# CVEs published 2015-10-25

11 CVEs were published on October 25, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1001](https://cve.now/CVE-2015-1001.md): Multiple stack-based buffer overflows in IniNet embeddedWebServer (aka eWebServer) before 2.02 allow remote attackers to execute arbitrary c (no CVSS)
- [CVE-2015-1002](https://cve.now/CVE-2015-1002.md): IniNet embeddedWebServer (aka eWebServer) before 2.02 mishandles URL encoding, which allows remote attackers to write to or delete files via (no CVSS)
- [CVE-2015-1003](https://cve.now/CVE-2015-1003.md): Directory traversal vulnerability in IniNet embeddedWebServer (aka eWebServer) before 2.02 allows remote attackers to read arbitrary files v (no CVSS)
- [CVE-2015-1005](https://cve.now/CVE-2015-1005.md): IniNet embeddedWebServer (aka eWebServer) before 2.02 for Windows CE uses cleartext for password storage, which allows context-dependent att (no CVSS)
- [CVE-2015-6324](https://cve.now/CVE-2015-6324.md): The DHCPv6 relay implementation in Cisco Adaptive Security Appliance (ASA) software 9.0 before 9.0(4.37), 9.1 before 9.1(6.6), 9.2 before 9. (no CVSS)
- [CVE-2015-6325](https://cve.now/CVE-2015-6325.md): Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17 (no CVSS)
- [CVE-2015-6326](https://cve.now/CVE-2015-6326.md): Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 through 8.7 before 8.7(1.17 (no CVSS)
- [CVE-2015-6327](https://cve.now/CVE-2015-6327.md): The IKEv1 implementation in Cisco Adaptive Security Appliance (ASA) software 7.2 and 8.2 before 8.2(5.58), 8.3 and 8.4 before 8.4(7.29), 8.5 (no CVSS)
- [CVE-2015-6335](https://cve.now/CVE-2015-6335.md): The policy implementation in Cisco FireSIGHT Management Center 5.3.1.7, 5.4.0.4, and 6.0.0 for VMware allows remote authenticated administra (no CVSS)
- [CVE-2015-6341](https://cve.now/CVE-2015-6341.md): The Web Management GUI on Cisco Wireless LAN Controller (WLC) devices with software 7.4(140.0) and 8.0(120.0) allows remote attackers to cau (no CVSS)
- [CVE-2015-6484](https://cve.now/CVE-2015-6484.md): 3S-Smart CODESYS Gateway Server before 2.3.9.48 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon cr (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-10-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.