Denial of Service Vulnerability in Multiple Internet Initiative Japan SEIL Series Routers

Internet Initiative Japan SEIL/X, etc. are router products of Internet Initiative Japan. A security vulnerability exists in several Internet Initiative Japan SEIL series routers. The vulnerability can be exploited by a remote attacker with specially crafted packets to briefly prevent encrypted...

NTT DoCoMo Photo Collection PC Software Untrustworthy Search Path Vulnerability

NTT DoCoMo Photo Collection PC Software is a set of photo collection software from NTT DoCoMo Japan. An untrusted search path vulnerability exists in NTT DoCoMo Photo Collection PC Software 4.0.2 and earlier versions. A remote attacker can exploit this vulnerability to gain privileges via a...

otndnld.oracle.co.jp XSS vulnerability

Vulnerable URL: http://otndnld.oracle.co.jp/document/products/epm/111200/E-17236/epm.1112/esbtechref/frameset.htm?javascript:alert1 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP...

woahjapan.com XSS vulnerability

Vulnerable URL: http://www.woahjapan.com/ch/search.asp?junflg=1%22%3E%3Csvg/onload=alertdocument.domain%3E=0 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 622707 VIP website...

Fuji Electric Monitouch V-SFT

CVSS v3 7.3 ATTENTION: Remotely exploitable/low skill level to exploit. Vendor: Fuji Electric Equipment: Monitouch V-SFT Vulnerabilities: Stack-Based Buffer Overflow, Heap-Based Buffer Overflow, Improper Privilege Management AFFECTED PRODUCTS The following versions of Monitouch V-SFT, a screen...

This Week in Security News

Welcome to our weekly roundup, where we share what you need to know about the cybersecurity news and events that happened over the past few days. Below you’ll find a quick recap of topics followed by links to news articles and/or our blog posts providing additional insight. Be sure to check back...

InsightVM now available in Japan

InsightVM customers can now choose to store their InsightVM data in Japan. At Rapid7, we enable customers to comply with policies and preferences by selecting the region where their data is transmitted, processed, and stored. We're excited to announce that Japan joins our existing data centers in...

nagoya.catholic.jp XSS vulnerability

Vulnerable URL: http://nagoya.catholic.jp/shoukyoukudetail.php?id=9%22%27--!%3E%3CScript%20/K/%3Econfirm%22OPENBUGBOUNTY%22%3C/Script%20/K/%3E Details: Description| Value ---|--- Patched:| Yes, at 27.11.2017 Latest check for patch:| 27.11.2017 16:32 GMT Vulnerability type:| XSS Vulnerability...

Electronic tendering and bid opening system driver untrusted search path vulnerability

Electronic tendering and bid opening system is a tendering and bidding system of Japan Defense Equipment Agency DEA.Installer is one of the installation programs. An untrusted search path vulnerability exists in the Electronic tendering and bid opening system installer. The vulnerability can be...

Cross-site Scripting Vulnerability in multiple Hitachi products

Overview A cross-site scripting vulnerability was found in uCosminexus Portal Framework, Groupmax Collaboration, Hitachi Navigation Platform and JP1/Navigation Platform. Impact Remote users can exploit this vulnerability to execute malicious scripts. Solution Please refer to the 'Vendor...

Honda Shut Down Plant Impacted by WannaCry

Honda, one of the largest automobile manufacturers in the world, announced Wednesday that it was forced to shut down production at one of its Japanese plants after it was hit by the WannaCry ransomware. The manufacturer said it powered down a plant on Monday in Sayama, a city in the Saitama...

japan-architects.com XSS vulnerability

Vulnerable URL: https://www.japan-architects.com/ja/projects/'-alert'OPENBUGBOUNTY'-' Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 15:06 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 716375 VIP website...

TKY2JGD Installer Untrusted Search Path Vulnerability

TKY2JGD is a coordinate exchange software package released by the Geographical Survey of Japan GSI. An untrustworthy search path vulnerability exists in the installer TKY2JGD1379.EXE in TKY2JGD version 1.3.79. The vulnerability can be exploited to gain privileges via a malicious DLL file in the...

JVN#25078144: Source code security studying tool iCodeChecker vulnerable to cross-site scripting

Source code security studying tool iCodeChecker provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Source code security studying tool...

fortune.yahoo.co.jp XSS vulnerability

Vulnerable URL: https://fortune.yahoo.co.jp/stw/genie/swf/input.swf?ty=w&op1;=&op2;==p=javascript:alert/OPENBUGBOUNTY/ Details: Description| Value ---|--- Patched:| Yes, at 04.09.2017 Latest check for patch:| 04.09.2017 09:04 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Installer of CASL II simulator(self-extract format) may insecurely load Dynamic Link Libraries

Overview Installer of CASL II simulatorself-extract format provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Yuji Tounai of NTT Communications Corporation reported this...

JVN#67305782: Installer of CASL II simulator(self-extract format) may insecurely load Dynamic Link Libraries

Installer of CASL II simulatorself-extract format provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Impact Arbitrary code may be executed with the privilege of the user invoking t...

The installer of TKY2JGD provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries

Overview The installer of TKY2JGD TKY2JGD1379.EXE provided by Geospatial Information Authority of Japan GSI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

The installer of PatchJGD(Hyoko) provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries

Overview The installer of PatchJGDHyoko PatchJGDh101.EXE provided by Geospatial Information Authority of Japan GSI contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA...

JVN#52691241: Multiple installers of the software provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries

Multiple installers of the software provided by Geospatial Information Authority of Japan GSI contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer...