Skip to content

Browse Docs Sources Guide

Search/Get API key

Every CVE
Archive
2015
August

CVEs published in August 2015

618 vulnerabilities, 138 critical, 4 exploited.

Known exploitedIn KEVPublic exploitFix available

xen, fedoraproject fedora +1 moreUse-after-free vulnerability in QEMU in Xen 4.5.x and earlier does not completely unplug emulated...CVE-2015-5166Fix available7.2 HighAugust 11, 2015
xen, arista eos, debian linux +20 more +22 moreThe C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4...CVE-2015-5165Fix availableEPSS 13.3%9.3 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the stagefright::ESDS::parseESDescriptor function in libstagefright...CVE-2015-4493Fix available9.3 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreUse-after-free vulnerability in the XMLHttpRequest::Open implementation in Mozilla Firefox before...CVE-2015-4492Fix available7.5 HighAugust 11, 2015
gnome gdk-pixbuf, canonical ubuntu linux, fedoraproject fedora +2 more +4 moreInteger overflow in the make_filter_table function in pixops/pixops.c in gdk-pixbuf before 2.31.5...CVE-2015-4491Fix available6.8 MediumAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in Mozilla Firefox before 40.0...CVE-2015-4490Fix available4.3 MediumAugust 11, 2015
mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38.2, and Firefox...CVE-2015-4489Fix available7.5 HighAugust 11, 2015
mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreUse-after-free vulnerability in the StyleAnimationValue class in Mozilla Firefox before 40.0,...CVE-2015-4488Fix available7.5 HighAugust 11, 2015
mozilla firefox, firefox os, canonical ubuntu linux +2 more +4 moreThe nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, Firefox ESR 38.x before 38...CVE-2015-4487Fix available7.5 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe decrease_ref_count function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4486Fix available10.0 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreHeap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox...CVE-2015-4485Fix available10.0 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +1 more +3 moreThe js::jit::AssemblerX86Shared::lock_addl function in the JavaScript implementation in Mozilla...CVE-2015-4484Fix available5.0 MediumAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreInteger overflow in the stagefright::SampleTable::isValid function in libstagefright in Mozilla...CVE-2015-4480Fix available9.3 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple integer overflows in libstagefright in Mozilla Firefox before 40.0 and Firefox ESR 38.x...CVE-2015-4479Fix available10.0 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not impose certain ECMAScript 6...CVE-2015-4478Fix available5.0 MediumAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreUse-after-free vulnerability in the MediaStream playback feature in Mozilla Firefox before 40.0...CVE-2015-4477Fix available10.0 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreThe mozilla::AudioSink function in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2...CVE-2015-4475Fix available7.5 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, opensuse +2 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 allow...CVE-2015-4474Fix available10.0 HighAugust 11, 2015
mozilla firefox, canonical ubuntu linux, debian linux +1 more +3 moreMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 40.0 and...CVE-2015-4473Fix available10.0 HighAugust 11, 2015
wordpressCross-site scripting (XSS) vulnerability in the legacy theme preview implementation in wp...CVE-2015-5734Fix available4.3 MediumAugust 10, 2015
wordpressCross-site scripting (XSS) vulnerability in the refreshAdvancedAccessibilityOfItem function in wp...CVE-2015-5733Fix available4.3 MediumAugust 10, 2015
wordpressCross-site scripting (XSS) vulnerability in the form function in the WP_Nav_Menu_Widget class in...CVE-2015-5732Fix available4.3 MediumAugust 10, 2015
wordpressCross-site request forgery (CSRF) vulnerability in wp-admin/post.php in WordPress before 4.2.4...CVE-2015-5731Fix available6.8 MediumAugust 10, 2015
