Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2016-7806 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.029Z Vendors: I-O DATA DEVICE, INC. Products: WFS-SR01 Problem Types: OS Command Injection Description: I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN18228200/index.html - http://www.securityfocus.com/bid/94089 - http://www.iodata.jp/support/information/2016/wfs-sr01/
CVE ID: CVE-2016-7807 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:55.987Z Vendors: I-O DATA DEVICE, INC. Products: WFS-SR01 Problem Types: Fails to restrict access Description: I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into the product via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN18228200/index.html - http://www.securityfocus.com/bid/94089 - http://www.iodata.jp/support/information/2016/wfs-sr01/
CVE ID: CVE-2016-7808 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.106Z Vendors: Corega Inc Products: CG-WLBARGMH, CG-WLBARGNL Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://corega.jp/support/security/20161111_wlbargmh_wlbargnl.htm - https://jvn.jp/en/jp/JVN25060672/index.html - http://www.securityfocus.com/bid/94249
CVE ID: CVE-2016-7809 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:55.992Z Vendors: Corega Inc Products: CG-WLR300NX Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN23823838/index.html - http://corega.jp/support/security/20161111_wlr300nx.htm - http://www.securityfocus.com/bid/94248
CVE ID: CVE-2016-7810 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.081Z Vendors: Corega Inc Products: CG-WLR300NX Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN92237169/index.html - http://corega.jp/support/security/20161111_wlr300nx.htm - http://www.securityfocus.com/bid/94248
CVE ID: CVE-2016-7811 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.094Z Vendors: Corega Inc Products: CG-WLR300NX Problem Types: Fails to restrict access Description: Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN23549283/index.html - http://corega.jp/support/security/20161111_wlr300nx.htm - http://www.securityfocus.com/bid/94248
CVE ID: CVE-2016-7812 State: PUBLISHED Published: 2017-08-02T16:00:00 Last Updated: 2024-08-06T02:04:56.096Z Vendors: The Bank of Tokyo-Mitsubishi UFJ, Ltd. Products: The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android Problem Types: Untrusted search path vulnerability Description: The Bank of Tokyo-Mitsubishi UFJ, Ltd. App for Android ver5.3.1, ver5.2.2 and earlier allow a man-in-the-middle attacker to downgrade the communication between the app and the server from TLS v1.2 to SSL v3.0, which may result in the attacker to eavesdrop on an encrypted communication. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU92900492/ - http://www.securityfocus
nal Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/vu/JVNVU92900492/ - http://www.securityfocus.com/bid/94829
CVE ID: CVE-2016-7813 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.028Z Vendors: TEAM DERAEMONS Products: DERAEMON-CMS Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the parameters hostname, database and username. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94320 - http://emon-cms.com/new11 - https://jvn.jp/en/jp/JVN75396659/index.html
CVE ID: CVE-2016-7814 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.032Z Vendors: I-O DATA DEVICE, INC. Products: TS-WRLP, TS-WRLA Problem Types: Information Disclosure Description: I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtain authentication credentials via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94250 - http://www.iodata.jp/support/information/2016/ts-wrlap/ - https://jvn.jp/en/jp/JVN34103586/index.html
CVE ID: CVE-2016-7815 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-06T02:04:56.073Z Vendors: Cybozu, Inc. Products: Remote Service Manager Problem Types: Fails to verify client certificates Description: Remote Service Manager 3.0.0 to 3.1.4 fails to verify client certificates, which may allow remote attackers to gain access to systems on the network. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95379 - http://jvn.jp/en/jp/JVN19241292/index.html - https://support.cybozu.com/ja-jp/article/9689
CVE ID: CVE-2016-7816 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.029Z Vendors: Cybozu, Inc. Products: kintone mobile for Android Problem Types: Fails to verify SSL certificates Description: The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN20252219/index.html - http://www.securityfocus.com/bid/94547 - https://support.cybozu.com/ja-jp/article/9719
