JVN#51274854: Multiple software for Sharp IC Card Reader/Writer Devices may insecurely load Dynamic Link Libraries

The tool to verify execution environment and the driver installer for IC Card Reader/Writer devices provided by Sharp Corporation contain an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege o...

PLAIN- Sharp(#) blog - Customized SSL, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PLAIN- Sharp blog published at the 'play' market has multiple vulnerabilities...

Sharp EVA Animator ActiveX Control Buffer Overflow Vulnerability

Sharp EVA Animeter is an anime and manga skin by the Japanese company Sharp. A buffer overflow vulnerability exists in the ActiveX control of Sharp EVA Animeter. A remote attacker can exploit this vulnerability to execute arbitrary code via a specially crafted web page...

Sharp AQUOS PhotoPlayer HN-PP150 Cross-Site Request Forgery Vulnerability

Sharp AQUOS PhotoPlayer HN-PP150 is a photo player product from Sharp Japan. The product offers slide show presentations, photo printing, and other features. A cross-site request forgery vulnerability exists in Sharp AQUOS PhotoPlayer HN-PP150 versions 1.02.00.04 through 1.03.01.04, which...

CVE-2016-1176

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

Buffer overflow

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

CVE-2016-1176

Buffer overflow in the ActiveX control in Sharp EVA Animeter allows remote attackers to execute arbitrary code via a crafted web page...

CVE-2016-1176

CVE-2016-1176 is a buffer overflow vulnerability in the ActiveX control for Sharp EVA Animeter. Multiple connected records confirm that remote attackers could exploit this by steering a user to a malicious page to execute arbitrary code, via the EVA Animator ActiveX control. The known affected co...

JVN#41875357: ActiveX control for EVA Animator vulnerable to buffer overflow

ActiveX control for EVA Animator provided by Sharp Corporation contains a buffer overflow vulnerability. Impact If a user views a malicious page, arbitrary code may be executed. Solution Remove ActiveX control for EVA Animator The EVA Animator service ended and the related website for its service...

JVN#47164236: AQUOS Photo Player HN-PP150 vulnerable to cross-site request forgery

AQUOS Photo Player HN-PP150 provided by Sharp Corporation contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page, information such as settings may be altered unintentionaly. Solution Update the Firmware Update to the latest firmware version according ...

Learn to Sing - Sing Sharp - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Learn to Sing - Sing Sharp published at the 'play' market has multiple vulnerabilities...

Sharp Remote - Customized SSL, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Sharp Remote published at the 'play' market has multiple vulnerabilities...

sharp-world.com XSS vulnerability

Vulnerable URL: http://www.sharp-world.com/products/shsoven/contents/flashdetection.swf?flashContentURL=javascript:alert/XSSPOSED/ Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank|...

夏普 Sharp MX-M264FP 复印机未授权访问

No description provided by source...

sharpbusiness.com XSS vulnerability

Vulnerable URL: http://www.sharpbusiness.com/cps/rde/xchg/sbs-uk/hs.xsl/-/html/search.htm?q=netizen01k%22+autofocus+onfocus%3Dalert%28%2FXSSPOSED%2F%29+%22 Details: Description| Value ---|--- Patched:| Yes, at 31.03.2017 Latest check for patch:| 31.03.2017 10:29 GMT Vulnerability type:| XSS...

Mozilla Maintenance Service Log File Overwrite Elevation of Privilege

Source: https://code.google.com/p/google-security-research/issues/detail?id=427&can=1 Mozilla Maintenance Service: Log File Overwrite Elevation of Privilege Platform: Windows Version: Mozilla Firefox 38.0.5 Class: Elevation of Privilege Summary: The maintenance service creates a log file in a use...

CVE-2014-7252

Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT DOCOMO ARROWS Tab LTE F-01D, ARROWS X LTE F-05D, Disney Mobile on docomo F-08D, REGZA Phone T-01D, and PRADA phone by LG L-02D; and SoftBank SHARP handsets 102SH allow local user...

Input validation

Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT DOCOMO ARROWS Tab LTE F-01D, ARROWS X LTE F-05D, Disney Mobile on docomo F-08D, REGZA Phone T-01D, and PRADA phone by LG L-02D; and SoftBank SHARP handsets 102SH allow local user...

CVE-2014-7252

The CVE-2014-7252 entry relates to multiple improper data validation vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processors. The Syslink driver, used in devices such as NTT DOCOMO ARROWS and SoftBank SHARP handsets, allows local users to execute arbitrary code or read ...

CVE-2014-7252

Multiple unspecified vulnerabilities in the Syslink driver for Texas Instruments OMAP mobile processor, as used on NTT DOCOMO ARROWS Tab LTE F-01D, ARROWS X LTE F-05D, Disney Mobile on docomo F-08D, REGZA Phone T-01D, and PRADA phone by LG L-02D; and SoftBank SHARP handsets 102SH allow local user...