Input validation

Multiple untrusted search path vulnerabilities in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allow local users to gain privileges via a Trojan horse DLL in the current working directory, as...

PT-2011-3531 · Microsoft · Display Panning Cpl Extension +11

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...

Shocking Winehouse Death Videos Linked to Scams

Scammers wasted little time generating campaigns to exploit the untimely death of troubled pop-diva, Amy Winehouse. Anti malware experts have identified at least five separate scams attempting to exploit the event, promising videos of Winehouse shortly before her death.The scams include Facebook...

Internet Explorer vulnerable to cross-site scripting

Overview Microsoft Internet Explorer contains a vulnerability in handling specific character encoding which may result in a cross-site scripting attack. Microsoft Internet Explorer contains a vulnerability in handling specific EUC-JP encoded characters, which may result in cross-site scripting...

LulzSec Leak Sony's Japanese websites Database !

LulzSec Leak Sony's Japanese websites Database ! Update : 10th Attack on Sony -- Sony Ericsson Got Hacked by Idahca Lebanese hacker Group LulzSec Hacking team today Release the Sony's Japanese website Database dump via their Twitter Account. This is the 9th Attack on Sony. This attack is also usi...

Privilege escalation

The Client/Server Runtime Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted...

CVE-2010-1891

The Client/Server Runtime Subsystem aka CSRSS in the Win32 subsystem in Microsoft Windows XP SP2 and SP3 and Server 2003 SP2, when a Chinese, Japanese, or Korean locale is enabled, does not properly allocate memory for transactions, which allows local users to gain privileges via a crafted...

Restaurant SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================== Restaurant SQL Injection Vulnerability ====================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title: Full Site for Restaurant SQL Injection Vulnerability Vendor...

How Japanese ISPs Deal with Botnets

Japan’s “Cyber Clean Center” is a little-known effort by the Japanese Computer Emergency Response Team Coordination Center JP-CERT and a collection of 76 Japanese ISPs covering 90 percent of the nation’s Internet users to fight botnets and other security issues. Read the full article...

JVN#57040664 ATOK screen lock bypass vulnerability

ATOK from JustSystems Corporation is a software for Japanese Kana-Kanji conversion. ATOK contains an issue with the restriction of launching external applications, which may lead to a screen lock bypass vulnerability. Impact An attacker could execute arbitrary code or program with the privileges ...

New WiFi Attack Cracks WPA–Again

A pair of Japanese researchers have developed an improvement on an existing technique for attacking wireless LAN traffic that enables them to intercept and decrypt encrypted packets in about a minute, significantly lowering the barrier to entry for attackers looking to listen in on supposedly...

Site Calendar 'mycaljp' vulnerable to cross-site scripting

Overview Site Calendar 'mycaljp' contains a cross-site scripting vulnerability. Site Calendar 'mycaljp' is a calendar plugin for Geeklog, which is an open source content management system. Site Calendar 'mycaljp' contains a cross-site scripting vulnerability. The affected plugin is also contained...

Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting

Overview Nucleus from The Nucleus Group contains a cross-site scripting vulnerability. According to the developer, it is confirmed that this vulnerability exist in Nucleus EUC-JP only, and Nucleus UTF-8 Japanese Edition and Nucleus English Edition are not affected. For more information, refer to...

JVN#92651529 Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting

Nucleus is an open source content management system provided by The Nucleus Group. Nucleus EUC-JP Japanese Edition contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the specific web browser. Solution Update the Software Apply the latest update provided b...

Eudora Japanese version stops working after the application crashes

Overview Eudora is a mail client from QUALCOMM. The Eudora Japanese version sold by Livedoor contains a vulnerability to crash, caused by previewing an email that has a corrupt image attachment. Impact Eudora Japanese version stops functioning, once crashed by opening an email message containing ...

MyODBC Japanese Conversion Edition denial of service vulnerability

Overview MyODBC is an ODBC driver that allows ODBC-compliant applications to communicate with a MySQL database. MyODBC Japanese Conversion Edition is a Windows version of the driver with additional Japanese encoding functionality released from SoftAgency. MyODBC Japanese Conversion Edition contai...

CVE-2008-1938

Sony Mylo COM-2 Japanese model firmware before 1.002 does not properly verify web server SSL certificates, which allows remote attackers to obtain sensitive information and conduct spoofing attacks...

CVE-2008-1938

Sony mylo COM-2 firmware before 1.002 does not verify server SSL certificates, enabling potential information disclosure and spoofing. Affected products include the Japan and US models of mylo COM-2 system software prior to Ver.1.002. Root cause: SSL/TLS server certificate validation is not perfo...

Debian Security Advisory DSA 224-1 (canna)

The remote host is missing an update to canna announced via advisory DSA 224-1. OpenVAS Vulnerability Test $Id: deb2241.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 224-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...

SuSE 10 Security Update : acroread_ja (ZYPP Patch Number 2545)

The Adobe Acrobat Reader Japanese version has been updated to version 7.0.9. This update also includes following security fixes : - A memory corruption problem was fixed in Adobe Acrobat Reader can potentially lead to code execution. CVE-2006-5857 - Universal cross-site request forgery CSRF...