CVE ID: CVE-2016-7817 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.021Z Vendors: LEMON-S PHP Products: Simple keitai chat Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Simple keitai chat 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN05493467/index.html - http://www.securityfocus.com/bid/94537
CVE ID: CVE-2016-7818 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.077Z Vendors: Japan Pension Service Products: Intstaller for Specification check program(social insurance), Intstaller for TODOKESHO print program, Intstaller for Device data encryption program, Intstaller for TODOKESHO creation program Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in Installers for Specification check program (social insurance) Ver. 9.00 and earlier, TODOKESHO print program Ver. 5.00 and earlier, Device data encryption program Ver. 1.00 and earlier, and TODOKESHO creation program Ver. 15.00 and earlier available prior
ce data encryption program Ver. 1.00 and earlier, and TODOKESHO creation program Ver. 15.00 and earlier available prior to October 17, 2016 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - http://www.nenkin.go.jp/denshibenri/setsumei/20150105-03.html - http://www.nenkin.go.jp/denshibenri/setsumei/20140630.html - http://www.nenkin.go.jp/denshibenri/setsumei/0104.html - http://www.securityfocus.com/bid/94616 - http://www.nenkin.go.jp/denshibenri/setsumei/20150415.html#cmscheck - https://jvn.jp/en/jp/JVN08868688/index.html
CVE ID: CVE-2016-7819 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.136Z Vendors: I-O DATA DEVICE, INC. Products: TS-WRLP, TS-WRLA Problem Types: OS Command Injection Description: I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94594 - http://www.iodata.jp/support/information/2016/ts-wrlap_2/ - https://jvn.jp/en/jp/JVN25059363/index.html
CVE ID: CVE-2016-7820 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.028Z Vendors: I-O DATA DEVICE, INC. Products: TS-WRLP, TS-WRLA Problem Types: Buffer Overflow Description: Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to cause a denial-of-service (DoS) or execute arbitrary code via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94594 - http://www.iodata.jp/support/information/2016/ts-wrlap_2/ - https://jvn.jp/en/jp/JVN25059363/index.html
CVE ID: CVE-2016-7821 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.024Z Vendors: BUFFALO INC. Products: WNC01WH Problem Types: Denial-of-service (DoS) Description: Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN40613060/index.html - http://buffalo.jp/support_s/s20161201.html - http://www.securityfocus.com/bid/94648
CVE ID: CVE-2016-7822 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.103Z Vendors: BUFFALO INC. Products: WNC01WH Problem Types: Cross-site request forgery Description: Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN40613060/index.html - http://buffalo.jp/support_s/s20161201.html - http://www.securityfocus.com/bid/94648
CVE ID: CVE-2016-7823 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.055Z Vendors: BUFFALO INC. Products: WNC01WH Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN40613060/index.html - http://buffalo.jp/support_s/s20161201.html - http://www.securityfocus.com/bid/94648
CVE ID: CVE-2016-7824 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.104Z Vendors: BUFFALO INC. Products: WNC01WH Problem Types: Fails to restrict access Description: Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN40613060/index.html - http://buffalo.jp/support_s/s20161201.html - http://www.securityfocus.com/bid/94648
CVE ID: CVE-2016-7825 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.054Z Vendors: BUFFALO INC. Products: WNC01WH Problem Types: Directory traversal Description: Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN40613060/index.html - http://buffalo.jp/support_s/s20161201.html - http://www.securityfocus.com/bid/94648
CVE ID: CVE-2016-7826 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.025Z Vendors: BUFFALO INC. Products: WNC01WH Problem Types: Directory traversal Description: Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN40613060/index.html - http://buffalo.jp/support_s/s20161201.html - http://www.securityfocus.com/bid/94648
CVE ID: CVE-2016-7827 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7828 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7829 State: REJECTED Published: 2017-05-11T14:01:00 Last Updated: 2017-05-11T13:57:01 Description: No description available.
