# CVEs published 2015-09-11 23 CVEs were published on September 11, 2015: 0 critical, 0 high. Days are UTC. - [CVE-2015-5629](https://cve.now/CVE-2015-5629.md): The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android and 1.0.2 and earlier for iOS allows attacke (no CVSS) - [CVE-2015-5630](https://cve.now/CVE-2015-5630.md): Cross-site scripting (XSS) vulnerability in the NTT Broadband Platform Japan Connected-free Wi-Fi application 1.6.0 and earlier for Android (no CVSS) - [CVE-2014-7216](https://cve.now/CVE-2014-7216.md): Multiple stack-based buffer overflows in Yahoo! Messenger 11.5.0.228 and earlier allow remote attackers to cause a denial of service (crash) (no CVSS) - [CVE-2015-6919](https://cve.now/CVE-2015-6919.md): Cross-site scripting (XSS) vulnerability in the googleSearch (CSE) (com\_googlesearch\_cse) component 3.0.2 for Joomla! allows remote attacker (no CVSS) - [CVE-2015-6920](https://cve.now/CVE-2015-6920.md): Cross-site scripting (XSS) vulnerability in js/window.php in the sourceAFRICA plugin 0.1.3 for WordPress allows remote attackers to inject a (no CVSS) - [CVE-2015-6921](https://cve.now/CVE-2015-6921.md): Cross-site scripting (XSS) vulnerability in the Zendesk Feedback Tab module 7.x-1.x before 7.x-1.1 for Drupal allows remote administrators w (no CVSS) - [CVE-2014-9208](https://cve.now/CVE-2014-9208.md): Multiple stack-based buffer overflows in unspecified DLL files in Advantech WebAccess before 8.0.1 allow remote attackers to execute arbitra (no CVSS) - [CVE-2015-3964](https://cve.now/CVE-2015-3964.md): SMA Solar Sunny WebBox has hardcoded passwords, which makes it easier for remote attackers to obtain access via unspecified vectors. (no CVSS) - [CVE-2015-5631](https://cve.now/CVE-2015-5631.md): Cross-site request forgery (CSRF) vulnerability in the Remote UI on Canon PIXMA MG7500 printers allows remote attackers to hijack the authen (no CVSS) - [CVE-2015-6464](https://cve.now/CVE-2015-6464.md): The administrative web interface on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to bypass (no CVSS) - [CVE-2015-6465](https://cve.now/CVE-2015-6465.md): The GoAhead web server on Moxa EDS-405A and EDS-408A switches with firmware before 3.6 allows remote authenticated users to cause a denial o (no CVSS) - [CVE-2015-6466](https://cve.now/CVE-2015-6466.md): Cross-site scripting (XSS) vulnerability in the Diagnosis Ping feature in the administrative web interface on Moxa EDS-405A and EDS-408A swi (no CVSS) - [CVE-2015-6675](https://cve.now/CVE-2015-6675.md): Siemens RUGGEDCOM ROS 3.8.0 through 4.1.x permanently enables the IP forwarding feature, which allows remote attackers to bypass a VLAN isol (no CVSS) - [CVE-2015-6908](https://cve.now/CVE-2015-6908.md): The ber\_get\_next function in libraries/liblber/io.c in OpenLDAP 2.4.42 and earlier allows remote attackers to cause a denial of service (rea (no CVSS) - [CVE-2015-6909](https://cve.now/CVE-2015-6909.md): Cross-site scripting (XSS) vulnerability in the "Create download task via file upload" feature in Synology Download Station before 3.5-2962 (no CVSS) - [CVE-2015-6910](https://cve.now/CVE-2015-6910.md): SQL injection vulnerability in Synology Video Station before 1.5-0757 allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS) - [CVE-2015-6911](https://cve.now/CVE-2015-6911.md): SQL injection vulnerability in Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary SQL commands via the id p (no CVSS) - [CVE-2015-6912](https://cve.now/CVE-2015-6912.md): Synology Video Station before 1.5-0763 allows remote attackers to execute arbitrary shell commands via shell metacharacters in the subtitle\_ (no CVSS) - [CVE-2015-6913](https://cve.now/CVE-2015-6913.md): Cross-site scripting (XSS) vulnerability in the "Create download task via URL" feature in Synology Download Station before 3.5-2967 allows r (no CVSS) - [CVE-2015-6914](https://cve.now/CVE-2015-6914.md): Absolute path traversal vulnerability in SiteFactory CMS 5.5.9 allows remote attackers to read arbitrary files via a full pathname in the fi (no CVSS) - [CVE-2015-6915](https://cve.now/CVE-2015-6915.md): SQL injection vulnerability in Montala Limited ResourceSpace 7.3.7009 and earlier allows remote attackers to execute arbitrary SQL commands (no CVSS) - [CVE-2015-6584](https://cve.now/CVE-2015-6584.md): Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary (no CVSS, datatables ยท datatables/datatables) - [CVE-2015-6827](https://cve.now/CVE-2015-6827.md): Cross-site request forgery (CSRF) vulnerability in Auto-Exchanger 5.1.0 allows remote attackers to hijack the authentication of users for re (no CVSS) --- Source: cve.now, built and run by Sazabi (AI-native observability and security) Page: https://cve.now/daily/2015-09-11 Site guide for agents: https://cve.now/llms.txt Uses NVD data; not endorsed by NVD.