# CVEs published 2015-10-02

7 CVEs were published on October 2, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-5653](https://cve.now/CVE-2015-5653.md): Buffer overflow in Canary Labs Trend Web Server before 9.5.2 allows remote attackers to execute arbitrary code via a crafted TCP packet. (no CVSS)
- [CVE-2015-6308](https://cve.now/CVE-2015-6308.md): Cisco NX-OS 6.0(2)U6(0.46) on N3K devices allows remote authenticated users to cause a denial of service (temporary SNMP outage) via an SNMP (no CVSS)
- [CVE-2015-6309](https://cve.now/CVE-2015-6309.md): Cisco Email Security Appliance (ESA) 8.5.6-106 and 9.6.0-042 allows remote authenticated users to cause a denial of service (file-descriptor (no CVSS)
- [CVE-2015-2858](https://cve.now/CVE-2015-2858.md): Datalex airline booking software before 2015-09-03 allows remote attackers to read or write to arbitrary user data via a modified profileId (no CVSS)
- [CVE-2015-3876](https://cve.now/CVE-2015-3876.md): libstagefright in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP (no CVSS)
- [CVE-2015-4546](https://cve.now/CVE-2015-4546.md): Directory traversal vulnerability in EMC RSA OneStep 6.9 before build 559, as used in RSA Certificate Manager and RSA Registration Manager t (no CVSS)
- [CVE-2015-6602](https://cve.now/CVE-2015-6602.md): libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-10-02
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.