# CVEs published 2016-02-15 30 CVEs were published on February 15, 2016: 0 critical, 0 high. Days are UTC. - [CVE-2016-0231](https://cve.now/CVE-2016-0231.md): IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remot (no CVSS) - [CVE-2016-0232](https://cve.now/CVE-2016-0232.md): IBM Financial Transaction Manager (FTM) for ACH Services, Check Services and Corporate Payment Services (CPS) 3.0.0 before FP12 allows remot (no CVSS) - [CVE-2016-1321](https://cve.now/CVE-2016-1321.md): Cisco Universal Small Cell devices with firmware R2.12 through R3.5 contain an image-decryption key in flash memory, which allows remote att (no CVSS) - [CVE-2016-1330](https://cve.now/CVE-2016-1330.md): Cisco IOS 15.2(4)E on Industrial Ethernet 2000 devices allows remote attackers to cause a denial of service (device reload) via crafted Cisc (no CVSS) - [CVE-2016-1331](https://cve.now/CVE-2016-1331.md): Multiple cross-site scripting (XSS) vulnerabilities in Cisco Emergency Responder 11.5(0.99833.5) allow remote attackers to inject arbitrary (no CVSS) - [CVE-2016-0742](https://cve.now/CVE-2016-0742.md): The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference (no CVSS) - [CVE-2016-0746](https://cve.now/CVE-2016-0746.md): Use-after-free vulnerability in the resolver in nginx 0.6.18 through 1.8.0 and 1.9.x before 1.9.10 allows remote attackers to cause a denial (no CVSS) - [CVE-2016-0747](https://cve.now/CVE-2016-0747.md): The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 does not properly limit CNAME resolution, which allows remote attackers to cause (no CVSS) - [CVE-2015-2005](https://cve.now/CVE-2015-2005.md): IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.5 Patch 6 does not properly expire sessions, which allows remote (no CVSS) - [CVE-2015-2008](https://cve.now/CVE-2015-2008.md): IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 and 7.2.x before 7.2.6 includes SSH private keys during backup operations, which allo (no CVSS) - [CVE-2015-4956](https://cve.now/CVE-2015-4956.md): The Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated users to execute unspecified OS commands vi (no CVSS) - [CVE-2015-4957](https://cve.now/CVE-2015-4957.md): Cross-site scripting (XSS) vulnerability in the Web UI in IBM Security QRadar SIEM 7.1.x before 7.1 MR2 Patch 12 allows remote authenticated (no CVSS) - [CVE-2015-4991](https://cve.now/CVE-2015-4991.md): IBM SPSS Modeler 14.2 through FP3 IF027, 15 through FP3 IF015, 16 through FP2 IF012, 17 through FP1 IF018, and 17.1 through IF008 includes u (no CVSS) - [CVE-2015-5010](https://cve.now/CVE-2015-5010.md): IBM Security Access Manager for Web 7.0 before 7.0.0 IF21, 8.0 before 8.0.1.3 IF4, and 9.0 before 9.0.0.1 IF1 does not have a lockout mechan (no CVSS) - [CVE-2015-5012](https://cve.now/CVE-2015-5012.md): The SSH implementation on IBM Security Access Manager for Web appliances 7.0 before 7.0.0 FP19, 8.0 before 8.0.1.3 IF3, and 9.0 before 9.0.0 (no CVSS) - [CVE-2015-5042](https://cve.now/CVE-2015-5042.md): IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10.0.1.5 iFix5, 10.0.2.x before 10.0.2.7 iFix4, (no CVSS) - [CVE-2015-5050](https://cve.now/CVE-2015-5050.md): Cross-site request forgery (CSRF) vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x bef (no CVSS) - [CVE-2015-7398](https://cve.now/CVE-2015-7398.md): Cross-site scripting (XSS) vulnerability in IBM Emptoris Contract Management 9.5.0.x before 9.5.0.6 iFix15, 10.0.0.x and 10.0.1.x before 10. (no CVSS) - [CVE-2015-7408](https://cve.now/CVE-2015-7408.md): The server in IBM Spectrum Protect (aka Tivoli Storage Manager) 5.5 and 6.x before 6.3.5.1 and 7.x before 7.1.4 does not properly restrict u (no CVSS) - [CVE-2015-7444](https://cve.now/CVE-2015-7444.md): The Update Installer in IBM WebSphere Commerce Enterprise 7.0.0.8 and 7.0.0.9 does not properly replicate the search index, which allows att (no CVSS) - [CVE-2015-7472](https://cve.now/CVE-2015-7472.md): IBM WebSphere Portal 6.1.0 through 6.1.0.6 CF27, 6.1.5 through 6.1.5.3 CF27, 7.0.0 through 7.0.0.2 CF29, 8.0.0 before 8.0.0.1 CF20, and 8.5. (no CVSS) - [CVE-2015-7492](https://cve.now/CVE-2015-7492.md): Cross-site scripting (XSS) vulnerability in Reference Data Management (RDM) in IBM InfoSphere Master Data Management 10.1, 11.0 before FP5, (no CVSS) - [CVE-2015-8531](https://cve.now/CVE-2015-8531.md): Cross-site scripting (XSS) vulnerability in IBM Security Access Manager for Web 8.0 before 8.0.1.3 IF4 and 9.0 before 9.0.0.1 IF1 allows rem (no CVSS) - [CVE-2015-8795](https://cve.now/CVE-2015-8795.md): Multiple cross-site scripting (XSS) vulnerabilities in the Admin UI in Apache Solr before 5.1 allow remote attackers to inject arbitrary web (no CVSS, org.apache.solr:solr-core) - [CVE-2015-8796](https://cve.now/CVE-2015-8796.md): Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/schema-browser.js in the Admin UI in Apache Solr before 5.3 allows remote (no CVSS, org.apache.solr:solr) - [CVE-2015-8797](https://cve.now/CVE-2015-8797.md): Cross-site scripting (XSS) vulnerability in webapp/web/js/scripts/plugins.js in the stats page in the Admin UI in Apache Solr before 5.3.1 a (no CVSS, org.apache.solr:solr-core) - [CVE-2016-2231](https://cve.now/CVE-2016-2231.md): The Windows-based Host Interface Program (WHIP) service on Huawei SmartAX MT882 devices V200R002B022 Arg relies on the client to send a leng (no CVSS) - [CVE-2016-2314](https://cve.now/CVE-2016-2314.md): GlobespanVirata ftpd 1.0, as used on Huawei SmartAX MT882 devices V200R002B022 Arg, allows remote authenticated users to cause a denial of s (no CVSS) - [CVE-2015-3197](https://cve.now/CVE-2015-3197.md): ssl/s2\_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man (no CVSS) - [CVE-2016-0701](https://cve.now/CVE-2016-0701.md): The DH\_check\_pub\_key function in crypto/dh/dh\_check.c in OpenSSL 1.0.2 before 1.0.2f does not ensure that prime numbers are appropriate for (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2016-02-15 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.