# CVEs published 2015-08-29

5 CVEs were published on August 29, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-4497](https://cve.now/CVE-2015-4497.md): Use-after-free vulnerability in the CanvasRenderingContext2D implementation in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38. (no CVSS)
- [CVE-2015-4498](https://cve.now/CVE-2015-4498.md): The add-on installation feature in Mozilla Firefox before 40.0.3 and Firefox ESR 38.x before 38.2.1 allows remote attackers to bypass an int (no CVSS)
- [CVE-2015-6267](https://cve.now/CVE-2015-6267.md): Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a (no CVSS)
- [CVE-2015-6268](https://cve.now/CVE-2015-6268.md): Cisco IOS XE before 2.2.3 on ASR 1000 devices allows remote attackers to cause a denial of service (Embedded Services Processor crash) via a (no CVSS)
- [CVE-2015-6273](https://cve.now/CVE-2015-6273.md): Cisco IOS XE before 3.1.2S on ASR 1000 devices mishandles the automatic setup of Virtual Fragment Reassembly (VFR) by certain firewall and N (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-08-29
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.