# CVEs published 2015-08-08

10 CVEs were published on August 8, 2015: 0 critical, 1 high. 1 is now in CISA KEV. Days are UTC.

- [CVE-2015-1805](https://cve.now/CVE-2015-1805.md): The (1) pipe\_read and (2) pipe\_write implementations in fs/pipe.c in the Linux kernel before 3.16 do not properly consider the side effects (no CVSS)
- [CVE-2015-2897](https://cve.now/CVE-2015-2897.md): Sierra Wireless ALEOS before 4.4.2 on AirLink ES, GX, and LS devices has hardcoded root accounts, which makes it easier for remote attackers (no CVSS)
- [CVE-2015-2980](https://cve.now/CVE-2015-2980.md): The Yodobashi application 1.2.1.0 and earlier for Android allows remote attackers to execute arbitrary Java methods, and consequently obtain (no CVSS)
- [CVE-2015-2744](https://cve.now/CVE-2015-2744.md): Cross-site scripting (XSS) vulnerability in the Search app in Gaia in Mozilla Firefox OS before 2.2 allows remote attackers to inject arbitr (no CVSS)
- [CVE-2015-2745](https://cve.now/CVE-2015-2745.md): Multiple cross-site scripting (XSS) vulnerabilities in the Search app in Gaia in Mozilla Firefox OS before 2.2 allow remote attackers to inj (no CVSS)
- [CVE-2015-4494](https://cve.now/CVE-2015-4494.md): Mozilla Firefox OS before 2.2 does not require the wifi-manage privilege for reading a Wi-Fi system message, which allows attackers to obtai (no CVSS)
- [CVE-2015-4495](https://cve.now/CVE-2015-4495.md): The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass (CVSS 8.8, KEV)
- [CVE-2015-5960](https://cve.now/CVE-2015-5960.md): Mozilla Firefox OS before 2.2 allows physically proximate attackers to bypass the pass-code protection mechanism and access USB Mass Storage (no CVSS)
- [CVE-2015-5961](https://cve.now/CVE-2015-5961.md): The COPPA error page in the Accounts setup dialog in Mozilla Firefox OS before 2.2 embeds content from an external web server URL into the S (no CVSS)
- [CVE-2015-5962](https://cve.now/CVE-2015-5962.md): Integer signedness error in the SharedBufferManagerParent::RecvAllocateGrallocBuffer function in the buffer-management implementation in the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.