JVN#76382932: Robotic appliance COCOROBO vulnerable to session management

Robotic appliance COCOROBO provided by Sharp Corporation is a robot with cleaning function. Robotic appliance COCOROBO contains a vulnerability in session management CWE-639. Impact An attacker on the same LAN may impersonate a user to accessing product. As a result, there is a possibility that a...

sharp-cee.com XSS vulnerability

Open Bug Bounty ID: OBB-360937 Description| Value ---|--- Affected Website:| sharp-cee.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

Fedora 24 : libmtp (2017-d26266eb32)

libmtp 1.1.13 ============= Christophe Vu-Brugier 1 : - added GoPro HERO5 Black Emeric Grange 2 : - added GoPro HERO5 Session - rename F5321 into XPeria X Compact Gaute Hope 2 : - add GoPro Hero+ - add mtp-detect for GoPro Hero+ Jerry Zhang 1 : - Update Google device strings, add PTP+ADB id Marcu...

Sharp RW-5100 for Windows untrustworthy search path vulnerability (CNVD-2017-11056)

Sharp RW-5100 for Windows is a Windows-based tool for IC card readers from Sharp Japan that verifies the execution environment. An untrusted search path vulnerability exists in Sharp RW-5100 for Windows 7 version 1.1.0.0 and RW-5100 for Windows 8.1 version 1.2.0.0. An attacker can exploit this...

Sharp RW-4040 for Windows Untrusted Search Path Vulnerability

Sharp RW-4040 for Windows is a tool for Windows-based IC card readers from Sharp Japan that can be used to verify the execution environment. An untrustworthy search path vulnerability exists in Sharp RW-4040 for Windows version 7 1.2.0.0. An attacker can exploit this vulnerability to gain...

Sharp RW-5100 driver installer for Windows untrustworthy search path vulnerability (CNVD-2017-11055)

Sharp RW-5100 driver installer for Windows is a Windows-based driver installer for IC card readers from Sharp Japan. An untrustworthy search path vulnerability exists in the Sharp RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 version 1.0.1.0...

Sharp RW-4040 driver installer for Windows untrusted search path vulnerability

Sharp RW-4040 driver installer for Windows is a Windows-based driver installer for IC card readers from Sharp Japan. An untrusted search path vulnerability exists in Sharp RW-4040 driver installer for Windows 7 version 2.27. An attacker can exploit this vulnerability to gain privileges with a...

JVN#51274854: Multiple software for Sharp IC Card Reader/Writer Devices may insecurely load Dynamic Link Libraries

The tool to verify execution environment and the driver installer for IC Card Reader/Writer devices provided by Sharp Corporation contain an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege o...

PLAIN- Sharp(#) blog - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PLAIN- Sharp blog published at the 'play' market has multiple vulnerabilities...

Sharp AQUOS PhotoPlayer HN-PP150 Cross-Site Request Forgery Vulnerability

Sharp AQUOS PhotoPlayer HN-PP150 is a photo player product from Sharp Japan. The product offers slide show presentations, photo printing, and other features. A cross-site request forgery vulnerability exists in Sharp AQUOS PhotoPlayer HN-PP150 versions 1.02.00.04 through 1.03.01.04, which...

Sharp EVA Animator ActiveX Control Buffer Overflow Vulnerability

Sharp EVA Animeter is an anime and manga skin by the Japanese company Sharp. A buffer overflow vulnerability exists in the ActiveX control of Sharp EVA Animeter. A remote attacker can exploit this vulnerability to execute arbitrary code via a specially crafted web page...

CVE-2016-1176

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

Buffer overflow

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

CVE-2016-1176

CVE-2016-1176 is a buffer overflow vulnerability in the ActiveX control for Sharp EVA Animeter. Multiple connected records confirm that remote attackers could exploit this by steering a user to a malicious page to execute arbitrary code, via the EVA Animator ActiveX control. The known affected co...

CVE-2016-1176

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

JVN#47164236: AQUOS Photo Player HN-PP150 vulnerable to cross-site request forgery

AQUOS Photo Player HN-PP150 provided by Sharp Corporation contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page, information such as settings may be altered unintentionaly. Solution Update the Firmware Update to the latest firmware version according ...

JVN#41875357: ActiveX control for EVA Animator vulnerable to buffer overflow

ActiveX control for EVA Animator provided by Sharp Corporation contains a buffer overflow vulnerability. Impact If a user views a malicious page, arbitrary code may be executed. Solution Remove ActiveX control for EVA Animator The EVA Animator service ended and the related website for its service...

Learn to Sing - Sing Sharp - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Learn to Sing - Sing Sharp published at the 'play' market has multiple vulnerabilities...

Sharp Remote - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sharp Remote published at the 'play' market has multiple vulnerabilities...

sharp-world.com XSS vulnerability

Vulnerable URL: http://www.sharp-world.com/products/shsoven/contents/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...