deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2016-7801
Published: 2017-06-09
Description: Cybozu Garoon 3.0.0 to 4.2.2 allows remote attackers to bypass access restrictions to delete other users' To-Dos via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94966; https://jvn.jp/en/jp/JVN14631222/index.html; https://support.cybozu.com/ja-jp/article/9437
CVE: CVE-2016-7802
Published: 2017-06-09
Description: Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.securityfocus.com/bid/94967; https://jvn.jp/en/jp/JVN16200242/index.html; https://support.cybozu.com/ja-jp/article/9561
CVE: CVE-2016-7803
Published: 2017-06-09
Description: SQL injection vulnerability in the Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to execute arbitrary SQL commands via "MultiReport" function.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://www.securityfocus.com/bid/94974; https://jvn.jp/en/jp/JVN17980240/index.html; https://support.cybozu.com/ja-jp/article/9447
CVE: CVE-2016-7805
Published: 2017-06-09
Description: The mobiGate App for Android version 2.2.1.2 and earlier and mobiGate App for iOS version 2.2.4.1 and earlier do not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.securityfocus.com/bid/94085; https://jvn.jp/en/jp/JVN27260483/index.html; http://www.securityfocus.com/bid/94085
CVE: CVE-2016-7806
Published: 2017-06-09
Description: I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-78
References: http://www.iodata.jp/support/information/2016/wfs-sr01/; http://www.securityfocus.com/bid/94089; https://jvn.jp/en/jp/JVN18228200/index.html
CVE: CVE-2016-7807
Published: 2017-06-09
Description: I-O DATA DEVICE WFS-SR01 firmware version 1.10 and earlier allow remote attackers to bypass access restriction to access data on storage devices inserted into the product via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www.iodata.jp/support/information/2016/wfs-sr01/; http://www.securityfocus.com/bid/94089; https://jvn.jp/en/jp/JVN18228200/index.html
CVE: CVE-2016-7808
Published: 2017-06-09
Description: Cross-site scripting vulnerability in Corega CG-WLBARGMH and CG-WLBARGNL allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://corega.jp/support/security/20161111_wlbargmh_wlbargnl.htm; http://www.securityfocus.com/bid/94249; https://jvn.jp/en/jp/JVN25060672/index.html
CVE: CVE-2016-7809
Published: 2017-06-09
Description: Cross-site request forgery (CSRF) vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows remote attackers to hijack the authentication of logged in user to conduct unintended operations via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://corega.jp/support/security/20161111_wlr300nx.htm; http://www.securityfocus.com/bid/94248; https://jvn.jp/en/jp/JVN23823838/index.html
CVE: CVE-2016-7810
Published: 2017-06-09
Description: Cross-site scripting vulnerability in Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.8 (MEDIUM)
CWE: CWE-79
References: http://corega.jp/support/security/20161111_wlr300nx.htm; http://www.securityfocus.com/bid/94248; https://jvn.jp/en/jp/JVN92237169/index.html
CVE: CVE-2016-7811
Published: 2017-06-09
Description: Corega CG-WLR300NX firmware Ver. 1.20 and earlier allows an attacker on the same network segment to bypass access restriction to perform arbitrary operations via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://corega.jp/support/security/20161111_wlr300nx.htm; http://www.securityfocus.com/bid/94248; https://jvn.jp/en/jp/JVN23549283/index.html
CVE: CVE-2016-7813
Published: 2017-06-09
Description: Cross-site scripting vulnerability in DERAEMON-CMS version 0.8.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the parameters hostname, database and username.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://emon-cms.com/new11; http://www.securityfocus.com/bid/94320; https://jvn.jp/en/jp/JVN75396659/index.html
CVE: CVE-2016-7814
Published: 2017-06-09
Description: I-O DATA DEVICE TS-WRLP firmware version 1.00.01 and earlier and TS-WRLA firmware version 1.00.01 and earlier allow remote attackers to obtain authentication credentials via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: http://www.iodata.jp/support/information/2016/ts-wrlap/; http://www.securityfocus.com/bid/94250; https://jvn.jp/en/jp/JVN34103586/index.html
CVE: CVE-2016-7816
Published: 2017-06-09
Description: The Cybozu kintone mobile for Android 1.0.6 and earlier does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-295
References: http://www.securityfocus.com/bid/94547; https://jvn.jp/en/jp/JVN20252219/index.html; https://support.cybozu.com/ja-jp/article/9719
CVE: CVE-2016-7817
Published: 2017-06-09
Description: Cross-site scripting vulnerability in Simple keitai chat 2.0 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/94537; https://jvn.jp/en/jp/JVN05493467/index.html; http://www.securityfocus.com/bid/94537
CVE: CVE-2016-7818
Published: 2017-06-09
Description: Untrusted search path vulnerability in Installers for Specification check program (social insurance) Ver. 9.00 and earlier, TODOKESHO print program Ver. 5.00 and earlier, Device data encryption program Ver. 1.00 and earlier, and TODOKESHO creation program Ver. 15.00 and earlier available prior to October 17, 2016 allows remote attackers to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-264
References: http://www.nenkin.go.jp/denshibenri/setsumei/0104.html; http://www.nenkin.go.jp/denshibenri/setsumei/20140630.html; http://www.nenkin.go.jp/denshibenri/setsumei/20150105-03.html
CVE: CVE-2016-7819
Published: 2017-06-09
Description: I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to execute arbitrary OS commands via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-78
References: http://www.iodata.jp/support/information/2016/ts-wrlap_2/; http://www.securityfocus.com/bid/94594; https://jvn.jp/en/jp/JVN25059363/index.html
CVE: CVE-2016-7820
Published: 2017-06-09
Description: Buffer overflow in I-O DATA DEVICE TS-WRLP firmware version 1.01.02 and earlier and TS-WRLA firmware version 1.01.02 and earlier allows an attacker with administrator rights to cause a denial-of-service (DoS) or execute arbitrary code via unspecified vectors.
