CVE-2014-7270

CVE-2014-7270 is a CSRF vulnerability affecting ASUS JAPAN RT-series routers (RT-AC87U, RT-AC68U, RT-AC56S, RT-N66U, RT-N56U). The issue is triggered via malicious pages while users are authenticated, allowing attackers to hijack user sessions and perform unintended actions. Root cause involves c...

Multiple ASUS wireless LAN routers vulnerable to cross-site request forgery

Overview Multiple wireless LAN routers provided by ASUS JAPAN Inc. contain a cross-site request forgery vulnerability. Masashi Sakai reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact If a user views a maliciou...

CVE-2014-7255

Internet Initiative Japan Inc. SEIL Series routers SEIL/X1 2.50 through 4.62, SEIL/X2 2.50 through 4.62, SEIL/B1 2.50 through 4.62, and SEIL/x86 Fuji 1.70 through 3.22 allow remote attackers to cause a denial of service CPU and traffic consumption via a large number of NTP requests within a short...

CVE-2014-7509

CVE-2014-7509 affects the Android app “A Very Short History of Japan” (package com.ireadercity.c51) v3.0.2, which does not verify X.509 certificates in SSL, enabling MITM attackers to spoof servers and exfiltrate sensitive data via a crafted certificate. Root cause: missing server certificate val...

CVE-2014-7509

The A Very Short History of Japan aka com.ireadercity.c51 application 3.0.2 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Yahoo! Japan Box for Android issue where it fails to verify SSL server certificates

Overview Yahoo! Japan Box for Android provided by Yahoo Japan Corporation contains an issue where it fails to verify SSL server certificates. Yahoo Japan Corporation reported this vulnerability to JPCERT/CC to notify users of this issue through JVN. JPCERT/CC coordinated with Yahoo Japan...

JVN#48270605: Yahoo! Japan Box for Android issue where it fails to verify SSL server certificates

Yahoo! Japan Box for Android provided by Yahoo Japan Corporation contains an issue where it fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version...

japan-ryokan.net XSS vulnerability

Open Bug Bounty ID: OBB-49353 Description| Value ---|--- Affected Website:| japan-ryokan.net Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...

CVE-2014-5881

The Yahoo! Japan Box aka jp.co.yahoo.android.ybox application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Yahoo! Japan Box aka jp.co.yahoo.android.ybox application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5881

The Yahoo! Japan Box aka jp.co.yahoo.android.ybox application 1.5.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5881

The CVE-2014-5881 issue affects Yahoo! Japan Box for Android (jp.co.yahoo.android.ybox) where the app fails to verify SSL server certificates in versions up to 1.5.4 (and earlier), enabling man-in-the-middle attackers to decrypt or spoof traffic. Root cause: improper SSL certificate verification ...

CVE-2014-3901

Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service device hang via a crafted packet...

CVE-2014-3901

Raritan Japan Dominion KX2-101 switches before 2 allow remote attackers to cause a denial of service device hang via a crafted packet...

CVE-2014-3901

CVE-2014-3901 affects Dominion KX2-101 (Raritan Japan) switches prior to version 2. A crafted packet can cause a DoS/device hang. Public sources (NVD, JVN) confirm vulnerability in the KX2-101 line with upgrade guidance: move to Dominion KX2-101 V2 to remediate. No exploitation details are provid...

JVN#07957080: Dominion KX2-101 vulnerable to denial-of-service (DoS)

Dominion KX2-101 provided by Raritan Japan, Inc. is a KVM-over-IP switch. Dominion KX2-101 contains a denial-of-service DoS vulnerability. Impact By receiving a specially crafted packet, the product may be forced to stop responding. Solution Upgrade to Dominion KX2-101 V2 The vulnerability has be...

CVE-2014-2001

The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate...

CVE-2014-2001

The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate...

CVE-2014-2001

The CVE-2014-2001 entry concerns the JR East Japan Android app (prior to version 1.2.0). The underlying issue is that the app does not verify X.509 certificates from SSL servers, enabling MITM attackers to obtain sensitive information via a crafted certificate. Impact is information disclosure of...

CVE-2014-2001

The East Japan Railway Company JR East Japan application before 1.2.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to obtain sensitive information via a crafted certificate...