# CVEs published 2015-09-08

7 CVEs were published on September 8, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-1841](https://cve.now/CVE-2015-1841.md): The Web Admin interface in Red Hat Enterprise Virtualization Manager (RHEV-M) allows local users to bypass the timeout function by selecting (no CVSS)
- [CVE-2015-3241](https://cve.now/CVE-2015-3241.md): OpenStack Compute (nova) 2015.1 through 2015.1.1, 2014.2.3, and earlier does not stop the migration process when the instance is deleted, wh (no CVSS, nova)
- [CVE-2015-3247](https://cve.now/CVE-2015-3247.md): Race condition in the worker\_update\_monitors\_config function in SPICE 0.12.4 allows a remote authenticated guest user to cause a denial of s (no CVSS)
- [CVE-2015-5198](https://cve.now/CVE-2015-5198.md): libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to gain privileges via unspecified vectors, related t (no CVSS)
- [CVE-2015-5199](https://cve.now/CVE-2015-5199.md): Directory traversal vulnerability in dlopen in libvdpau before 1.1.1 allows local users to gain privileges via the VDPAU\_DRIVER environment (no CVSS)
- [CVE-2015-5200](https://cve.now/CVE-2015-5200.md): The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary file (no CVSS)
- [CVE-2015-5250](https://cve.now/CVE-2015-5250.md): The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data. (no CVSS, github.com/openshift/origin)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-09-08
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.