CVSS Score: 7.2 (HIGH)
CWE: CWE-119
References: http://www.iodata.jp/support/information/2016/ts-wrlap_2/; http://www.securityfocus.com/bid/94594; https://jvn.jp/en/jp/JVN25059363/index.html
CVE: CVE-2016-7821
Published: 2017-06-09
Description: Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allow remote attackers to cause a denial of service against the management screen via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-20
References: http://buffalo.jp/support_s/s20161201.html; http://www.securityfocus.com/bid/94648; https://jvn.jp/en/jp/JVN40613060/index.html
CVE: CVE-2016-7822
Published: 2017-06-09
Description: Cross-site request forgery (CSRF) vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows remote attackers to hijack the authentication of a logged in user to perform unintended operations via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://buffalo.jp/support_s/s20161201.html; http://www.securityfocus.com/bid/94648; https://jvn.jp/en/jp/JVN40613060/index.html
CVE: CVE-2016-7823
Published: 2017-06-09
Description: Cross-site scripting vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://buffalo.jp/support_s/s20161201.html; http://www.securityfocus.com/bid/94648; https://jvn.jp/en/jp/JVN40613060/index.html
CVE: CVE-2016-7824
Published: 2017-06-09
Description: Buffalo NC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to bypass access restriction to enable the debug option via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: http://buffalo.jp/support_s/s20161201.html; http://www.securityfocus.com/bid/94648; https://jvn.jp/en/jp/JVN40613060/index.html
CVE: CVE-2016-7825
Published: 2017-06-09
Description: Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://buffalo.jp/support_s/s20161201.html; http://www.securityfocus.com/bid/94648; https://jvn.jp/en/jp/JVN40613060/index.html
CVE: CVE-2016-7826
Published: 2017-06-09
Description: Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://buffalo.jp/support_s/s20161201.html; http://www.securityfocus.com/bid/94648; https://jvn.jp/en/jp/JVN40613060/index.html
CVE: CVE-2016-7830
Published: 2017-06-09
Description: Sony PCS-XG100, PCS-XG100S, PCS-XG100C, PCS-XG77, PCS-XG77S, PCS-XG77C devices with firmware versions prior to Ver.1.51 and PCS-XC1 devices with firmware version prior to Ver.1.22 allow an attacker on the same network segment to bypass authentication to perform administrative operations via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-306
References: https://jvn.jp/en/jp/JVN42070907/index.html; https://www.sony.co.uk/pro/support/attachment/[PII_REDACTED]32/[PII_REDACTED]64/videoconferencesecurityenhancement-v3.pdf; https://jvn.jp/en/jp/JVN42070907/index.html
CVE: CVE-2016-7831
Published: 2017-06-09
Description: Sleipnir 4 Black Edition for Mac 4.5.3 and earlier and Sleipnir 4 for Mac 4.5.3 and earlier (Mac App Store) may allow a remote attacker to spoof the URL display via a specially crafted webpage.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-601
References: http://www.securityfocus.com/bid/94830; https://jvn.jp/en/jp/JVN28151745/index.html; http://www.securityfocus.com/bid/94830
CVE: CVE-2016-7832
Published: 2017-06-09
Description: Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to obtain an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.securityfocus.com/bid/94831; https://jvn.jp/en/jp/JVN16781735/index.html; https://support.cybozu.com/ja-jp/article/9742
CVE: CVE-2016-7833
Published: 2017-06-09
Description: Cybozu Dezie 8.0.0 to 8.1.1 allows remote attackers to bypass access restrictions to delete an arbitrary DBM (Cybozu Dezie proprietary format) file via unspecified vectors.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: http://www.securityfocus.com/bid/94831; https://jvn.jp/en/jp/JVN16781735/index.html; https://support.cybozu.com/ja-jp/article/9741
CVE: CVE-2016-7835
Published: 2017-06-09
