98 matches found
DLL Hijacking Vulnerability in Cyberdocument Windows Client
Xunfei Document is an online document software that supports multiple people and multiple ends to edit at the same time, produced by KDDI. Xunfei Document windows client DLL hijacking vulnerability, an attacker can use the vulnerability in the client process to inject executable DLL file, to...
Sony keyaki_kddi has an unspecified vulnerability.
Sony keyakikddi is a smartphone from Sony Japan. Sony keyakikddi build fingerprint: Sony/keyakikddi/keyakikddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys has a security vulnerability in the com.kddi. android.packageinstaller app contains a security vulnerability. An attacker could exploit...
KDDI Smart TV Box Access Control Error Vulnerability
KDDI Smart TV Box is a smart TV box from KDDI Japan. An Access Control Error vulnerability exists in KDDI Smart TV Boxes using firmware versions prior to 1300, which stems from the program's failure to restrict access rights and can be exploited by remote attackers to perform arbitrary operations...
CVE-2018-0691
Multiple +Message Apps Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior to version 42.40.2800, NTT DOCOMO +Message App for iOS prior to version 1.1.23, KDDI +Message App for Android prior to...
JVN#37288228: +Message App fails to verify SSL server certificates
+Message App fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the information provided by the developer. Products Affected SoftBank...
JVN#70615027: The installer of Anshin net security for Windows may insecurely load Dynamic Link Libraries
Anshin net security for Windows provided by KDDI CORPORATION is an Internet Security suite. The installer of Anshin net security for Windows contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with...
kddi-hikari.com XSS vulnerability
Open Bug Bounty ID: OBB-444298 Description| Value ---|--- Affected Website:| kddi-hikari.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat...
KDDI E hears about information leakage vulnerability in client side
E Hearing Client is a professional English learning software. An information leakage vulnerability exists in KDDI E Hearing Client, which allows an attacker to obtain test packets and leak copyrighted question files through the client...
JVN#81659403: Installer of Qua station connection tool for Windows may insecurely load Dynamic Link Libraries
Qua station provided KDDI CORPORATION is a 4G LTE photostrage. Qua station connection tool is used to view data saved on Qua station from a PC and/or save data on a PC. Installer of Qua station connection tool for Windows contains an issue with the DLL search path, which may lead to insecurely...
HOME SPOT CUBE2 vulnerable to buffer overflow in WebUI
Overview HOME SPOT CUBE2 provided by KDDI CORPORATION is a wireless LAN router. HOME SPOT CUBE2 contains buffer overflow in WebUI. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...
KDDI HOME SPOT CUBE2 WebUI Authentication Bypass Vulnerability
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan.WebUI is one of the graphical user interfaces. An authentication bypass vulnerability exists in the WebUI in KDDI HOME SPOT CUBE2 using firmware version 101 and earlier. An attacker can exploit this vulnerability to bypass...
KDDI HOME SPOT CUBE2 WebUI OS Command Injection Vulnerability (CNVD-2017-14891)
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan.WebUI is one of the graphical user interfaces. An operating system command injection vulnerability exists in the WebUI of the KDDI HOME SPOT CUBE2 using firmware version 101 and earlier. A remote attacker can exploit this...
KDDI HOME SPOT CUBE WebUI Operating System Command Injection Vulnerability
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan.WebUI is one of the graphical user interfaces. An operating system command injection vulnerability exists in the WebUI of the KDDI HOME SPOT CUBE2 using firmware version 101 and earlier. A remote attacker can exploit this...
KDDI HOME SPOT CUBE2 WebUI Buffer Overflow Vulnerability
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan.WebUI is one of the graphical user interfaces. A buffer overflow vulnerability exists in the WebUI in KDDI HOME SPOT CUBE2 using firmware version 101 and earlier. An attacker can exploit the vulnerability to execute arbitrary...
KDDI HOME SPOT CUBE devices CRLF Injection Vulnerability
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A CRLF injection vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker can exploit this vulnerability to inject arbitrary HTTP headers...
KDDI HOME SPOT CUBE devices open redirection vulnerability
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. An open redirection vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker can exploit this vulnerability to redirect users to an arbitrary web site to conduct phishing attacks...
KDDI HOME SPOT CUBE devices Cross-Site Request Forgery Vulnerability
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A cross-site request forgery vulnerability exists in previous versions of KDDI HOME SPOT CUBE 2. A remote attacker can exploit this vulnerability to perform unauthorized operations...
KDDI HOME SPOT CUBE devices cross-site scripting vulnerability
KDDI HOME SPOT CUBE is a home wireless router product from KDDI Japan. A cross-site scripting vulnerability exists in KDDI HOME SPOT CUBE 2, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to gain access to sensitive informatio...
