# CVEs published 2015-11-19

15 CVEs were published on November 19, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2014-9756](https://cve.now/CVE-2014-9756.md): The psf\_fwrite function in file\_io.c in libsndfile allows attackers to cause a denial of service (divide-by-zero error and application crash (no CVSS)
- [CVE-2015-0794](https://cve.now/CVE-2015-0794.md): modules.d/90crypt/module-setup.sh in the dracut package before 037-17.30.1 in openSUSE 13.2 allows local users to have unspecified impact vi (no CVSS)
- [CVE-2015-7385](https://cve.now/CVE-2015-7385.md): Cross-site scripting (XSS) vulnerability in Open-Xchange OX Guard before 2.0.0-rev11 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2015-7845](https://cve.now/CVE-2015-7845.md): The exception handling mechanism in the CLI Module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with softw (no CVSS)
- [CVE-2015-7984](https://cve.now/CVE-2015-7984.md): Multiple cross-site request forgery (CSRF) vulnerabilities in Horde before 5.2.8, Horde Groupware before 5.2.11, and Horde Groupware Webmail (no CVSS)
- [CVE-2015-8083](https://cve.now/CVE-2015-8083.md): An unspecified module in Huawei eSpace U1910, U1911, U1930, U1960, U1980, and U1981 unified gateways with software before V200R003C00SPC300 (no CVSS)
- [CVE-2015-8087](https://cve.now/CVE-2015-8087.md): Huawei NE20E-S, NE40E-M, and NE40E-M2 routers with software before V800R007C10SPC100 and NE40E and NE80E routers with software before V800R0 (no CVSS)
- [CVE-2015-4112](https://cve.now/CVE-2015-4112.md): The Management Console in BlackBerry Enterprise Server (BES) 12 before 12.2 does not properly restrict use of FRAME elements, which makes it (no CVSS)
- [CVE-2015-7910](https://cve.now/CVE-2015-7910.md): Exemys Telemetry Web Server relies on an HTTP Location header to indicate that a client is unauthorized, which allows remote attackers to by (no CVSS)
- [CVE-2015-8236](https://cve.now/CVE-2015-8236.md): Arista EOS before 4.11.12, 4.12 before 4.12.11, 4.13 before 4.13.14M, 4.14 before 4.14.5FX.5, and 4.15 before 4.15.0FX1.1 allows remote atta (no CVSS)
- [CVE-2015-6368](https://cve.now/CVE-2015-6368.md): Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote attackers to read files via a crafted HTTP re (no CVSS)
- [CVE-2015-6369](https://cve.now/CVE-2015-6369.md): The USB driver in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows physically proximate attackers to (no CVSS)
- [CVE-2015-6370](https://cve.now/CVE-2015-6370.md): The Management I/O (MIO) component in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows local users to (no CVSS)
- [CVE-2015-6371](https://cve.now/CVE-2015-6371.md): Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices allows remote authenticated users to read arbitrary files v (no CVSS)
- [CVE-2015-6374](https://cve.now/CVE-2015-6374.md): The web interface in Cisco Firepower Extensible Operating System 1.1(1.160) on Firepower 9000 devices does not properly restrict use of IFRA (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-11-19
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.