Lucene search
+L

1053 matches found

CNVD
CNVD
added 2016/02/02 12:0 a.m.4 views

An unspecified vulnerability exists in KDDI HOME SPOT CUBE devices.

KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A security vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker could exploit the vulnerability to conduct clickjacking attacks...

6.1CVSS6.9AI score0.01009EPSS
Exploits0References1
CNVD
CNVD
added 2016/02/02 12:0 a.m.6 views

KDDI HOME SPOT CUBE devices CRLF Injection Vulnerability

KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A CRLF injection vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker can exploit this vulnerability to inject arbitrary HTTP headers...

4.7CVSS7.5AI score0.01115EPSS
Exploits0References1
CNVD
CNVD
added 2016/02/02 12:0 a.m.4 views

KDDI HOME SPOT CUBE devices cross-site scripting vulnerability

KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A cross-site scripting vulnerability exists in KDDI HOME SPOT CUBE 2, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive informatio...

5.4CVSS6.2AI score0.00802EPSS
Exploits0References1
CNVD
CNVD
added 2016/02/02 12:0 a.m.5 views

Unspecified vulnerability in KDDI HOME SPOT CUBE devices (CNVD-2016-00911)

KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A security vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker can exploit the vulnerability to execute arbitrary OS commands...

6.5CVSS7.5AI score0.01039EPSS
Exploits0References1
NVD
NVD
added 2016/01/30 3:59 p.m.16 views

CVE-2016-1144

Cross-site scripting XSS vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

5.4CVSS5.1AI score0.0085EPSS
Exploits0References3
OSV
OSV
added 2016/01/30 3:59 p.m.4 views

CVE-2016-1144

Cross-site scripting XSS vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

5.4CVSS5.9AI score0.0085EPSS
Exploits0References3
OSV
OSV
added 2016/01/30 3:59 p.m.5 views

CVE-2016-1141

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

4.7CVSS6AI score0.01039EPSS
Exploits0References3
NVD
NVD
added 2016/01/30 3:59 p.m.18 views

CVE-2016-1141

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

6.5CVSS5.3AI score0.01039EPSS
Exploits0References3
NVD
NVD
added 2016/01/30 3:59 p.m.13 views

CVE-2016-1139

Cross-site request forgery CSRF vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

7.5CVSS7.9AI score0.00556EPSS
Exploits0References3
OSV
OSV
added 2016/01/30 3:59 p.m.7 views

CVE-2016-1140

KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors...

6.1CVSS5.8AI score0.01009EPSS
Exploits0References3
OSV
OSV
added 2016/01/30 3:59 p.m.4 views

CVE-2016-1139

Cross-site request forgery CSRF vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

7.5CVSS5.8AI score0.00556EPSS
Exploits0References3
OSV
OSV
added 2016/01/30 3:59 p.m.6 views

CVE-2016-1138

CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecified vectors...

4.7CVSS5.9AI score0.01115EPSS
Exploits0References3
NVD
NVD
added 2016/01/30 3:59 p.m.18 views

CVE-2016-1138

CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecified vectors...

4.7CVSS5AI score0.01115EPSS
Exploits0References3
OSV
OSV
added 2016/01/30 3:59 p.m.5 views

CVE-2016-1136

Cross-site scripting XSS vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

5.4CVSS5.9AI score0.00802EPSS
Exploits0References3
NVD
NVD
added 2016/01/30 3:59 p.m.13 views

CVE-2016-1136

Cross-site scripting XSS vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

5.4CVSS5.1AI score0.00802EPSS
Exploits0References3
Prion
Prion
added 2016/01/30 3:59 p.m.11 views

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

6.8CVSS7.8AI score0.00556EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2016/01/30 3:59 p.m.20 views

Design/Logic Flaw

KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

6.5CVSS7.8AI score0.01039EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2016/01/30 3:59 p.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in JOB-CUBE -JOB WEB SYSTEM before 1.2.2 and -JOB WEB SYSTEM High Income 1.0.6 and earlier allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS5.7AI score0.0085EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2016/01/30 3:59 p.m.15 views

Code injection

KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors...

4.3CVSS7.3AI score0.01009EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2016/01/30 3:59 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

3.5CVSS5.7AI score0.00802EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder