# CVEs published 2015-09-20 26 CVEs were published on September 20, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-9227](https://cve.now/CVE-2014-9227.md): Multiple untrusted search path vulnerabilities in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allow local user (no CVSS) - [CVE-2014-9228](https://cve.now/CVE-2014-9228.md): sysplant.sys in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 allows local users to cause a denial of service (b (no CVSS) - [CVE-2014-9229](https://cve.now/CVE-2014-9229.md): Multiple SQL injection vulnerabilities in interface PHP scripts in the Manager component in Symantec Endpoint Protection (SEP) before 12.1.6 (no CVSS) - [CVE-2015-5689](https://cve.now/CVE-2015-5689.md): ghostexp.exe in Ghost Explorer Utility in Symantec Ghost Solutions Suite (GSS) before 3.0 HF2 12.0.0.8010 and Symantec Deployment Solution ( (no CVSS) - [CVE-2015-5690](https://cve.now/CVE-2015-5690.md): The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users t (no CVSS) - [CVE-2015-5691](https://cve.now/CVE-2015-5691.md): Multiple cross-site scripting (XSS) vulnerabilities in PHP scripts in the management console on Symantec Web Gateway (SWG) appliances with s (no CVSS) - [CVE-2015-5692](https://cve.now/CVE-2015-5692.md): admin\_messages.php in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote (no CVSS) - [CVE-2015-5693](https://cve.now/CVE-2015-5693.md): The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users t (no CVSS) - [CVE-2015-6547](https://cve.now/CVE-2015-6547.md): The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users t (no CVSS) - [CVE-2015-6548](https://cve.now/CVE-2015-6548.md): Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software befo (no CVSS) - [CVE-2015-5632](https://cve.now/CVE-2015-5632.md): The runtime engine in the Newphoria applican framework before 1.12.3 for Android and before 1.12.2 for iOS allows attackers to bypass a whit (no CVSS) - [CVE-2015-5633](https://cve.now/CVE-2015-5633.md): The Newphoria Auction Camera application for iOS and before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism (no CVSS) - [CVE-2015-5634](https://cve.now/CVE-2015-5634.md): The Newphoria MEGAPHONE MUSIC application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protectio (no CVSS) - [CVE-2015-5635](https://cve.now/CVE-2015-5635.md): The Newphoria Koritore application before 1.1 for Android and before 1.1 for iOS allows attackers to bypass a URL whitelist protection mecha (no CVSS) - [CVE-2015-5636](https://cve.now/CVE-2015-5636.md): The Newphoria Reversi application before 1.0.3 for Android and before 1.2 for iOS allows attackers to bypass a URL whitelist protection mech (no CVSS) - [CVE-2015-5637](https://cve.now/CVE-2015-5637.md): The Newphoria Photon application before 1.2 for Android allows attackers to bypass a URL whitelist protection mechanism and obtain API acces (no CVSS) - [CVE-2015-5638](https://cve.now/CVE-2015-5638.md): Directory traversal vulnerability in H2O before 1.4.5 and 1.5.x before 1.5.0-beta2, when the file.dir directive is enabled, allows remote at (no CVSS) - [CVE-2015-6284](https://cve.now/CVE-2015-6284.md): Buffer overflow in the Conference Control Protocol API implementation in Cisco TelePresence Server software before 4.1(2.33) on 7010, MSE 87 (no CVSS) - [CVE-2015-6295](https://cve.now/CVE-2015-6295.md): Cisco NX-OS 6.1(2)I3(4) and 7.0(3)I1(1) on Nexus 9000 (N9K) devices allows remote attackers to cause a denial of service (CPU consumption or (no CVSS) - [CVE-2015-6299](https://cve.now/CVE-2015-6299.md): SQL injection vulnerability in the web interface in Cisco Unity Connection 9.1(1.2) and earlier allows remote authenticated users to execute (no CVSS) - [CVE-2015-6300](https://cve.now/CVE-2015-6300.md): Cisco Secure Access Control Server (ACS) Solution Engine 5.7(0.15) allows remote authenticated users to cause a denial of service (SSH scree (no CVSS) - [CVE-2015-6301](https://cve.now/CVE-2015-6301.md): The DHCPv6 server in Cisco IOS on ASR 9000 devices with software 5.2.0 Base allows remote attackers to cause a denial of service (process re (no CVSS) - [CVE-2015-4304](https://cve.now/CVE-2015-4304.md): The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended access r (no CVSS) - [CVE-2015-4305](https://cve.now/CVE-2015-4305.md): The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended system-d (no CVSS) - [CVE-2015-4306](https://cve.now/CVE-2015-4306.md): The web framework in Cisco Prime Collaboration Assurance before 10.5.1.53684-1 allows remote authenticated users to bypass intended login-se (no CVSS) - [CVE-2015-4307](https://cve.now/CVE-2015-4307.md): The web framework in Cisco Prime Collaboration Provisioning before 11.0 allows remote authenticated users to bypass intended access restrict (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-09-20 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.