CVE ID: CVE-2016-7830 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.072Z Vendors: Sony Corporation Products: PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C, PCS-XC1 Problem Types: Authentication bypass Description: Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.sony.co.uk/pro/support/attachment/123749
s. Additional Analyst Notes: - CVE Program Container: References: - https://www.sony.co.uk/pro/support/attachment/1237494431832/1237494431864/videoconferencesecurityenhancement-v3.pdf - https://jvn.jp/en/jp/JVN42070907/index.html
CVE ID: CVE-2016-7831 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.180Z Vendors: Fenrir Inc. Products: Sleipnir 4 Black Edition for Mac, Sleipnir 4 for Mac Problem Types: User Interface (UI) Misrepresentation of Information Description: Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier (Mac App Store) may allow a remote attacker to spoof the URL display via a specially crafted webpage. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/94830 - https://jvn.jp/en/jp/JVN28151745/index.html
CVE ID: CVE-2016-7832 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.096Z Vendors: Cybozu, Inc. Products: Cybozu Dezie Problem Types: Fails to restrict access Description: Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://support.cybozu.com/ja-jp/article/9742 - https://jvn.jp/en/jp/JVN16781735/index.html - http://www.securityfocus.com/bid/94831
CVE ID: CVE-2016-7833 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.097Z Vendors: Cybozu, Inc. Products: Cybozu Dezie Problem Types: Fails to restrict access Description: Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN16781735/index.html - http://www.securityfocus.com/bid/94831 - https://support.cybozu.com/ja-jp/article/9741
CVE ID: CVE-2016-7834 State: PUBLISHED Published: 2017-04-13T17:00:00 Last Updated: 2024-08-06T02:04:56.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: SONY SNC-CH115, SNC-CH120, SNC-CH160, SNC-CH220, SNC-CH260, SNC-DH120, SNC-DH120T, SNC-DH160, SNC-DH220, SNC-DH220T, SNC-DH260, SNC-EB520, SNC-EM520, SNC-EM521, SNC-ZB550, SNC-ZM550, SNC-ZM551, SNC-EP550, SNC-EP580, SNC-ER550, SNC-ER550C, SNC-ER580, SNC-ER585, SNC-ER585H, SNC-ZP550, SNC-ZR550, SNC-EP520, SNC-EP521, SNC-ER520, SNC-ER521, SNC-ER521C network cameras with firmware before Ver.1.86.00 and SONY SNC-CX600, SNC-CX600W, SNC-EB600, SNC-EB600B, SNC-EB602R, SNC-EB630, SNC-EB630B, SNC-EB632R, SNC-EM600, SNC-EM601, SNC-EM602
CX600, SNC-CX600W, SNC-EB600, SNC-EB600B, SNC-EB602R, SNC-EB630, SNC-EB630B, SNC-EB632R, SNC-EM600, SNC-EM601, SNC-EM602R, SNC-EM602RC, SNC-EM630, SNC-EM631, SNC-EM632R, SNC-EM632RC, SNC-VB600, SNC-VB600B, SNC-VB600B5, SNC-VB630, SNC-VB6305, SNC-VB6307, SNC-VB632D, SNC-VB635, SNC-VM600, SNC-VM600B, SNC-VM600B5, SNC-VM601, SNC-VM601B, SNC-VM602R, SNC-VM630, SNC-VM6305, SNC-VM6307, SNC-VM631, SNC-VM632R, SNC-WR600, SNC-WR602, SNC-WR602C, SNC-WR630, SNC-WR632, SNC-WR632C, SNC-XM631, SNC-XM632, SNC-XM636, SNC-XM637, SNC-VB600L, SNC-VM600L, SNC-XM631L, SNC-WR602CL network cameras with firmware before Ver.2.7.2 are prone to sensitive information disclosure. This may allow an attacker on the same l
s with firmware before Ver.2.7.2 are prone to sensitive information disclosure. This may allow an attacker on the same local network segment to login to the device with administrative privileges and perform operations on the device. Additional Analyst Notes: - CVE Program Container: References: - https://www.sony.co.uk/pro/article/sony-new-firmware-for-network-cameras - https://jvn.jp/en/vu/JVNVU96435227/index.html
CVE ID: CVE-2016-7835 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.138Z Vendors: Kazuho Oku Products: H2O Problem Types: Use-after-free Description: Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95061 - https://github.com/h2o/h2o/issues/1144 - https://jvn.jp/en/jp/JVN44566208/index.html
