# CVEs published 2015-10-04

17 CVEs were published on October 4, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9750](https://cve.now/CVE-2014-9750.md): ntp\_crypto.c in ntpd in NTP 4.x before 4.2.8p1, when Autokey Authentication is enabled, allows remote attackers to obtain sensitive informat (no CVSS)
- [CVE-2014-9751](https://cve.now/CVE-2014-9751.md): The read\_network\_packet function in ntp\_io.c in ntpd in NTP 4.x before 4.2.8p1 on Linux and OS X does not properly determine whether a sourc (no CVSS)
- [CVE-2015-1933](https://cve.now/CVE-2015-1933.md): IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX001, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7. (no CVSS)
- [CVE-2015-1934](https://cve.now/CVE-2015-1934.md): IBM Maximo Asset Management 7.1 through 7.1.1.13, 7.5.0 before 7.5.0.8 IFIX002, and 7.6.0 before 7.6.0.1 IFIX001; Maximo Asset Management 7. (no CVSS)
- [CVE-2015-1969](https://cve.now/CVE-2015-1969.md): Cross-site scripting (XSS) vulnerability in IBM Tivoli Common Reporting (TCR) 2.1 before IF13 and 2.1.1 before IF21, and TCR 3.1.x as used i (no CVSS)
- [CVE-2015-1983](https://cve.now/CVE-2015-1983.md): Cross-site scripting (XSS) vulnerability in the Projects page in IBM UrbanCode Build 6.1.x before 6.1.1 allows remote authenticated users to (no CVSS)
- [CVE-2015-1988](https://cve.now/CVE-2015-1988.md): Cross-site scripting (XSS) vulnerability in IBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware 6.3 before 6.3.2. (no CVSS)
- [CVE-2015-2011](https://cve.now/CVE-2015-2011.md): The xmlrpc.cgi Webmin script in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated user (no CVSS)
- [CVE-2015-2016](https://cve.now/CVE-2015-2016.md): Unspecified vulnerability in IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users t (no CVSS)
- [CVE-2015-2025](https://cve.now/CVE-2015-2025.md): IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 does not set the secure flag for the session cookie in an https se (no CVSS)
- [CVE-2015-2026](https://cve.now/CVE-2015-2026.md): Cross-site request forgery (CSRF) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote a (no CVSS)
- [CVE-2015-2027](https://cve.now/CVE-2015-2027.md): IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 improperly performs logout actions, which allows remote attackers (no CVSS)
- [CVE-2015-2028](https://cve.now/CVE-2015-2028.md): CRLF injection vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to inject (no CVSS)
- [CVE-2015-2029](https://cve.now/CVE-2015-2029.md): Session fixation vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote attackers to hijac (no CVSS)
- [CVE-2015-2030](https://cve.now/CVE-2015-2030.md): IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 has an improper account-lockout setting, which makes it easier for (no CVSS)
- [CVE-2015-2031](https://cve.now/CVE-2015-2031.md): Cross-site scripting (XSS) vulnerability in IBM WebSphere eXtreme Scale 7.1.0 before 7.1.0.3 and 7.1.1 before 7.1.1.1 allows remote authenti (no CVSS)
- [CVE-2015-4930](https://cve.now/CVE-2015-4930.md): IBM QRadar SIEM 7.1 MR2 before Patch 11 IF02 and 7.2.x before 7.2.5 Patch 4 allows remote authenticated users to execute arbitrary commands (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-10-04
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.