EUVD-2015-3058

Malware in sbrugna...

EUVD-2015-3059

Malware in sbrugna...

Research Artisan Lite Security Bypass Vulnerability

Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A security vulnerability exists in Research Artisan Lite prior to version 1.18, which is caused by the program failing to properly perform authentication. A remot...

Research Artisan Lite Cross-Site Scripting Vulnerability

Research Artisan Lite is a set of tools developed by the Research Artisan project in Japan for statistical analysis of website visits. A cross-site scripting vulnerability exists in Research Artisan Lite versions prior to 1.18. The vulnerability can be exploited by remote attackers to inject...

Authentication flaw

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

CVE-2015-2975

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

CVE-2015-2975

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

CVE-2015-2975

The CVE-2015-2975 issue affects Research Artisan Lite prior to version 1.18. The root cause is improper authentication (CWE-592), allowing an attacker to perform operations without logging in. The impact is that remote attackers could execute unspecified actions via unknown vectors. Exploitation ...

PT-2015-6022

Name of the Vulnerable Software and Affected Versions Research Artisan Lite versions prior to 1.18 Description The issue allows remote attackers to perform unspecified actions due to a lack of authentication verification. Recommendations For Research Artisan Lite versions prior to 1.18, update to...

CVE-2015-2975: Undefined Security Weakness

Research Artisan Lite before 1.18 does not ensure that a user has authenticated, which allows remote attackers to perform unspecified actions via unknown vectors...

CVE-2015-2976

Multiple cross-site scripting XSS vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted HTML document or 2 a crafted URL that is mishandled during access-log analysis...

CVE-2015-2976

CVE-2015-2976 affects Research Artisan Lite prior to 1.18. The provided documents confirm multiple cross-site scripting (XSS) vulnerabilities (CWE-79) that can allow remote attackers to inject arbitrary scripts via either a crafted HTML document or a crafted URL processed during access-log analys...

CVE-2015-2976: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Research Artisan Lite before 1.18 allow remote attackers to inject arbitrary web script or HTML via 1 a crafted HTML document or 2 a crafted URL that is mishandled during access-log analysis...

PT-2015-6023

Name of the Vulnerable Software and Affected Versions Research Artisan Lite versions prior to 1.18 Description The issue allows remote attackers to inject arbitrary web script or HTML via a crafted HTML document or a crafted URL that is mishandled during access-log analysis. This can be achieved...

Research Artisan Lite does not properly perform authentication

Overview Research Artisan Lite provided by Research Artisan Project is an access analysis tool. Research Artisan Lite does not properly perform authentication CWE-592. Gen Sato of TRADE WORKS Co.,Ltd. Security Dept. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer unde...