# CVEs published 2015-09-05

7 CVEs were published on September 5, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-2985](https://cve.now/CVE-2015-2985.md): Cross-site scripting (XSS) vulnerability in guide-park.com BBS X102 1.03 allows remote attackers to inject arbitrary web script or HTML… (no CVSS)
- [CVE-2015-2986](https://cve.now/CVE-2015-2986.md): Cross-site scripting (XSS) vulnerability in rakuto.net hitSuji (rktSNS2) 0.2.2b allows remote attackers to inject arbitrary web script or… (no CVSS)
- [CVE-2015-2990](https://cve.now/CVE-2015-2990.md): Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read… (no CVSS)
- [CVE-2015-2991](https://cve.now/CVE-2015-2991.md): Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data. (no CVSS)
- [CVE-2015-5722](https://cve.now/CVE-2015-5722.md): buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service… (no CVSS)
- [CVE-2015-5986](https://cve.now/CVE-2015-5986.md): openpgpkey\_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of… (no CVSS)
- [CVE-2015-6276](https://cve.now/CVE-2015-6276.md): Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access… (no CVSS)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/archive/2015-09-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.