CVE-2015-2991

Buffer overflow in NScripter before 3.00 allows remote attackers to execute arbitrary code via crafted save data.

• CWE-119

• http://jvn.jp/en/jp/JVN08494613/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000123Vendor Advisory
• http://www.nscripter.com/Patch, Vendor Advisory
• http://jvn.jp/en/jp/JVN08494613/index.htmlVendor Advisory
• http://jvndb.jvn.jp/jvndb/JVNDB-2015-000123Vendor Advisory
• http://www.nscripter.com/Patch, Vendor Advisory

Published

Sep 5, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-2985Cross-site scripting (XSS) vulnerability in guide-park.com B…
• CVE-2015-2986Cross-site scripting (XSS) vulnerability in rakuto.net hitSu…
• CVE-2015-2987Type74 ED before 4.0 misuses 128-bit ECB encryption for smal…
• CVE-2015-2988Rakuten card App for iOS 5.2.0 through 5.2.4 does not verify…
• CVE-2015-2989Cross-site scripting (XSS) vulnerability in index.php in LEM…
• CVE-2015-2990Directory traversal vulnerability in zhtml.cgi in NEOJAPAN d…
• CVE-2015-2992Apache Struts before 2.3.20 has a cross-site scripting (XSS)…6.1
• CVE-2015-2993SysAid Help Desk before 15.2 does not properly restrict acce…
• CVE-2015-2994Unrestricted file upload vulnerability in ChangePhoto.jsp in…
• CVE-2015-2995The RdsLogsEntry servlet in SysAid Help Desk before 15.2 doe…
• CVE-2015-2996Multiple directory traversal vulnerabilities in SysAid Help …
• CVE-2015-2997SysAid Help Desk before 15.2 allows remote attackers to obta…