# CVEs published 2015-08-26

12 CVEs were published on August 26, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2013-7424](https://cve.now/CVE-2013-7424.md): The getaddrinfo function in glibc before 2.15, when compiled with libidn and the AI\_IDN flag is used, allows context-dependent attackers to (no CVSS)
- [CVE-2015-3158](https://cve.now/CVE-2015-3158.md): The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not prop (no CVSS, org.picketlink:picketlink-tomcat-common)
- [CVE-2015-3221](https://cve.now/CVE-2015-3221.md): OpenStack Neutron before 2014.2.4 (juno) and 2015.1.x before 2015.1.1 (kilo), when using the IPTables firewall driver, allows remote authent (no CVSS, neutron)
- [CVE-2015-3239](https://cve.now/CVE-2015-3239.md): Off-by-one error in the dwarf\_to\_unw\_regnum function in include/dwarf\_i.h in libunwind 1.1 allows local users to have unspecified impact via (no CVSS)
- [CVE-2015-4037](https://cve.now/CVE-2015-4037.md): The slirp\_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to (no CVSS)
- [CVE-2015-4173](https://cve.now/CVE-2015-4173.md): Unquoted Windows search path vulnerability in the autorun value in Dell SonicWall NetExtender before 7.5.227 and 8.0.x before 8.0.238, as us (no CVSS)
- [CVE-2015-5409](https://cve.now/CVE-2015-5409.md): Buffer overflow in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to modify data or cause a den (no CVSS)
- [CVE-2015-5410](https://cve.now/CVE-2015-5410.md): HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to execute arbitrary code or cause a denial of s (no CVSS)
- [CVE-2015-5411](https://cve.now/CVE-2015-5411.md): HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to obtain sensitive information via unspecified (no CVSS)
- [CVE-2015-5412](https://cve.now/CVE-2015-5412.md): Cross-site request forgery (CSRF) vulnerability in HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated use (no CVSS)
- [CVE-2015-5413](https://cve.now/CVE-2015-5413.md): HP Version Control Repository Manager (VCRM) before 7.5.0 allows remote authenticated users to gain privileges and obtain sensitive informat (no CVSS)
- [CVE-2015-6261](https://cve.now/CVE-2015-6261.md): Cisco TelePresence Video Communication Server (VCS) Expressway X8.5.2 allows remote authenticated users to bypass intended access restrictio (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-26
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.