# CVEs published 2015-05-26 16 CVEs were published on May 26, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-0986](https://cve.now/CVE-2015-0986.md): Multiple stack-based buffer overflows in Moxa VPort ActiveX SDK Plus before 2.8 allow remote attackers to insert assembly-code lines via vec (no CVSS) - [CVE-2015-3808](https://cve.now/CVE-2015-3808.md): The dissect\_lbmr\_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a ze (no CVSS) - [CVE-2015-3809](https://cve.now/CVE-2015-3809.md): The dissect\_lbmr\_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly tr (no CVSS) - [CVE-2015-3810](https://cve.now/CVE-2015-3810.md): epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows rem (no CVSS) - [CVE-2015-3811](https://cve.now/CVE-2015-3811.md): epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previousl (no CVSS) - [CVE-2015-3812](https://cve.now/CVE-2015-3812.md): Multiple memory leaks in the x11\_init\_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10 (no CVSS) - [CVE-2015-3813](https://cve.now/CVE-2015-3813.md): The fragment\_add\_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly det (no CVSS) - [CVE-2015-3814](https://cve.now/CVE-2015-3814.md): The (1) dissect\_tfs\_request and (2) dissect\_tfs\_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wir (no CVSS) - [CVE-2015-3815](https://cve.now/CVE-2015-3815.md): The detect\_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the lengt (no CVSS) - [CVE-2015-3902](https://cve.now/CVE-2015-3902.md): Multiple cross-site request forgery (CSRF) vulnerabilities in the setup process in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, (no CVSS) - [CVE-2015-3903](https://cve.now/CVE-2015-3903.md): libraries/Config.class.php in phpMyAdmin 4.0.x before 4.0.10.10, 4.2.x before 4.2.13.3, 4.3.x before 4.3.13.1, and 4.4.x before 4.4.6.1 disa (no CVSS) - [CVE-2015-3906](https://cve.now/CVE-2015-3906.md): The logcat\_dump\_text function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not properly hand (no CVSS) - [CVE-2015-4091](https://cve.now/CVE-2015-4091.md): XML external entity (XXE) vulnerability in SAP NetWeaver AS Java 7.4 allows remote attackers to send TCP requests to intranet servers or pos (no CVSS) - [CVE-2015-4092](https://cve.now/CVE-2015-4092.md): Buffer overflow in the XComms process in SAP Afaria 7.00.6620.2 SP5 allows remote attackers to cause a denial of service (crash) or possibly (no CVSS) - [CVE-2015-1008](https://cve.now/CVE-2015-1008.md): SQL injection vulnerability in Emerson AMS Device Manager before 13 allows remote authenticated users to gain privileges via malformed input (no CVSS) - [CVE-2015-1013](https://cve.now/CVE-2015-1013.md): OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL (AF) Trusted Users group lacks the Everyone account, whic (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-05-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.