# CVEs published 2015-10-12

16 CVEs were published on October 12, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1047](https://cve.now/CVE-2015-1047.md): vpxd in VMware vCenter Server 5.0 before u3e, 5.1 before u3, and 5.5 before u2 allows remote attackers to cause a denial of service via a lo (no CVSS)
- [CVE-2015-2342](https://cve.now/CVE-2015-2342.md): The JMX RMI service in VMware vCenter Server 5.0 before u3e, 5.1 before u3b, 5.5 before u3, and 6.0 before u1 does not restrict registration (no CVSS)
- [CVE-2015-4265](https://cve.now/CVE-2015-4265.md): Cisco Unified Computing System (UCS) B Blade Server Software 2.2.x before 2.2.6 allows local users to cause a denial of service (host OS or (no CVSS)
- [CVE-2015-4325](https://cve.now/CVE-2015-4325.md): The process-management implementation in Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows local users to gain pr (no CVSS)
- [CVE-2015-5443](https://cve.now/CVE-2015-5443.md): HP 3PAR Service Processor SP 4.2.0.GA-29 (GA) SPOCC, SP 4.3.0.GA-17 (GA) SPOCC, and SP 4.3.0-GA-24 (MU1) SPOCC allows remote authenticated u (no CVSS)
- [CVE-2015-5646](https://cve.now/CVE-2015-5646.md): Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP code via unspecified vector (no CVSS)
- [CVE-2015-5647](https://cve.now/CVE-2015-5647.md): The RSS Reader component in Cybozu Garoon 3.x through 3.7.5 and 4.x through 4.0.3 allows remote authenticated users to execute arbitrary PHP (no CVSS)
- [CVE-2015-6318](https://cve.now/CVE-2015-6318.md): Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspe (no CVSS)
- [CVE-2015-6322](https://cve.now/CVE-2015-6322.md): The IPC channel in Cisco AnyConnect Secure Mobility Client 2.0.0343 through 4.1(8) allows local users to bypass intended access restrictions (no CVSS)
- [CVE-2015-6329](https://cve.now/CVE-2015-6329.md): SQL injection vulnerability in Cisco Prime Collaboration Provisioning 10.6 and 11.0 allows remote authenticated users to execute arbitrary S (no CVSS)
- [CVE-2015-6331](https://cve.now/CVE-2015-6331.md): SQL injection vulnerability in the web framework in Cisco Prime Collaboration Assurance 10.5(1) allows remote authenticated users to execute (no CVSS)
- [CVE-2015-1303](https://cve.now/CVE-2015-1303.md): bindings/core/v8/V8DOMWrapper.h in Blink, as used in Google Chrome before 45.0.2454.101, does not perform a rethrow action to propagate info (no CVSS)
- [CVE-2015-1304](https://cve.now/CVE-2015-1304.md): object-observe.js in Google V8, as used in Google Chrome before 45.0.2454.101, does not properly restrict method calls on access-checked obj (no CVSS)
- [CVE-2015-4547](https://cve.now/CVE-2015-4547.md): EMC RSA Web Threat Detection before 5.1 SP1 stores a cleartext AnnoDB password in a configuration file, which allows remote authenticated us (no CVSS)
- [CVE-2015-4548](https://cve.now/CVE-2015-4548.md): EMC RSA Web Threat Detection before 5.1 SP1 allows local users to obtain root privileges by leveraging access to a service account and writi (no CVSS)
- [CVE-2015-6263](https://cve.now/CVE-2015-6263.md): The RADIUS client implementation in Cisco IOS 15.4(3)M2.2, when a shared RADIUS secret is configured, allows remote RADIUS servers to cause (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-10-12
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.