# CVEs published 2015-12-05

6 CVEs were published on December 5, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6384](https://cve.now/CVE-2015-6384.md): The Cisco WebEx Meetings application before 8.5.1 for Android improperly initializes custom application permissions, which allows attackers (no CVSS)
- [CVE-2015-6387](https://cve.now/CVE-2015-6387.md): Cross-site scripting (XSS) vulnerability in Cisco Unified Computing System (UCS) Central Software 1.3(0.1) allows remote attackers to inject (no CVSS)
- [CVE-2015-6388](https://cve.now/CVE-2015-6388.md): Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote attackers to conduct server-side request forgery (SSRF) attacks (no CVSS)
- [CVE-2015-6391](https://cve.now/CVE-2015-6391.md): Cisco Unified SIP 3905 phones allow remote attackers to cause a denial of service (resource consumption and functionality loss) via a large (no CVSS)
- [CVE-2015-6394](https://cve.now/CVE-2015-6394.md): The kernel in Cisco NX-OS 5.2(9)N1(1) on Nexus 5000 devices allows local users to cause a denial of service (device crash) via crafted USB p (no CVSS)
- [CVE-2015-6849](https://cve.now/CVE-2015-6849.md): EMC NetWorker before 8.0.4.5, 8.1.x before 8.1.3.6, 8.2.x before 8.2.2.2, and 9.0 before build 407 allows remote attackers to cause a denial (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-12-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.