# CVEs published 2015-12-29 9 CVEs were published on December 29, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-3223](https://cve.now/CVE-2015-3223.md): The ldb\_wildcard\_compare function in ldb\_match.c in ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x befor (no CVSS) - [CVE-2015-5252](https://cve.now/CVE-2015-5252.md): vfs.c in smbd in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, when share names with certain substring relati (no CVSS) - [CVE-2015-5296](https://cve.now/CVE-2015-5296.md): Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3 supports connections that are encrypted but unsigned, which allo (no CVSS) - [CVE-2015-5299](https://cve.now/CVE-2015-5299.md): The shadow\_copy2\_get\_shadow\_copy\_data function in modules/vfs\_shadow\_copy2.c in Samba 3.x and 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3 (no CVSS) - [CVE-2015-5330](https://cve.now/CVE-2015-5330.md): ldb before 1.1.24, as used in the AD LDAP server in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4.3.x before 4.3.3, mishandles string l (no CVSS) - [CVE-2015-7540](https://cve.now/CVE-2015-7540.md): The LDAP server in the AD domain controller in Samba 4.x before 4.1.22 does not check return values to ensure successful ASN.1 memory alloca (no CVSS) - [CVE-2015-7791](https://cve.now/CVE-2015-7791.md): Multiple SQL injection vulnerabilities in admin.php in the Collne Welcart plugin before 1.5.3 for WordPress allow remote authenticated users (no CVSS) - [CVE-2015-8467](https://cve.now/CVE-2015-8467.md): The samldb\_check\_user\_account\_control\_acl function in dsdb/samdb/ldb\_modules/samldb.c in Samba 4.x before 4.1.22, 4.2.x before 4.2.7, and 4. (no CVSS) - [CVE-2015-7786](https://cve.now/CVE-2015-7786.md): Cross-site scripting (XSS) vulnerability in the NTT DATA Smart Sourcing JavaScript module 2003-11-26 through 2013-07-09 for Web Analytics Se (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-12-29 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.