# CVEs published 2015-10-30 19 CVEs were published on October 30, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-8028](https://cve.now/CVE-2015-8028.md): Multiple buffer overflows in SAP 3D Visual Enterprise Viewer (VEV) allow remote attackers to execute arbitrary code via a crafted (1) 3DM or (no CVSS) - [CVE-2015-8029](https://cve.now/CVE-2015-8029.md): SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted Filmbox document, which triggers memor (no CVSS) - [CVE-2015-8030](https://cve.now/CVE-2015-8030.md): SAP 3D Visual Enterprise Viewer (VEV) allows remote attackers to execute arbitrary code via a crafted (1) U3D, (2) LWO, (3) JPEG2000, or (4) (no CVSS) - [CVE-2015-7813](https://cve.now/CVE-2015-7813.md): Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercalls, which allows local (no CVSS) - [CVE-2015-7814](https://cve.now/CVE-2015-7814.md): Race condition in the relinquish\_memory function in arch/arm/domain.c in Xen 4.6.x and earlier allows local domains with partial management (no CVSS) - [CVE-2015-7835](https://cve.now/CVE-2015-7835.md): The mod\_l2\_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows loca (no CVSS) - [CVE-2015-7969](https://cve.now/CVE-2015-7969.md): Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of serv (no CVSS) - [CVE-2015-7970](https://cve.now/CVE-2015-7970.md): The p2m\_pod\_emergency\_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which allows local x86 HVM (no CVSS) - [CVE-2015-7971](https://cve.now/CVE-2015-7971.md): Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows (no CVSS) - [CVE-2015-7972](https://cve.now/CVE-2015-7972.md): The (1) libxl\_set\_memory\_target function in tools/libxl/libxl.c and (2) libxl\_\_build\_post function in tools/libxl/libxl\_dom.c in Xen 3.4.x t (no CVSS) - [CVE-2015-6344](https://cve.now/CVE-2015-6344.md): The web-based GUI in Cisco Adaptive Security Appliance (ASA) CX Context-Aware Security 9.3(4.1.11) allows remote authenticated users to bypa (no CVSS) - [CVE-2015-6345](https://cve.now/CVE-2015-6345.md): SQL injection vulnerability in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users t (no CVSS) - [CVE-2015-6346](https://cve.now/CVE-2015-6346.md): Cross-site scripting (XSS) vulnerability in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote attackers to inject arbitrary w (no CVSS) - [CVE-2015-6347](https://cve.now/CVE-2015-6347.md): The Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated users to bypass intended RBAC restrict (no CVSS) - [CVE-2015-6348](https://cve.now/CVE-2015-6348.md): The report-generation web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) allows remote authenticated (no CVSS) - [CVE-2015-6349](https://cve.now/CVE-2015-6349.md): Cross-site scripting (XSS) vulnerability in the web interface in the Solution Engine in Cisco Secure Access Control Server (ACS) 5.7(0.15) a (no CVSS) - [CVE-2015-6350](https://cve.now/CVE-2015-6350.md): SQL injection vulnerability in the web framework in Cisco Prime Service Catalog 11.0 allows remote authenticated users to execute arbitrary (no CVSS) - [CVE-2015-6351](https://cve.now/CVE-2015-6351.md): Cisco ASR 5500 System Architecture Evolution (SAE) Gateway devices with software 19.1.0.61559 and 19.2.0 allow remote attackers to cause a d (no CVSS) - [CVE-2015-6352](https://cve.now/CVE-2015-6352.md): Cisco Unified Communications Domain Manager before 10.6(1) provides different error messages for pathname access attempts depending on wheth (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-10-30 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.