CVE-2017-10845

CVE-2017-10845 corresponds to a backdoor access issue in NTT DOCOMO Wi‑Fi STATION L-02F firmware (V10g and earlier). Multiple connected records confirm an unauthenticated remote attacker can gain administrative privileges and perform unintended operations via a backdoor account. The vulnerability...

CVE-2017-10846: Missing Authorization

Wi-Fi STATION L-02F Software version V10b and earlier allows remote attackers to bypass access restrictions to obtain information on device settings via unspecified vectors...

CVE-2017-10845: Undefined Security Weakness

Wi-Fi STATION L-02F Software version V10g and earlier allows remote attackers to access the device with administrative privileges and perform unintended operations through a backdoor account...

PT-2017-11553

Name of the Vulnerable Software and Affected Versions Wi-Fi STATION L-02F versions V10b and earlier Description The issue allows remote attackers to bypass access restrictions and obtain information on device settings. Recommendations For versions V10b and earlier, update to a version later than...

CVE-2017-1002026: Improper Neutralization of Special Elements used in an SQL Command

Vulnerability in wordpress plugin Event Expresso Free v3.1.37.11.L, The function editeventcategory does not sanitize user-supplied input via the $id parameter before passing it into an SQL statement...

NTT DOCOMO Wi-Fi STATION L-02F Software Access Privilege Vulnerability

NTT DOCOMO Wi-Fi STATION L-02F Software is a set of software used in routers from NTT DOCOMO Japan. A security vulnerability exists in NTT DOCOMO Wi-Fi STATION L-02F Software V10b and earlier versions. A remote attacker could exploit the vulnerability to bypass access restrictions and obtain devi...

Backdoor access issue in Wi-Fi STATION L-02F

Overview Wi-Fi STATION L-02F provided by NTT DOCOMO, INC. contains a backdoor access issue. Japan Computer Emergency Response Team Coordination Center Global Coordination Division Cyber Metrics Line Information Security Analyst Keisuke Shikano reported this vulnerability to IPA. JPCERT/CC...

CVE-2017-14116

The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with the tech account and an empty password, which allows remote attackers to obtain root privileges by establishing a session on port 49955 an...

Race condition

Race condition in the ioctl implementation in the Samsung Graphics 2D driver aka /dev/fimg2d in Samsung devices with Android L5.0/5.1 allows local users to trigger memory errors by leveraging definition of g2dlock and g2dunlock lock macros as no-ops, aka SVE-2015-4598...

CVE-2015-7891

Race condition in the ioctl implementation in the Samsung Graphics 2D driver aka /dev/fimg2d in Samsung devices with Android L5.0/5.1 allows local users to trigger memory errors by leveraging definition of g2dlock and g2dunlock lock macros as no-ops, aka SVE-2015-4598...

PT-2017-7292

Name of the Vulnerable Software and Affected Versions Samsung devices with Android L 5.0/5.1 Description A race condition exists in the ioctl implementation of the Samsung Graphics 2D driver, also known as /dev/fimg2d. This issue allows local users to cause memory errors by taking advantage of th...

CVE-2015-7891: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the ioctl implementation in the Samsung Graphics 2D driver aka /dev/fimg2d in Samsung devices with Android L5.0/5.1 allows local users to trigger memory errors by leveraging definition of g2dlock and g2dunlock lock macros as no-ops, aka SVE-2015-4598...

PT-2017-17787

Name of the Vulnerable Software and Affected Versions Cygwin versions 1.7.2 through 1.8.0 Description The issue is related to a buffer overflow vulnerability in the wcsxfrm and wcsxfrm l functions. This can result in a denial-of-service by crashing the process or potentially allow hijacking of th...

PT-2017-2901

Name of the Vulnerable Software and Affected Versions Wi-Fi STATION L-02F versions V10g and earlier Description The issue is related to inadequate access control, allowing remote attackers to access the device with administrative privileges. This can enable an attacker to perform unintended...

HPESBNS03755 rev.2 - HPE NonStop Server using Samba, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Access Restriction Bypass, Arbitrary Code Execution, Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Samba on NonStop L Series: T1201L01 through T1201L01^AAL, H and J Series: T1201H01 through T1201H01^AAM CVSS Scores: | CVE ...

CVE-2016-4854

Cross-site request forgery CSRF vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors...

CVE-2016-4854

Cross-site request forgery CSRF vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors...

CVE-2016-4854

Cross-site request forgery CSRF vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors...

CVE-2016-4854

CVE-2016-4854 is a Cross-Site Request Forgery vulnerability in LG Electronics L-04D wireless router firmware versions V10a/V10b. The flaw allows remote attackers to hijack the administrator’s authentication and perform arbitrary operations via unspecified vectors. Affected products: L-04D firmwar...

CVE-2016-4854: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in L-04D firmware version V10a and V10b allows remote attackers to hijack the authentication of administrators to perform arbitrary operations via unspecified vectors...