Description: Use-after-free vulnerability in H2O allows remote attackers to cause a denial-of-service (DoS) or obtain server certificate private keys and possibly other information.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-416
References: http://www.securityfocus.com/bid/95061; https://github.com/h2o/h2o/issues/1144; https://jvn.jp/en/jp/JVN44566208/index.html
CVE: CVE-2016-7836
Published: 2017-06-09
Description: SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on the TCP connection with the management console program.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/95062; http://www.skyseaclientview.net/news/161221/; https://jvn.jp/en/jp/JVN84995847/index.html
CVE: CVE-2016-7837
Published: 2017-06-09
Description: Buffer overflow in BlueZ 5.41 and earlier allows an attacker to execute arbitrary code via the parse_line function used in some userland utilities.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: http://www.securityfocus.com/bid/95067; https://git.kernel.org/pub/scm/bluetooth/bluez.git/commit/?id=[PII_REDACTED]759c1d6a46d4605d2351babfde1601; https://jvn.jp/en/jp/JVN38755305/index.html
CVE: CVE-2016-7838
Published: 2017-06-09
Description: Untrusted search path vulnerability in WinSparkle versions prior to 0.5.3 allows remote attackers to execute arbitrary code via a specially crafted executable file in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/95099; https://github.com/vslavik/winsparkle/commit/bb[PII_REDACTED]45a7397f9e4fbb3a902f4ac25913; https://jvn.jp/en/jp/JVN90813656/index.html
CVE: CVE-2017-2165
Published: 2017-06-09
Description: GroupSession versions 4.6.4 and earlier allows remote authenticated attackers to bypass access restrictions to obtain sensitive information such as emails via unspecified vectors.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN42164352/index.html; http://www.securityfocus.com/bid/98719; http://jvn.jp/en/jp/JVN42164352/index.html
CVE: CVE-2017-2176
Published: 2017-06-09
Description: Untrusted search path vulnerability in screensaver installers (jasdf_01.exe, jasdf_02.exe, jasdf_03.exe, jasdf_04.exe, jasdf_05.exe, scramble_setup.exe, clock_01_setup.exe, clock_02_setup.exe) available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN41185163/index.html; http://www.mod.go.jp/asdf/information/index.html; http://www.securityfocus.com/bid/98823
CVE: CVE-2017-2177
Published: 2017-06-09
Description: Untrusted search path vulnerability in Installer of Shogyo Touki Denshi Ninsho Software Ver 1.7 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN92422409/index.html; http://www.moj.go.jp/MINJI/minji06_00027.html; http://jvn.jp/en/jp/JVN92422409/index.html
CVE: CVE-2017-2178
Published: 2017-06-09
Description: Untrusted search path vulnerability in Installer of electronic tendering and bid opening system available prior to May 25, 2017 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN75514460/index.html; http://www.mod.go.jp/atla/souhon/cals/nyusatsu_top.html; http://www.securityfocus.com/bid/98725
CVE: CVE-2017-2179
Published: 2017-06-09
Description: Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allows remote code execution via unspecified vectors, a different vulnerability than CVE-2017-2181 and CVE-2017-2182.
CVSS Score: 8.8 (HIGH)
CWE: CWE-20
References: http://jvn.jp/en/jp/JVN80238098/index.html; http://jvn.jp/en/jp/JVN80238098/index.html
CVE: CVE-2017-2180
Published: 2017-06-09
Description: Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://jvn.jp/en/jp/JVN32120290/index.html; http://jvn.jp/en/jp/JVN32120290/index.html
CVE: CVE-2017-2181
Published: 2017-06-09
Description: Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2182.
CVSS Score: 8.8 (HIGH)
References: http://jvn.jp/en/jp/JVN20870477/index.html; http://jvn.jp/en/jp/JVN20870477/index.html
CVE: CVE-2017-2182
Published: 2017-06-09
Description: Hands-on Vulnerability Learning Tool "AppGoat" for Web Application V3.0.2 and earlier allow remote attackers to obtain local files via unspecified vectors, a different vulnerability than CVE-2017-2179 and CVE-2017-2181.
