# CVEs published 2015-12-02 19 CVEs were published on December 2, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-8024](https://cve.now/CVE-2015-8024.md): McAfee Enterprise Security Manager (ESM), Enterprise Security Manager/Log Manager (ESMLM), and Enterprise Security Manager/Receiver (ESMREC) (no CVSS) - [CVE-2015-2327](https://cve.now/CVE-2015-2327.md): PCRE before 8.36 mishandles the /(((a\\2)|(a\*)\\g\<-1\>))\*/ pattern and related patterns with certain internal recursive back references, which (no CVSS) - [CVE-2015-2328](https://cve.now/CVE-2015-2328.md): PCRE before 8.36 mishandles the /((?(R)a|(?1)))+/ pattern and related patterns with certain recursion, which allows remote attackers to caus (no CVSS) - [CVE-2015-8380](https://cve.now/CVE-2015-8380.md): The pcre\_exec function in pcre\_exec.c in PCRE before 8.38 mishandles a // pattern with a \\01 string, which allows remote attackers to cause (no CVSS) - [CVE-2015-8381](https://cve.now/CVE-2015-8381.md): The compile\_regex function in pcre\_compile.c in PCRE before 8.38 and pcre2\_compile.c in PCRE2 before 10.2x mishandles the /(?J:(?|(:(?|(?'R' (no CVSS) - [CVE-2015-8382](https://cve.now/CVE-2015-8382.md): The match function in pcre\_exec.c in PCRE before 8.37 mishandles the /(?:((abcd))|(((?:(?:(?:(?:abc|(?:abcdef))))b)abcdefghi)abc)|((\*ACCEPT) (no CVSS) - [CVE-2015-8384](https://cve.now/CVE-2015-8384.md): PCRE before 8.38 mishandles the /(?J)(?'d'(?'d'\\g{d}))/ pattern and related patterns with certain recursive back references, which allows re (no CVSS) - [CVE-2015-8385](https://cve.now/CVE-2015-8385.md): PCRE before 8.38 mishandles the /(?|(\\k'Pm')|(?'Pm'))/ pattern and related patterns with certain forward references, which allows remote att (no CVSS) - [CVE-2015-8388](https://cve.now/CVE-2015-8388.md): PCRE before 8.38 mishandles the /(?=di(?\<=(?1))|(?=(.))))/ pattern and related patterns with an unmatched closing parenthesis, which allows (no CVSS) - [CVE-2015-8392](https://cve.now/CVE-2015-8392.md): PCRE before 8.38 mishandles certain instances of the (?| substring, which allows remote attackers to cause a denial of service (unintended r (no CVSS) - [CVE-2015-8395](https://cve.now/CVE-2015-8395.md): PCRE before 8.38 mishandles certain references, which allows remote attackers to cause a denial of service or possibly have unspecified othe (no CVSS) - [CVE-2015-8383](https://cve.now/CVE-2015-8383.md): PCRE before 8.38 mishandles certain repeated conditional groups, which allows remote attackers to cause a denial of service (buffer overflow (no CVSS) - [CVE-2015-8386](https://cve.now/CVE-2015-8386.md): PCRE before 8.38 mishandles the interaction of lookbehind assertions and mutually recursive subpatterns, which allows remote attackers to ca (no CVSS) - [CVE-2015-8387](https://cve.now/CVE-2015-8387.md): PCRE before 8.38 mishandles (?123) subroutine calls and related subroutine calls, which allows remote attackers to cause a denial of service (no CVSS) - [CVE-2015-8389](https://cve.now/CVE-2015-8389.md): PCRE before 8.38 mishandles the /(?:|a|){100}x/ pattern and related patterns, which allows remote attackers to cause a denial of service (in (no CVSS) - [CVE-2015-8390](https://cve.now/CVE-2015-8390.md): PCRE before 8.38 mishandles the \[: and \\\\ substrings in character classes, which allows remote attackers to cause a denial of service (unini (no CVSS) - [CVE-2015-8391](https://cve.now/CVE-2015-8391.md): The pcre\_compile function in pcre\_compile.c in PCRE before 8.38 mishandles certain \[: nesting, which allows remote attackers to cause a deni (no CVSS) - [CVE-2015-8393](https://cve.now/CVE-2015-8393.md): pcregrep in PCRE before 8.38 mishandles the -q option for binary files, which might allow remote attackers to obtain sensitive information v (no CVSS) - [CVE-2015-8394](https://cve.now/CVE-2015-8394.md): PCRE before 8.38 mishandles the (?(\) and (?(R\) conditions, which allows remote attackers to cause a denial of service (integ (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-12-02 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.