# CVEs published 2015-08-14 55 CVEs were published on August 14, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2014-3576](https://cve.now/CVE-2014-3576.md): The processControlCommand function in broker/TransportConnection.java in Apache ActiveMQ before 5.11.0 allows remote attackers to cause a de (no CVSS, org.apache.activemq:activemq-client) - [CVE-2014-8155](https://cve.now/CVE-2014-8155.md): GnuTLS before 2.9.10 does not verify the activation and expiration dates of CA certificates, which allows man-in-the-middle attackers to spo (no CVSS) - [CVE-2015-1816](https://cve.now/CVE-2015-1816.md): Forman before 1.7.4 does not verify SSL certificates for LDAP connections, which allows man-in-the-middle attackers to spoof LDAP servers vi (no CVSS) - [CVE-2015-1819](https://cve.now/CVE-2015-1819.md): The xmlreader in libxml allows remote attackers to cause a denial of service (memory consumption) via crafted XML data, related to an XML En (no CVSS, nokogiri) - [CVE-2015-1844](https://cve.now/CVE-2015-1844.md): Foreman before 1.7.5 allows remote authenticated users to bypass organization and location restrictions by connecting through the REST API. (no CVSS) - [CVE-2015-3155](https://cve.now/CVE-2015-3155.md): Foreman before 1.8.1 does not set the secure flag for the \_session\_id cookie in an https session, which makes it easier for remote attackers (no CVSS) - [CVE-2015-3235](https://cve.now/CVE-2015-3235.md): Foreman before 1.9.0 allows remote authenticated users with the edit\_users permission to edit administrator users and change their passwords (no CVSS) - [CVE-2015-3289](https://cve.now/CVE-2015-3289.md): OpenStack Glance before 2015.1.1 (kilo) allows remote authenticated users to cause a denial of service (disk consumption) by repeatedly usin (no CVSS) - [CVE-2015-5475](https://cve.now/CVE-2015-5475.md): Multiple cross-site scripting (XSS) vulnerabilities in Request Tracker (RT) 4.x before 4.2.12 allow remote attackers to inject arbitrary web (no CVSS) - [CVE-2015-5696](https://cve.now/CVE-2015-5696.md): Dell Netvault Backup before 10.0.5 allows remote attackers to cause a denial of service (crash) via a crafted request. (no CVSS) - [CVE-2015-2441](https://cve.now/CVE-2015-2441.md): Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS) - [CVE-2015-2442](https://cve.now/CVE-2015-2442.md): Microsoft Internet Explorer 8 through 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corr (no CVSS) - [CVE-2015-2443](https://cve.now/CVE-2015-2443.md): Microsoft Internet Explorer 10 and 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-2444](https://cve.now/CVE-2015-2444.md): Microsoft Internet Explorer 8 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-2445](https://cve.now/CVE-2015-2445.md): Microsoft Internet Explorer 10 allows remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka "ASLR Bypass." (no CVSS) - [CVE-2015-2446](https://cve.now/CVE-2015-2446.md): Microsoft Internet Explorer 11 and Edge allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) vi (no CVSS) - [CVE-2015-2447](https://cve.now/CVE-2015-2447.md): Microsoft Internet Explorer 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a craf (no CVSS) - [CVE-2015-2448](https://cve.now/CVE-2015-2448.md): Microsoft Internet Explorer 9 and 10 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via (no CVSS) - [CVE-2015-2449](https://cve.now/CVE-2015-2449.md): Microsoft Internet Explorer 7 through 11 and Edge allow remote attackers to bypass the ASLR protection mechanism via a crafted web site, aka (no CVSS) - [CVE-2015-2450](https://cve.now/CVE-2015-2450.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-2451](https://cve.now/CVE-2015-2451.md): Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-2452](https://cve.now/CVE-2015-2452.md): Microsoft Internet Explorer 7 through 11 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) (no CVSS) - [CVE-2015-5125](https://cve.now/CVE-2015-5125.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5127](https://cve.now/CVE-2015-5127.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5129](https://cve.now/CVE-2015-5129.md): Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18 (no CVSS) - [CVE-2015-5130](https://cve.now/CVE-2015-5130.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5131](https://cve.now/CVE-2015-5131.md): Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A (no CVSS) - [CVE-2015-5132](https://cve.now/CVE-2015-5132.md): Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A (no CVSS) - [CVE-2015-5133](https://cve.now/CVE-2015-5133.md): Buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, A (no CVSS) - [CVE-2015-5134](https://cve.now/CVE-2015-5134.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5539](https://cve.now/CVE-2015-5539.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5540](https://cve.now/CVE-2015-5540.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5541](https://cve.now/CVE-2015-5541.md): Heap-based buffer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18 (no CVSS) - [CVE-2015-5544](https://cve.now/CVE-2015-5544.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5545](https://cve.now/CVE-2015-5545.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5546](https://cve.now/CVE-2015-5546.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5547](https://cve.now/CVE-2015-5547.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5548](https://cve.now/CVE-2015-5548.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5549](https://cve.now/CVE-2015-5549.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5550](https://cve.now/CVE-2015-5550.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5551](https://cve.now/CVE-2015-5551.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5552](https://cve.now/CVE-2015-5552.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5553](https://cve.now/CVE-2015-5553.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5554](https://cve.now/CVE-2015-5554.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5555](https://cve.now/CVE-2015-5555.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5556](https://cve.now/CVE-2015-5556.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5557](https://cve.now/CVE-2015-5557.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5558](https://cve.now/CVE-2015-5558.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5559](https://cve.now/CVE-2015-5559.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5560](https://cve.now/CVE-2015-5560.md): Integer overflow in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, (no CVSS) - [CVE-2015-5561](https://cve.now/CVE-2015-5561.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5562](https://cve.now/CVE-2015-5562.md): Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before 18.0.0.199, Adobe AIR SDK before (no CVSS) - [CVE-2015-5563](https://cve.now/CVE-2015-5563.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5564](https://cve.now/CVE-2015-5564.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) - [CVE-2015-5565](https://cve.now/CVE-2015-5565.md): Use-after-free vulnerability in Adobe Flash Player before 18.0.0.232 on Windows and OS X and before 11.2.202.508 on Linux, Adobe AIR before (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-08-14 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.