# CVEs published 2015-08-05

3 CVEs were published on August 5, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-4167](https://cve.now/CVE-2015-4167.md): The udf\_read\_inode function in fs/udf/inode.c in the Linux kernel before 3.19.1 does not validate certain length values, which allows local (no CVSS)
- [CVE-2015-3439](https://cve.now/CVE-2015-3439.md): Cross-site scripting (XSS) vulnerability in the Ephox (formerly Moxiecode) plupload.flash.swf shim 2.1.2 in Plupload, as used in WordPress 3 (no CVSS)
- [CVE-2015-3438](https://cve.now/CVE-2015-3438.md): Multiple cross-site scripting (XSS) vulnerabilities in WordPress before 4.1.2, when MySQL is used without strict mode, allow remote attacker (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.