# CVEs published 2015-12-14

11 CVEs were published on December 14, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6788](https://cve.now/CVE-2015-6788.md): The ObjectBackedNativeHandler class in extensions/renderer/object\_backed\_native\_handler.cc in the extensions subsystem in Google Chrome befo (no CVSS)
- [CVE-2015-6789](https://cve.now/CVE-2015-6789.md): Race condition in the MutationObserver implementation in Blink, as used in Google Chrome before 47.0.2526.80, allows remote attackers to cau (no CVSS)
- [CVE-2015-6790](https://cve.now/CVE-2015-6790.md): The WebPageSerializerImpl::openTagToString function in WebKit/Source/web/WebPageSerializerImpl.cpp in the page serializer in Google Chrome b (no CVSS)
- [CVE-2015-6791](https://cve.now/CVE-2015-6791.md): Multiple unspecified vulnerabilities in Google Chrome before 47.0.2526.80 allow attackers to cause a denial of service or possibly have othe (no CVSS)
- [CVE-2015-8548](https://cve.now/CVE-2015-8548.md): Multiple unspecified vulnerabilities in Google V8 before 4.7.80.23, as used in Google Chrome before 47.0.2526.80, allow attackers to cause a (no CVSS)
- [CVE-2015-6378](https://cve.now/CVE-2015-6378.md): Cross-site request forgery (CSRF) vulnerability on Cisco DPQ3925 devices with EDVA 5.5.2 allows remote attackers to hijack the authenticatio (no CVSS)
- [CVE-2015-6401](https://cve.now/CVE-2015-6401.md): Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allow remote attackers to bypass an intended authentication requirement and execut (no CVSS)
- [CVE-2015-6402](https://cve.now/CVE-2015-6402.md): Cross-site scripting (XSS) vulnerability in the management interface on Cisco EPC3928 devices with EDVA 5.5.10, 5.5.11, and 5.7.1 allows rem (no CVSS)
- [CVE-2015-6410](https://cve.now/CVE-2015-6410.md): The Mobile and Remote Access (MRA) services implementation in Cisco Unified Communications Manager mishandles edge-device identity validatio (no CVSS)
- [CVE-2015-6416](https://cve.now/CVE-2015-6416.md): Cross-site scripting (XSS) vulnerability in Cisco Unified Email Interaction Manager and Unified Web Interaction Manager 11.0(1) allows remot (no CVSS)
- [CVE-2015-6422](https://cve.now/CVE-2015-6422.md): The self-service application in Cisco Unified Communications Domain Manager (CUCDM) 10.6(1) allows remote authenticated users to cause a den (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-12-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.