nec-enterprise.com XSS vulnerability

Vulnerable URL: https://www.nec-enterprise.com/search?q=%22%3E%27%3E%3Csvg/onload=alert%27OPENBUGBOUNTY%27%3E Details: Description| Value ---|--- Patched:| Yes, at 26.11.2017 Latest check for patch:| 26.11.2017 14:44 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Ran...

nec-display-solutions.com XSS vulnerability

Open Bug Bounty ID: OBB-245994 Description| Value ---|--- Affected Website:| nec-display-solutions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

nec-display-solutions.com XSS vulnerability

Open Bug Bounty ID: OBB-208185 Description| Value ---|--- Affected Website:| nec-display-solutions.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

contact.nec.com XSS vulnerability

Open Bug Bounty ID: OBB-208184 Description| Value ---|--- Affected Website:| contact.nec.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

www2.nec.co.jp XSS vulnerability

Open Bug Bounty ID: OBB-208183 Description| Value ---|--- Affected Website:| www2.nec.co.jp Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2016-1168

Cross-site request forgery CSRF vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1167

Cross-site request forgery CSRF vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1167

Cross-site request forgery CSRF vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1167

The CVE-2016-1167 issue affects the NEC Aterm WG300HP wireless router. A cross-site request forgery (CSRF) vulnerability could allow an attacker to hijack the authentication of an authenticated user. Affected component: the device’s management interface (web UI); root cause is CSRF (CWE-352) enab...

CVE-2016-1167

Cross-site request forgery CSRF vulnerability on NEC Aterm WG300HP devices allows remote attackers to hijack the authentication of arbitrary users...

CVE-2016-1168

CVE-2016-1168 affects NEC Aterm WF800HP devices with firmware version 1.0.17 and earlier. The vulnerability is a Cross-site Request Forgery (CSRF) that can allow a logged-in user to be coerced into performing unintended actions when visiting a malicious page, potentially hijacking the user’s auth...

CVE-2016-1168

Cross-site request forgery CSRF vulnerability on NEC Aterm WF800HP devices with firmware 1.0.17 and earlier allows remote attackers to hijack the authentication of arbitrary users...

NEC Aterm WF800HP Cross-Site Request Forgery Vulnerability

The NEC Aterm WF800HP is a wireless router product from Nippon Electric NEC. A cross-site request forgery vulnerability exists in the NEC Aterm WF800HP using firmware Ver1.0.17 and earlier. An attacker can exploit this vulnerability to perform an unauthorized operation by tricking a logged-in use...

Aterm WF800HP vulnerable to cross-site request forgery

Overview Aterm WF800HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Satoshi Ogawa of Mitsui Bussan Secure Directions,Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

JVN#82020528: Aterm WG300HP vulnerable to cross-site request forgery

Aterm WG300HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Apply a Workaround The following workaround may mitigate the affects of this...

JVN#07818796: Aterm WF800HP vulnerable to cross-site request forgery

Aterm WF800HP provided by NEC Corporation contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Update the Firmware Update to the latest firmware version according to the information...

CVE-2016-1145

Directory traversal vulnerability in WebManager in NEC EXPRESSCLUSTER X through 3.3 11.31 on Windows and through 3.3 3.3.1-1 on Linux and Solaris allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2016-1145

The CVE-2016-1145 entry describes a directory traversal flaw in NEC EXPRESSCLUSTER X WebManager. Affected: EXPRESSCLUSTER X 3.3 for Windows (build 11.31) and WebManager 3.3 3.3.1-1 for Linux/Solaris. Impact: remote attacker can read arbitrary server files via unspecified vectors. Root cause: dire...