# CVEs published 2015-10-16 21 CVEs were published on October 16, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-6449](https://cve.now/CVE-2014-6449.md): Juniper Junos OS before 12.1X44-D50, 12.1X46 before 12.1X46-D35, 12.1X47 before 12.1X47-D25, 12.3 before 12.3R10, 12.3X48 before 12.3X48-D15 (no CVSS) - [CVE-2014-6450](https://cve.now/CVE-2014-6450.md): Juniper Junos OS before 11.4R12-S4, 12.1X44 before 12.1X44-D41, 12.1X46 before 12.1X46-D26, 12.1X47 before 12.1X47-D11/D15, 12.2 before 12.2 (no CVSS) - [CVE-2014-6451](https://cve.now/CVE-2014-6451.md): J-Web in Juniper vSRX virtual firewalls with Junos OS before 15.1X49-D20 allows remote attackers to cause a denial of service (system reboot (no CVSS) - [CVE-2015-1806](https://cve.now/CVE-2015-1806.md): The combination filter Groovy script in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with job configuration (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2015-1807](https://cve.now/CVE-2015-1807.md): Directory traversal vulnerability in Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users with certain permissions (no CVSS) - [CVE-2015-1808](https://cve.now/CVE-2015-1808.md): Jenkins before 1.600 and LTS before 1.596.1 allows remote authenticated users to cause a denial of service (improper plug-in and tool instal (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2015-1810](https://cve.now/CVE-2015-1810.md): The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using th (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2015-1812](https://cve.now/CVE-2015-1812.md): Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web scri (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2015-1813](https://cve.now/CVE-2015-1813.md): Cross-site scripting (XSS) vulnerability in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to inject arbitrary web scri (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2015-1814](https://cve.now/CVE-2015-1814.md): The API token-issuing service in Jenkins before 1.606 and LTS before 1.596.2 allows remote attackers to gain privileges via a "forced API to (no CVSS, org.jenkins-ci.main:jenkins-core) - [CVE-2015-5742](https://cve.now/CVE-2015-5742.md): VeeamVixProxy in Veeam Backup & Replication (B&R) before 8.0 update 3 stores local administrator credentials in log files with world-readabl (no CVSS) - [CVE-2015-7377](https://cve.now/CVE-2015-7377.md): Cross-site scripting (XSS) vulnerability in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allows remo (no CVSS) - [CVE-2015-7682](https://cve.now/CVE-2015-7682.md): Multiple SQL injection vulnerabilities in pie-register/pie-register.php in the Pie Register plugin before 2.0.19 for WordPress allow remote (no CVSS) - [CVE-2015-7683](https://cve.now/CVE-2015-7683.md): Absolute path traversal vulnerability in Font.php in the Font plugin before 7.5.1 for WordPress allows remote administrators to read arbitra (no CVSS) - [CVE-2015-7856](https://cve.now/CVE-2015-7856.md): OpenNMS has a default password of rtc for the rtc account, which makes it easier for remote attackers to obtain access by leveraging knowled (no CVSS) - [CVE-2013-7445](https://cve.now/CVE-2013-7445.md): The Direct Rendering Manager (DRM) subsystem in the Linux kernel through 4.x mishandles requests for Graphics Execution Manager (GEM) object (no CVSS) - [CVE-2015-4948](https://cve.now/CVE-2015-4948.md): netstat in IBM AIX 5.3, 6.1, and 7.1 and VIOS 2.2.x, when a fibre channel adapter is used, allows local users to gain privileges via unspeci (no CVSS) - [CVE-2015-5660](https://cve.now/CVE-2015-5660.md): Cross-site request forgery (CSRF) vulnerability in eXtplorer before 2.1.8 allows remote attackers to hijack the authentication of arbitrary (no CVSS) - [CVE-2015-6003](https://cve.now/CVE-2015-6003.md): Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows rem (no CVSS) - [CVE-2015-6333](https://cve.now/CVE-2015-6333.md): Cisco Application Policy Infrastructure Controller (APIC) 1.1j allows local users to gain privileges via vectors involving addition of an SS (no CVSS) - [CVE-2015-6334](https://cve.now/CVE-2015-6334.md): Cisco ASR 5000 and 5500 devices with software 18.0.0.57828 and 19.0.M0.61045 allow remote attackers to cause a denial of service (vpnmgr pro (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-10-16 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.