# CVEs published 2015-12-23

13 CVEs were published on December 23, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-7924](https://cve.now/CVE-2015-7924.md): eWON devices with firmware before 10.1s0 do not trigger the discarding of browser session data in response to a log-off action, which makes (no CVSS)
- [CVE-2015-7925](https://cve.now/CVE-2015-7925.md): Cross-site request forgery (CSRF) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to hijack the authentic (no CVSS)
- [CVE-2015-7926](https://cve.now/CVE-2015-7926.md): eWON devices with firmware before 10.1s0 omit RBAC for I/O server information and status requests, which allows remote attackers to obtain s (no CVSS)
- [CVE-2015-7927](https://cve.now/CVE-2015-7927.md): Cross-site scripting (XSS) vulnerability on eWON devices with firmware through 10.1s0 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2015-7928](https://cve.now/CVE-2015-7928.md): eWON devices with firmware before 10.1s0 do not have an off autocomplete attribute for a password field, which makes it easier for remote at (no CVSS)
- [CVE-2015-7929](https://cve.now/CVE-2015-7929.md): eWON devices with firmware through 10.1s0 support unspecified GET requests, which might allow remote attackers to obtain sensitive informati (no CVSS)
- [CVE-2015-6431](https://cve.now/CVE-2015-6431.md): Cisco IOS XE 16.1.1 allows remote attackers to cause a denial of service (device reload) via a packet with the 00-00-00-00-00-00 source MAC (no CVSS)
- [CVE-2015-6471](https://cve.now/CVE-2015-6471.md): Eaton Cooper Power Systems ProView 4.x and 5.x before 5.1 on Form 6 controls and Idea and IdeaPLUS relays does not properly initialize paddi (no CVSS)
- [CVE-2015-6851](https://cve.now/CVE-2015-6851.md): EMC RSA SecurID Web Agent before 8.0 allows physically proximate attackers to bypass the privacy-screen protection mechanism by leveraging a (no CVSS)
- [CVE-2015-7911](https://cve.now/CVE-2015-7911.md): Saia Burgess PCD1.M0xx0, PCD1.M2xx0, PCD2.M5xx0, PCD3.Mxx60, PCD3.Mxxx0, PCD7.D4xxD, PCD7.D4xxV, PCD7.D4xxWTPF, and PCD7.D4xxxT5F devices be (no CVSS)
- [CVE-2015-7917](https://cve.now/CVE-2015-7917.md): Untrusted search path vulnerability in Open Automation OPC Systems.NET 8.00.0023 and earlier allows local users to gain privileges via a Tro (no CVSS)
- [CVE-2015-7935](https://cve.now/CVE-2015-7935.md): Motorola Solutions MOSCAD IP Gateway allows remote attackers to read arbitrary files via unspecified vectors. (no CVSS)
- [CVE-2015-7936](https://cve.now/CVE-2015-7936.md): Cross-site request forgery (CSRF) vulnerability in Motorola Solutions MOSCAD IP Gateway allows remote attackers to hijack the authentication (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-12-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.