CVE ID: CVE-2016-7836 State: PUBLISHED Published: 2017-06-09T16:00:00.000Z Last Updated: 2025-10-21T23:55:39.910Z Vendors: Sky Co., LTD. Products: SKYSEA Client View Problem Types: Remote code execution Description: SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.skyseaclientview.net/news/161221/ - https://www.skygroup.jp/security-info/170308.html - https://jvn.jp/en/jp/JVN84995847/index.html - http://www.securityfocus.com/bid/95062
CVE ID: CVE-2016-7837 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.096Z Vendors: BlueZ Project Products: BlueZ Problem Types: Buffer Overflow Description: Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN38755305/index.html - https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=8514068150759c1d6a46d4605d2351babfde1601 - http://www.securityfocus.com/bid/95067 - https://usn.ubuntu.com/4311-1/
CVE ID: CVE-2016-7838 State: PUBLISHED Published: 2017-06-09T16:00:00 Last Updated: 2024-08-06T02:04:56.130Z Vendors: WinSparkle Products: WinSparkle Problem Types: Untrusted search path vulnerability Description: Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory. Additional Analyst Notes: - CVE Program Container: References: - https://jvn.jp/en/jp/JVN96681653/index.html - https://www.wireshark.org/news/20161214.html - https://github.com/vslavik/winsparkle/commit/bb454857348245a7397f9e4fbb3a902f4ac25913 - https://jvn.jp/en/jp/JVN90813656/index.html - h
com/vslavik/winsparkle/commit/bb454857348245a7397f9e4fbb3a902f4ac25913 - https://jvn.jp/en/jp/JVN90813656/index.html - http://www.securityfocus.com/bid/95099
CVE ID: CVE-2016-7839 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-06T02:04:56.137Z Vendors: Olive Design Products: Olive Blog Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Olive Blog allows remote attackers to inject arbitrary web script or HTML via the search parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95309 - http://jvn.jp/en/jp/JVN60879379/index.html
CVE ID: CVE-2016-7840 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-06T02:04:56.139Z Vendors: Olive Design Products: WEB SCHEDULE Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in WEB SCHEDULE allows remote attackers to inject arbitrary web script or HTML via the month parameter. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN12124922/index.html - http://www.securityfocus.com/bid/95312
CVE ID: CVE-2016-7841 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-06T02:04:56.032Z Vendors: Olive Design Products: Olive Diary DX Problem Types: Cross-site scripting Description: Cross-site scripting vulnerability in Olive Diary DX allows remote attackers to inject arbitrary web script or HTML via the page parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95314 - http://jvn.jp/en/jp/JVN71538099/index.html
CVE ID: CVE-2016-7842 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-06T02:04:56.179Z Vendors: HiBARA Software Products: AttacheCase Problem Types: Directory traversal Description: Directory traversal vulnerability in AttacheCase 2.8.2.8 and earlier and 3.2.0.4 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95450 - https://hibara.org/software/attachecase/ - http://jvn.jp/en/jp/JVN83917769/index.html
CVE ID: CVE-2016-7843 State: PUBLISHED Published: 2017-04-28T16:00:00 Last Updated: 2024-08-06T02:04:56.201Z Vendors: MaruUo Factory Products: AttacheCase for Java, AttacheCase Lite, AttacheCase Pro Problem Types: Directory traversal Description: Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file. Additional Analyst Notes: - CVE Program Container: References: - http://jvn.jp/en/jp/JVN28331227/index.html - http://www.securityfocus.com/bid/95445 - http://maruuofactory.life.coocan.jp/attachecase/#pathTraversal