# CVEs published 2015-09-05

7 CVEs were published on September 5, 2015: 0 critical, 0 high. Days are UTC.

- [CVE-2015-2985](https://cve.now/CVE-2015-2985.md): Cross-site scripting (XSS) vulnerability in guide-park.com BBS X102 1.03 allows remote attackers to inject arbitrary web script or HTML via (no CVSS)
- [CVE-2015-2986](https://cve.now/CVE-2015-2986.md): Cross-site scripting (XSS) vulnerability in rakuto.net hitSuji (rktSNS2) 0.2.2b allows remote attackers to inject arbitrary web script or HT (no CVSS)
- [CVE-2015-2990](https://cve.now/CVE-2015-2990.md): Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arb (no CVSS)
- [CVE-2015-2991](https://cve.now/CVE-2015-2991.md): Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data. (no CVSS)
- [CVE-2015-5722](https://cve.now/CVE-2015-5722.md): buffer.c in named in ISC BIND 9.x before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (assertio (no CVSS)
- [CVE-2015-5986](https://cve.now/CVE-2015-5986.md): openpgpkey\_61.c in named in ISC BIND 9.9.7 before 9.9.7-P3 and 9.10.x before 9.10.2-P4 allows remote attackers to cause a denial of service (no CVSS)
- [CVE-2015-6276](https://cve.now/CVE-2015-6276.md): Cisco TelePresence IX5000 8.0.3 stores a private key associated with an X.509 certificate under the web root with insufficient access contro (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2015-09-05
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.