# CVEs published 2015-10-26 24 CVEs were published on October 26, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-3218](https://cve.now/CVE-2015-3218.md): The authentication\_agent\_new function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit (aka polkit) before 0.113 allows loc (no CVSS) - [CVE-2015-3255](https://cve.now/CVE-2015-3255.md): The polkit\_backend\_action\_pool\_init function in polkitbackend/polkitbackendactionpool.c in PolicyKit (aka polkit) before 0.113 might allow l (no CVSS) - [CVE-2015-3256](https://cve.now/CVE-2015-3256.md): PolicyKit (aka polkit) before 0.113 allows local users to cause a denial of service (memory corruption and polkitd daemon crash) and possibl (no CVSS) - [CVE-2015-4625](https://cve.now/CVE-2015-4625.md): Integer overflow in the authentication\_agent\_new\_cookie function in PolicyKit (aka polkit) before 0.113 allows local users to gain privilege (no CVSS) - [CVE-2014-8242](https://cve.now/CVE-2014-8242.md): librsync before 1.0.0 uses a truncated MD4 checksum to match blocks, which makes it easier for remote attackers to modify transmitted data v (no CVSS) - [CVE-2015-3280](https://cve.now/CVE-2015-3280.md): OpenStack Compute (nova) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) does not properly delete instances from compute nodes, w (no CVSS, nova) - [CVE-2015-5223](https://cve.now/CVE-2015-5223.md): OpenStack Object Storage (Swift) before 2.4.0 allows attackers to obtain sensitive information via a PUT tempurl and a DLO object manifest t (no CVSS, swift) - [CVE-2015-5251](https://cve.now/CVE-2015-5251.md): OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allow remote authenticated users to change the s (no CVSS, glance) - [CVE-2015-5286](https://cve.now/CVE-2015-5286.md): OpenStack Image Service (Glance) before 2014.2.4 (juno) and 2015.1.x before 2015.1.2 (kilo) allows remote authenticated users to bypass the (no CVSS, glance) - [CVE-2015-7673](https://cve.now/CVE-2015-7673.md): io-tga.c in gdk-pixbuf before 2.32.0 uses heap memory after its allocation failed, which allows remote attackers to cause a denial of servic (no CVSS) - [CVE-2015-7674](https://cve.now/CVE-2015-7674.md): Integer overflow in the pixops\_scale\_nearest function in pixops/pixops.c in gdk-pixbuf before 2.32.1 allows remote attackers to cause a deni (no CVSS) - [CVE-2015-7699](https://cve.now/CVE-2015-7699.md): The files\_external app in ownCloud Server before 7.0.9, 8.0.x before 8.0.7, and 8.1.x before 8.1.2 allows remote authenticated users to inst (no CVSS) - [CVE-2015-4456](https://cve.now/CVE-2015-4456.md): ownCloud Desktop Client before 1.8.2 does not call QNetworkReply::ignoreSslErrors with the list of errors to be ignored, which allows man-in (no CVSS) - [CVE-2015-5288](https://cve.now/CVE-2015-5288.md): The crypt function in contrib/pgcrypto in PostgreSQL before 9.0.23, 9.1.x before 9.1.19, 9.2.x before 9.2.14, 9.3.x before 9.3.10, and 9.4.x (no CVSS) - [CVE-2015-5289](https://cve.now/CVE-2015-5289.md): Multiple stack-based buffer overflows in json parsing in PostgreSQL before 9.3.x before 9.3.10 and 9.4.x before 9.4.5 allow attackers to cau (no CVSS) - [CVE-2015-6500](https://cve.now/CVE-2015-6500.md): Directory traversal vulnerability in ownCloud Server before 8.0.6 and 8.1.x before 8.1.1 allows remote authenticated users to list directory (no CVSS) - [CVE-2015-6670](https://cve.now/CVE-2015-6670.md): ownCloud Server before 7.0.8, 8.0.x before 8.0.6, and 8.1.x before 8.1.1 does not properly check ownership of calendars, which allows remote (no CVSS) - [CVE-2015-7298](https://cve.now/CVE-2015-7298.md): ownCloud Desktop Client before 2.0.1, when compiled with a Qt release after 5.3.x, does not call QNetworkReply::ignoreSslErrors with the lis (no CVSS) - [CVE-2015-7881](https://cve.now/CVE-2015-7881.md): The Colorbox module 7.x-2.x before 7.x-2.10 for Drupal allows remote authenticated users with certain permissions to bypass intended access (no CVSS) - [CVE-2015-4974](https://cve.now/CVE-2015-4974.md): IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local (no CVSS) - [CVE-2015-4981](https://cve.now/CVE-2015-4981.md): IBM General Parallel File System (GPFS) 3.5.x before 3.5.0.27 and 4.1.x before 4.1.1.2 and Spectrum Scale 4.1.1.x before 4.1.1.2 allow local (no CVSS) - [CVE-2015-5011](https://cve.now/CVE-2015-5011.md): IBM WebSphere Message Broker 8 before 8.0.0.6 and Integration Bus 9 before 9.0.0.4 do not check authorization for MQSISTARTMSGFLOW and MQSIS (no CVSS) - [CVE-2015-5014](https://cve.now/CVE-2015-5014.md): IBM Cognos Disclosure Management (CDM) 10.1.x and 10.2.x before 10.2.4 IF10 allows man-in-the-middle attackers to obtain access by spoofing (no CVSS) - [CVE-2015-5448](https://cve.now/CVE-2015-5448.md): HP Asset Manager 9.40 and 9.41 before 9.41.11103 P4-rev1 and 9.50 before 9.50.11925 P3 allows local users to obtain sensitive information vi (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-10-26 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.