# CVEs published 2015-08-25

8 CVEs were published on August 25, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2012-2150](https://cve.now/CVE-2012-2150.md): xfs\_metadump in xfsprogs before 3.2.4 does not properly obfuscate file data, which allows remote attackers to obtain sensitive information b (no CVSS)
- [CVE-2015-4020](https://cve.now/CVE-2015-4020.md): RubyGems 2.0.x before 2.0.17, 2.2.x before 2.2.5, and 2.4.x before 2.4.8 does not validate the hostname when fetching gems or making API req (no CVSS, rubygems-update)
- [CVE-2015-5161](https://cve.now/CVE-2015-5161.md): The Zend\_Xml\_Security::scan in ZendXml before 1.0.1 and Zend Framework before 1.12.14, 2.x before 2.4.6, and 2.5.x before 2.5.2, when runnin (no CVSS, zendframework/zendframework · zendframework/zendframewor… +1)
- [CVE-2015-5949](https://cve.now/CVE-2015-5949.md): VideoLAN VLC media player 2.2.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a craft (no CVSS)
- [CVE-2015-3269](https://cve.now/CVE-2015-3269.md): Apache Flex BlazeDS, as used in flex-messaging-core.jar in Adobe LiveCycle Data Services (LCDS) 3.0.x before 3.0.0.354170, 4.5 before 4.5.1. (no CVSS)
- [CVE-2015-5785](https://cve.now/CVE-2015-5785.md): Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-5786](https://cve.now/CVE-2015-5786.md): Apple QuickTime before 7.7.8 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and applicati (no CVSS)
- [CVE-2015-6262](https://cve.now/CVE-2015-6262.md): Cross-site request forgery (CSRF) vulnerability in Cisco Prime Infrastructure 1.2(0.103) and 2.0(0.0) allows remote attackers to hijack the (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-25
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.