wordpressThe sanitize_widget_instance function in wp-includes/class-wp-customize-widgets.php in WordPress...CVE-2015-5730Fix available5.0 MediumAugust 10, 2015
wordpressSQL injection vulnerability in the wp_untrash_post_comments function in wp-includes/post.php in...CVE-2015-2213Fix available7.5 HighAugust 10, 2015
opensaml2 Debianopensaml2 - security updateDLA-290-2Fix availableNo scoreAugust 10, 2015
gnu glibc, canonical ubuntu linux +1 moreres_query in libresolv in glibc before 2.25 allows remote attackers to cause a denial of service ...CVE-2015-5180Fix available7.5 HighAugust 10, 2015
yodobashiThe Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute...CVE-2015-29806.8 MediumAugust 8, 2015
sierrawireless aleosSierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts,...CVE-2015-289710.0 HighAugust 8, 2015
opensaml2 Debianopensaml2 - security updateDSA-3321-2Fix availableNo scoreAugust 8, 2015
mozilla firefox osInteger signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in...CVE-2015-59625.0 MediumAugust 8, 2015
mozilla firefox osThe COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content...CVE-2015-59613.3 LowAugust 8, 2015
mozilla firefox osMozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code...CVE-2015-59601.9 LowAugust 8, 2015
mozilla firefox osMozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi...CVE-2015-44944.3 MediumAugust 8, 2015
mozilla firefox osMultiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox...CVE-2015-27454.3 MediumAugust 8, 2015
mozilla firefox osCross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2...CVE-2015-27444.3 MediumAugust 8, 2015
timedoctorThe autoupdate implementation in TimeDoctor Pro 1.4.72.3 on Windows relies on unsigned installer...CVE-2015-46749.3 HighAugust 7, 2015
linux kernelThe get_bitmap_file function in drivers/md/md.c in the Linux kernel before 4.1.6 does not...CVE-2015-5697Fix available2.1 LowAugust 7, 2015
openslp, debian linux +1 moreDouble free vulnerability in the SLPDKnownDAAdd function in slpd/slpd_knownda.c in OpenSLP 1.2.1...CVE-2015-5177Fix available7.5 HighAugust 7, 2015
mozilla firefox, firefox os, canonical ubuntu linux +12 more +14 moreThe PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS...CVE-2015-4495In KEVPublic exploitFix availableEPSS 68.6%8.8 HighAugust 7, 2015
apache activemq, oracle business intelligence publisher, fusion middleware +2 moreImproper Neutralization of Special Elements used in an OS Command in Apache ActiveMQCVE-2014-3576Public exploitFix availableEPSS 12.8%7.5 HighAugust 7, 2015
qemu, arista eos, fedoraproject fedora +2 moreBuffer overflow in the send_control_msg function in hw/char/virtio-serial-bus.c in QEMU before 2...CVE-2015-5745Fix available6.5 MediumAugust 6, 2015
linux kernelThe virtnet_probe function in drivers/net/virtio_net.c in the Linux kernel before 4.2 attempts to...CVE-2015-5156Fix available6.1 MediumAugust 6, 2015
apache subversion, apple xcode +1 moreThe svn_repos_trace_node_locations function in Apache Subversion before 1.7.21 and 1.8.x before 1...CVE-2015-3187Fix available4.0 MediumAugust 5, 2015
apache subversion, apple xcode +1 moremod_authz_svn in Apache Subversion 1.7.x before 1.7.21 and 1.8.x before 1.8.14, when using Apache...CVE-2015-3184Fix available5.0 MediumAugust 5, 2015
gehealthcare centricity clinical archive audit trail repositoryGE Healthcare Centricity Clinical Archive Audit Trail Repository has a default password of...CVE-2014-973610.0 HighAugust 4, 2015
gehealthcare precision thunis-800\+GE Healthcare Precision THUNIS-800+ has a default password of (1) 1973 for the factory default...CVE-2014-723310.0 HighAugust 4, 2015
gehealthcare discovery xr656, discovery xr656 g2 +1 moreGE Healthcare Discovery XR656 and XR656 G2 has a password of (1) 2getin for the insite user, (2)...CVE-2014-723210.0 HighAugust 4, 2015
gehealthcare centricity pacs workstationGE Healthcare Centricity PACS Workstation 4.0 and 4.0.1 has a password of (1) CANal1 for the...CVE-2013-744210.0 HighAugust 4, 2015
gehealthcare centricity dmsThe Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for...CVE-2013-740510.0 HighAugust 4, 2015
Show moreLoading…

Docs Sources Guide Browse Privacy Terms

esc

PagesAll vulnerabilities Browse Docs Sources Guide Get API key

MoveEnter Open