Design/Logic Flaw

NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1228

Cross-site request forgery CSRF vulnerability on NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allows remote attackers to hijack the...

CVE-2016-1227

NTT EAST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1006 and earlier and NTT WEST Hikari Denwa routers with firmware PR-400MI, RT-400MI, and RV-440MI 07.00.1005 and earlier allow remote authenticated users to execute arbitrary OS commands via unspecified vectors...

CVE-2016-1227

CVE-2016-1227 describes an OS command injection (CWE-78) in several Hikari Denwa routers. A logged-in attacker could execute arbitrary OS commands on affected devices: NTT EAST PR-400MI/RT-400MI/RV-440MI (firmware 07.00.1006 and earlier) and NTT WEST PR-400MI/RT-400MI/RV-440MI (firmware 07.00.100...

CVE-2016-1228

CVE-2016-1228 corresponds to a cross-site request forgery (CSRF) vulnerability in NTT Hikari Denwa routers. Affected products include NTT EAST Hikari Denwa PR-400MI, RT-400MI, and RV-440MI with firmware 07.00.1006 and earlier, and NTT WEST Hikari Denwa PR-400MI, RT-400MI, and RV-440MI with firmwa...

Multiple NTT Hikari Denwa Products Cross-Site Request Forgery Vulnerabilities

The NTT Hikari Denwa PR-400MI, RV-440MI and RT-400MI are all router products from Nippon Telegraph and Telephone NTT. A cross-site request forgery vulnerability exists in multiple NTT Hikari Denwa products. An attacker could exploit this vulnerability to perform unauthorized operations...

CVE-2016-4811

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...

CVE-2016-4811

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...

Design/Logic Flaw

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...

CVE-2016-4811

CVE-2016-4811 affects NTT Broadband Platform Japan Connected-free Wi‑Fi apps: Android up to 1.15.1 and iOS up to 1.13.0. A MITM attacker can execute arbitrary API calls, gaining API access. Impact: arbitrary API execution on affected Android/iOS clients. Remediation: update to the latest version ...

CVE-2016-4811

The NTT Broadband Platform Japan Connected-free Wi-Fi application 1.15.1 and earlier for Android and 1.13.0 and earlier for iOS allows man-in-the-middle attackers to obtain API access via unspecified vectors...

Design/Logic Flaw

NTT Data TERASOLUNA Server Framework for JavaWEB 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname...

CVE-2016-1183

The CVE-2016-1183 entry affects TERASOLUNA Server Framework for Java(WEB) versions 2.0.0.1 through 2.0.6.1. According to the connected sources, a vulnerability exists in the file-extension restriction mechanism of the framework, allowing a remote attacker to bypass the filter via a specially craf...

CVE-2016-1183

NTT Data TERASOLUNA Server Framework for JavaWEB 2.0.0.1 through 2.0.6.1, as used in Fujitsu Interstage Business Application Server and other products, allows remote attackers to bypass a file-extension protection mechanism, and consequently read arbitrary files, via a crafted pathname...

JVN#74659077: TERASOLUNA Server Framework for Java(WEB) access restriction bypass vulnerability in the file extention filter

The TERASOLUNA Server Framework for JavaWEB provided by NTT Data Corporation is a software framework for creating web applications. The TERASOLUNA Server Framework for JavaWEB has a function to restrict access to contents with specified file extentions from browser requests. This function may be...

CVE-2016-1230

Cross-site scripting XSS vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1230

Cross-site scripting XSS vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-1230

The CVE-2016-1230 entry concerns WebARENA Service formmail by NTT PC Communications, with an XSS vulnerability in formmail before 2.2.1. The connected sources (e.g., JVN entries and CNVD/NVD records) confirm a cross-site scripting flaw (CWE-79) affecting formmail 2.2 and earlier, allowing an atta...

JVN#46888319: Japan Connected-free Wi-Fi vulnerable to API execution

Japan Connected-free Wi-Fi provided by NTT Broadband Platform, Inc. contains a vulnerability which allows an arbitrary API to be executed by a man-in-the-middle attacker. Impact Android version of this app may allow an arbitrary API to be executed if permissions to execute that API are granted in...