Multiple unspecified vulnerabilities in Citrix NetScaler Application Delivery Controller (ADC) and NetScaler Gateway before 10.1 Build 132.8 (no CVSS)
- [CVE-2015-6672](https://cve.now/CVE-2015-6672.md): Cross-site scripting (XSS) vulnerability in the Administrative Web Interface in Citrix NetScaler Application Delivery Controller (ADC) and N (no CVSS)
- [CVE-2015-7226](https://cve.now/CVE-2015-7226.md): The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead o (no CVSS)
- [CVE-2015-7227](https://cve.now/CVE-2015-7227.md): The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entit (no CVSS)
- [CVE-2015-7228](https://cve.now/CVE-2015-7228.md): The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using non-cookie authenticati (no CVSS)
- [CVE-2015-7229](https://cve.now/CVE-2015-7229.md): The Twitter module 6.x-5.x before 6.x-5.2, 7.x-5.x before 7.x-5.9, and 7.x-6.x before 7.x-6.0 for Drupal does not properly check access perm (no CVSS)
- [CVE-2015-7230](https://cve.now/CVE-2015-7230.md): The Workbench Email module 7.x-3.x before 7.x-3.4 for Drupal allows remote authenticated users with certain permissions to bypass node and f (no CVSS)
- [CVE-2015-7231](https://cve.now/CVE-2015-7231.md): The Commerce Commonwealth (CBA) module 7.x-1.x before 7.x-1.5 for Drupal does not properly validate payments, which allows remote attackers (no CVSS)
- [CVE-2015-7232](https://cve.now/CVE-2015-7232.md): Cross-site scripting (XSS) vulnerability in unspecified administration pages in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the O (no CVSS)
- [CVE-2015-7233](https://cve.now/CVE-2015-7233.md): Cross-site request forgery (CSRF) vulnerability in the OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Import module is enabled, (no CVSS)
- [CVE-2015-7234](https://cve.now/CVE-2015-7234.md): The OSF module 7.x-3.x before 7.x-3.1 for Drupal, when the OSF Ontology and OSF Import modules are enabled, allows user-assisted remote atta (no CVSS)
- [CVE-2015-7235](https://cve.now/CVE-2015-7235.md): Multiple SQL injection vulnerabilities in dex\_reservations.php in the CP Reservation Calendar plugin before 1.1.7 for WordPress allow remote (no CVSS)
- [CVE-2015-6962](https://cve.now/CVE-2015-6962.md): SQL injection vulnerability in the web application in Farol allows remote attackers to execute arbitrary SQL commands via the email paramete (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-09-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.