# CVEs published 2015-11-21 9 CVEs were published on November 21, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2009-5149](https://cve.now/CVE-2009-5149.md): Arris DG860A, TG862A, and TG862G devices with firmware TS0703128\_100611 through TS0705125D\_031115 have predictable technician passwords, whi (no CVSS) - [CVE-2015-6375](https://cve.now/CVE-2015-6375.md): The debug-logging (aka debug cns) feature in Cisco Networking Services (CNS) for IOS 15.2(2)E3 allows local users to obtain sensitive inform (no CVSS) - [CVE-2015-6376](https://cve.now/CVE-2015-6376.md): Cross-site request forgery (CSRF) vulnerability in Cisco TelePresence Video Communication Server (VCS) X8.5.1 allows remote attackers to hij (no CVSS) - [CVE-2015-7289](https://cve.now/CVE-2015-7289.md): Arris DG860A, TG862A, and TG862G devices with firmware TS0703128\_100611 through TS0705125D\_031115 have a hardcoded administrator password de (no CVSS) - [CVE-2015-7290](https://cve.now/CVE-2015-7290.md): Cross-site scripting (XSS) vulnerability in adv\_pwd\_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with fir (no CVSS) - [CVE-2015-7291](https://cve.now/CVE-2015-7291.md): Cross-site request forgery (CSRF) vulnerability in adv\_pwd\_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices w (no CVSS) - [CVE-2015-7777](https://cve.now/CVE-2015-7777.md): Cross-site scripting (XSS) vulnerability in index.php in JosephErnest Void before 2015-10-02 allows remote attackers to inject arbitrary web (no CVSS) - [CVE-2015-7912](https://cve.now/CVE-2015-7912.md): The Ice Faces servlet in ag\_server\_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to (no CVSS) - [CVE-2015-7913](https://cve.now/CVE-2015-7913.md): ag\_server\_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code wi (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-11-21 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.