# CVEs published 2015-12-13

9 CVEs were published on December 13, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6361](https://cve.now/CVE-2015-6361.md): The administrative web interface on Cisco DPC3939 (XB3) devices with firmware 121109aCMCST allows remote authenticated users to execute arbi (no CVSS)
- [CVE-2015-6389](https://cve.now/CVE-2015-6389.md): Cisco Prime Collaboration Assurance before 11.0 has a hardcoded cmuser account, which allows remote attackers to obtain access by establishi (no CVSS)
- [CVE-2015-6400](https://cve.now/CVE-2015-6400.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 10.5(1a) allow remote attackers to inject arbitrary web scr (no CVSS)
- [CVE-2015-6405](https://cve.now/CVE-2015-6405.md): Cross-site request forgery (CSRF) vulnerability in Cisco Emergency Responder 10.5(1) and 10.5(1a) allows remote attackers to hijack the auth (no CVSS)
- [CVE-2015-6406](https://cve.now/CVE-2015-6406.md): Directory traversal vulnerability in the Tools menu in Cisco Emergency Responder 10.5(1.10000.5) allows remote authenticated users to write (no CVSS)
- [CVE-2015-6407](https://cve.now/CVE-2015-6407.md): Cisco Emergency Responder 10.5(3.10000.9) allows remote attackers to upload files to arbitrary locations via a crafted parameter, aka Bug ID (no CVSS)
- [CVE-2015-6413](https://cve.now/CVE-2015-6413.md): Cisco TelePresence Video Communication Server (VCS) Expressway X8.6 allows remote authenticated users to bypass intended read-only restricti (no CVSS)
- [CVE-2015-6414](https://cve.now/CVE-2015-6414.md): Cisco TelePresence Video Communication Server (VCS) X8.6 uses the same encryption key across different customers' installations, which makes (no CVSS)
- [CVE-2015-6418](https://cve.now/CVE-2015-6418.md): The random-number generator on Cisco Small Business RV routers 4.x and SA500 security appliances 2.2.07 does not have sufficient entropy, wh (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-12-13
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.