# CVEs published 2015-07-23

23 CVEs were published on July 23, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-4285](https://cve.now/CVE-2015-4285.md): The Local Packet Transport Services (LPTS) implementation in Cisco IOS XR 5.1.2, 5.1.3, 5.2.1, and 5.2.2 on ASR9k devices makes incorrect de (no CVSS)
- [CVE-2015-4527](https://cve.now/CVE-2015-4527.md): Directory traversal vulnerability in EMC Avamar Server 7.x before 7.1.2 and Avamar Virtual Addition (AVE) 7.x before 7.1.2 allows remote att (no CVSS)
- [CVE-2015-1270](https://cve.now/CVE-2015-1270.md): The ucnv\_io\_getConverterName function in common/ucnv\_io.cpp in International Components for Unicode (ICU), as used in Google Chrome before 4 (no CVSS)
- [CVE-2015-1271](https://cve.now/CVE-2015-1271.md): PDFium, as used in Google Chrome before 44.0.2403.89, does not properly handle certain out-of-memory conditions, which allows remote attacke (no CVSS)
- [CVE-2015-1272](https://cve.now/CVE-2015-1272.md): Use-after-free vulnerability in the GPU process implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denia (no CVSS)
- [CVE-2015-1273](https://cve.now/CVE-2015-1273.md): Heap-based buffer overflow in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 44.0.2403.89, allows remote attacker (no CVSS)
- [CVE-2015-1274](https://cve.now/CVE-2015-1274.md): Google Chrome before 44.0.2403.89 does not ensure that the auto-open list omits all dangerous file types, which makes it easier for remote a (no CVSS)
- [CVE-2015-1275](https://cve.now/CVE-2015-1275.md): Cross-site scripting (XSS) vulnerability in org/chromium/chrome/browser/UrlUtilities.java in Google Chrome before 44.0.2403.89 on Android al (no CVSS)
- [CVE-2015-1276](https://cve.now/CVE-2015-1276.md): Use-after-free vulnerability in content/browser/indexed\_db/indexed\_db\_backing\_store.cc in the IndexedDB implementation in Google Chrome befo (no CVSS)
- [CVE-2015-1277](https://cve.now/CVE-2015-1277.md): Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a den (no CVSS)
- [CVE-2015-1278](https://cve.now/CVE-2015-1278.md): content/browser/web\_contents/web\_contents\_impl.cc in Google Chrome before 44.0.2403.89 does not ensure that a PDF document's modal dialog is (no CVSS)
- [CVE-2015-1279](https://cve.now/CVE-2015-1279.md): Integer overflow in the CJBig2\_Image::expand function in fxcodec/jbig2/JBig2\_Image.cpp in PDFium, as used in Google Chrome before 44.0.2403. (no CVSS)
- [CVE-2015-1280](https://cve.now/CVE-2015-1280.md): SkPictureShader.cpp in Skia, as used in Google Chrome before 44.0.2403.89, allows remote attackers to cause a denial of service (memory corr (no CVSS)
- [CVE-2015-1281](https://cve.now/CVE-2015-1281.md): core/loader/ImageLoader.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly determine the V8 context of a microtas (no CVSS)
- [CVE-2015-1282](https://cve.now/CVE-2015-1282.md): Multiple use-after-free vulnerabilities in fpdfsdk/src/javascript/Document.cpp in PDFium, as used in Google Chrome before 44.0.2403.89, allo (no CVSS)
- [CVE-2015-1283](https://cve.now/CVE-2015-1283.md): Multiple integer overflows in the XML\_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other prod (no CVSS)
- [CVE-2015-1284](https://cve.now/CVE-2015-1284.md): The LocalFrame::isURLAllowed function in core/frame/LocalFrame.cpp in Blink, as used in Google Chrome before 44.0.2403.89, does not properly (no CVSS)
- [CVE-2015-1285](https://cve.now/CVE-2015-1285.md): The XSSAuditor::canonicalize function in core/html/parser/XSSAuditor.cpp in the XSS auditor in Blink, as used in Google Chrome before 44.0.2 (no CVSS)
- [CVE-2015-1286](https://cve.now/CVE-2015-1286.md): Cross-site scripting (XSS) vulnerability in the V8ContextNativeHandler::GetModuleSystem function in extensions/renderer/v8\_context\_native\_ha (no CVSS)
- [CVE-2015-1287](https://cve.now/CVE-2015-1287.md): Blink, as used in Google Chrome before 44.0.2403.89, enables a quirks-mode exception that limits the cases in which a Cascading Style Sheets (no CVSS)
- [CVE-2015-1288](https://cve.now/CVE-2015-1288.md): The Spellcheck API implementation in Google Chrome before 44.0.2403.89 does not use an HTTPS session for downloading a Hunspell dictionary, (no CVSS)
- [CVE-2015-1289](https://cve.now/CVE-2015-1289.md): Multiple unspecified vulnerabilities in Google Chrome before 44.0.2403.89 allow attackers to cause a denial of service or possibly have othe (no CVSS)
- [CVE-2015-5605](https://cve.now/CVE-2015-5605.md): The regular-expression implementation in Google V8, as used in Google Chrome before 44.0.2403.89, mishandles interrupts, which allows remote (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-07-23
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.