# CVEs published 2016-02-18

14 CVEs were published on February 18, 2016: 0 critical, 0 high. Days are UTC.

- [CVE-2015-5970](https://cve.now/CVE-2015-5970.md): The ChangePassword RPC method in Novell ZENworks Configuration Management (ZCM) 11.3 and 11.4 allows remote attackers to conduct XPath injec (no CVSS)
- [CVE-2015-8148](https://cve.now/CVE-2015-8148.md): The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to obtain sensitive information a (no CVSS)
- [CVE-2015-8149](https://cve.now/CVE-2015-8149.md): The LDAP service in Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote attackers to cause a denial of service (hea (no CVSS)
- [CVE-2015-8150](https://cve.now/CVE-2015-8150.md): Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows local users to obtain root access by modifying a batch file. (no CVSS)
- [CVE-2015-8151](https://cve.now/CVE-2015-8151.md): Symantec Encryption Management Server (SEMS) 3.3.2 before MP12 allows remote authenticated users to execute arbitrary OS commands by leverag (no CVSS)
- [CVE-2016-0068](https://cve.now/CVE-2016-0068.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Exp (no CVSS)
- [CVE-2016-0069](https://cve.now/CVE-2016-0069.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Internet Exp (no CVSS)
- [CVE-2016-1987](https://cve.now/CVE-2016-1987.md): HPE IPFilter A.11.31.18.21 on HP-UX, when a certain keep-state configuration is enabled, allows remote attackers to cause a denial of servic (no CVSS)
- [CVE-2016-2509](https://cve.now/CVE-2016-2509.md): The password-sync feature on Belden Hirschmann Classic Platform switches L2B before 05.3.07 and L2E, L2P, L3E, and L3P before 09.0.06 sets a (no CVSS)
- [CVE-2015-7547](https://cve.now/CVE-2015-7547.md): Multiple stack-based buffer overflows in the (1) send\_dg and (2) send\_vc functions in the libresolv library in the GNU C Library (aka glibc (no CVSS)
- [CVE-2016-0794](https://cve.now/CVE-2016-0794.md): The lwp filter in LibreOffice before 5.0.4 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspeci (no CVSS)
- [CVE-2016-0795](https://cve.now/CVE-2016-0795.md): LibreOffice before 5.0.5 allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact (no CVSS)
- [CVE-2015-8286](https://cve.now/CVE-2015-8286.md): Zhuhai RaySharp firmware has a hardcoded root password, which makes it easier for remote attackers to obtain access via a session on TCP por (no CVSS)
- [CVE-2015-8287](https://cve.now/CVE-2015-8287.md): Swann SRNVW-470LCD devices with firmware through 0114 and SWNVW-470CAM devices with firmware through 1022 allow remote attackers to watch li (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2016-02-18
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.