# CVEs published 2015-12-18

5 CVEs were published on December 18, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6424](https://cve.now/CVE-2015-6424.md): The boot manager in Cisco Application Policy Infrastructure Controller (APIC) 1.1(0.920a) allows local users to bypass intended access restr (no CVSS)
- [CVE-2015-6426](https://cve.now/CVE-2015-6426.md): Cisco Prime Network Services Controller 3.0 allows local users to bypass intended access restrictions and execute arbitrary commands via add (no CVSS)
- [CVE-2015-6427](https://cve.now/CVE-2015-6427.md): Cisco FireSIGHT Management Center allows remote attackers to bypass the HTTP attack detection feature and avoid triggering Snort IDS rules v (no CVSS)
- [CVE-2015-6428](https://cve.now/CVE-2015-6428.md): Cisco DPQ3925 devices with EDVA r1 Base allow remote attackers to obtain sensitive information via a crafted HTTP request, aka Bug ID CSCuv0 (no CVSS)
- [CVE-2015-6556](https://cve.now/CVE-2015-6556.md): EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE) before 11.1.0 allows remote authenticated (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-12-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.