# CVEs published 2015-11-13

6 CVEs were published on November 13, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-2698](https://cve.now/CVE-2015-2698.md): The iakerb\_gss\_export\_sec\_context function in lib/gssapi/krb5/iakerb.c in MIT Kerberos 5 (aka krb5) 1.14 pre-release 2015-09-14 improperly a (no CVSS)
- [CVE-2015-6045](https://cve.now/CVE-2015-6045.md): Use-after-free vulnerability in the CElement object implementation in Microsoft Internet Explorer 11 allows remote attackers to execute arbi (no CVSS)
- [CVE-2015-6366](https://cve.now/CVE-2015-6366.md): Cisco IOS 15.2(04)M6 and 15.4(03)S lets physical-interface ACLs supersede tunnel-interface ACLs, which allows remote attackers to bypass int (no CVSS)
- [CVE-2015-6478](https://cve.now/CVE-2015-6478.md): Unitronics VisiLogic OPLC IDE before 9.8.02 does not properly restrict access to ActiveX controls, which allows remote attackers to have an (no CVSS)
- [CVE-2015-7905](https://cve.now/CVE-2015-7905.md): Unitronics VisiLogic OPLC IDE before 9.8.02 allows remote attackers to execute unspecified code via unknown vectors. (no CVSS)
- [CVE-2015-8126](https://cve.now/CVE-2015-8126.md): Multiple buffer overflows in the (1) png\_set\_PLTE and (2) png\_get\_PLTE functions in libpng before 1.0.64, 1.1.x and 1.2.x before 1.2.54, 1.3 (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-11-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.