# CVEs published 2015-10-31

6 CVEs were published on October 31, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-5667](https://cve.now/CVE-2015-5667.md): Cross-site scripting (XSS) vulnerability in the HTML-Scrubber module before 0.15 for Perl, when the comment feature is enabled, allows remot (no CVSS)
- [CVE-2015-6032](https://cve.now/CVE-2015-6032.md): Qolsys IQ Panel (aka QOL) before 1.5.1 has hardcoded cryptographic keys, which allows remote attackers to create digital signatures for code (no CVSS)
- [CVE-2015-6033](https://cve.now/CVE-2015-6033.md): Qolsys IQ Panel (aka QOL) before 1.5.1 does not verify the digital signatures of software updates, which allows man-in-the-middle attackers (no CVSS)
- [CVE-2015-6343](https://cve.now/CVE-2015-6343.md): The SIP implementation in Cisco IOS 15.5(3)M on Cisco Unified Border Element (CUBE) devices allows remote attackers to cause a denial of ser (no CVSS)
- [CVE-2015-6353](https://cve.now/CVE-2015-6353.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.3.1.5 and 5.4.x through 5.4.1.3 allow remote (no CVSS)
- [CVE-2015-6354](https://cve.now/CVE-2015-6354.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco FireSight Management Center (MC) 5.4.1.3 and 6.0 allow remote authenticated use (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-10-31
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.