# CVEs published 2015-12-24

10 CVEs were published on December 24, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-6792](https://cve.now/CVE-2015-6792.md): The MIDI subsystem in Google Chrome before 47.0.2526.106 does not properly handle the sending of data, which allows remote attackers to exec (no CVSS)
- [CVE-2015-8664](https://cve.now/CVE-2015-8664.md): Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows (no CVSS)
- [CVE-2015-7930](https://cve.now/CVE-2015-7930.md): Adcon Telemetry A840 Telemetry Gateway Base Station has hardcoded credentials, which allows remote attackers to obtain administrative access (no CVSS)
- [CVE-2015-7931](https://cve.now/CVE-2015-7931.md): The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station does not authenticate the station device, which allows man-in-the-mid (no CVSS)
- [CVE-2015-7932](https://cve.now/CVE-2015-7932.md): Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to obtain sensitive information by sniffing the network. (no CVSS)
- [CVE-2015-7934](https://cve.now/CVE-2015-7934.md): The Java client in Adcon Telemetry A840 Telemetry Gateway Base Station allows remote attackers to discover log-file pathnames via unspecifie (no CVSS)
- [CVE-2015-8661](https://cve.now/CVE-2015-8661.md): The h264\_slice\_header\_init function in libavcodec/h264\_slice.c in FFmpeg before 2.8.3 does not validate the relationship between the number (no CVSS)
- [CVE-2015-8662](https://cve.now/CVE-2015-8662.md): The ff\_dwt\_decode function in libavcodec/jpeg2000dwt.c in FFmpeg before 2.8.4 does not validate the number of decomposition levels before pr (no CVSS)
- [CVE-2015-8663](https://cve.now/CVE-2015-8663.md): The ff\_get\_buffer function in libavcodec/utils.c in FFmpeg before 2.8.4 preserves width and height values after a failure, which allows remo (no CVSS)
- [CVE-2015-8267](https://cve.now/CVE-2015-8267.md): The PasswordReset.Controllers.ResetController.ChangePasswordIndex method in PasswordReset.dll in Dovestones AD Self Password Reset before 3. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-12-24
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.