CVEs published August 25, 2015
8 CVEs were published on August 25, 2015: 0 critical, 0 high.
- Published
- 8
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 8
- Now in CISA KEV
- 0
- Fix available
- 2
Most affected products
- rubygems-update
- 1
- zendframework/zendframework · zendframework/zendframewor… +1
- 1
Medium, low and unrated 8
- CVE-2012-2150xfs_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information b
- CVE-2015-4020RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API reqrubygems-update
- CVE-2015-5161The Zend_Xml_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when runninzendframework/zendframework · zendframework/zendframewor… +1
- CVE-2015-5949VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a craft
- CVE-2015-3269Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services (LCDS) 3.0.x before 3.0.0.354170, 4.5 before 4.5.1.
- CVE-2015-5785Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati
- CVE-2015-5786Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati
- CVE-2015-6262Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote attackers to hijack the