CVSS Score: 8.8 (HIGH)
References: http://jvn.jp/en/jp/JVN01404851/index.html; http://jvn.jp/en/jp/JVN01404851/index.html
CVE: CVE-2017-2187
Published: 2017-06-09
Description: Cross-site scripting vulnerability in WP Live Chat Support prior to version 7.0.07 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://jvn.jp/en/jp/JVN70951878/index.html; https://plugins.trac.wordpress.org/changeset/1658232/; http://jvn.jp/en/jp/JVN70951878/index.html
CVE: CVE-2017-2189
Published: 2017-06-09
Description: Untrusted search path vulnerability in RW-4040 driver installer for Windows 7 version 2.27 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN51274854/index.html; http://www.securityfocus.com/bid/99290; http://jvn.jp/en/jp/JVN51274854/index.html
CVE: CVE-2017-2190
Published: 2017-06-09
Description: Untrusted search path vulnerability in RW-4040 tool to verify execution environment for Windows 7 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN51274854/index.html; http://www.securityfocus.com/bid/99290; http://jvn.jp/en/jp/JVN51274854/index.html
CVE: CVE-2017-2191
Published: 2017-06-09
Description: Untrusted search path vulnerability in RW-5100 driver installer for Windows 7 version 1.0.0.9 and RW-5100 driver installer for Windows 8.1 version 1.0.1.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN51274854/index.html; http://www.securityfocus.com/bid/99290; http://jvn.jp/en/jp/JVN51274854/index.html
CVE: CVE-2017-2192
Published: 2017-06-09
Description: Untrusted search path vulnerability in RW-5100 tool to verify execution environment for Windows 7 version 1.1.0.0 and RW-5100 tool to verify execution environment for Windows 8.1 version 1.2.0.0 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN51274854/index.html; http://www.securityfocus.com/bid/99290; http://jvn.jp/en/jp/JVN51274854/index.html
CVE: CVE-2017-2193
Published: 2017-06-09
Description: Untrusted search path vulnerability in the installer of Tera Term 4.94 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN06770361/index.html; http://www.securityfocus.com/bid/98807; https://ttssh2.osdn.jp/SA/JVN06770361.html.en
CVE: CVE-2017-2195
Published: 2017-06-09
Description: SQL injection vulnerability in the Multi Feed Reader prior to version 2.2.4 allows authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89
References: http://jvn.jp/en/jp/JVN98617234/index.html; https://wordpress.org/plugins/multi-feed-reader/#developers; https://wpvulndb.com/vulnerabilities/8844
CVE: CVE-2017-2206
Published: 2017-06-09
Description: Untrusted search path vulnerability in the installer of SaAT Netizen ver.1.2.10.510 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/98817; https://jvn.jp/en/jp/JVN91170929/index.html; https://www.saat.jp/information/netizen/2017/0531_security_update_info.php
CVE: CVE-2017-2207
Published: 2017-06-09
Description: Untrusted search path vulnerability in the installer of SaAT Personal ver.1.0.10.272 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 8.8 (HIGH)
CWE: CWE-426
References: http://www.securityfocus.com/bid/98809; https://jvn.jp/en/jp/JVN08020381/index.html; https://www.saat.jp/information/personal/2017/0531_security_update_info.php
CVE: CVE-2017-2209
Published: 2017-06-09
Description: Untrusted search path vulnerability in the installer of Houkokusyo Sakusei Shien Tool ver3.0.2 (For the first installation) (The version which was available on the website from 2017 April 4 to 2017 May 18) and ver2.0 and later (For the first installation) (The versions which were available on the website prior to 2017 April 4) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://ghg-santeikohyo.env.go.jp/files/system/report_20170526.pdf; http://ghg-santeikohyo.env.go.jp/files/system/report_20170529_rev.pdf; http://ghg-santeikohyo.env.go.jp/tool
CVE: CVE-2017-2210
Published: 2017-06-09
Description: Untrusted search path vulnerability in PatchJGD (PatchJGD101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-427
References: http://jvn.jp/en/jp/JVN52691241/index.html; http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html; http://jvn.jp/en/jp/JVN52691241/index.html
CVE: CVE-2017-2211
Published: 2017-06-09
Description: Untrusted search path vulnerability in PatchJGD (Hyoko) (PatchJGDh101.EXE) ver. 1.0.1 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN52691241/index.html; http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html; http://jvn.jp/en/jp/JVN52691241/index.html
CVE: CVE-2017-2212
Published: 2017-06-09
Description: Untrusted search path vulnerability in TKY2JGD (TKY2JGD1379.EXE) ver. 1.3.79 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN52691241/index.html; http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html; http://jvn.jp/en/jp/JVN52691241/index.html
CVE: CVE-2017-2213
Published: 2017-06-09
Description: Untrusted search path vulnerability in SemiDynaEXE (SemiDynaEXE2008.EXE) ver. 1.0.2 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN52691241/index.html; http://www.gsi.go.jp/sokuchikijun/sokuchikijun41011.html; http://jvn.jp/en/jp/JVN52691241/index.html
CVE: CVE-2017-2214
Published: 2017-06-09
Description: Untrusted search path vulnerability in AppCheck and AppCheck Pro prior to version 2.0.1.15 allows an attacker to execute arbitrary code via a specially crafted executable file in an unspecified directory.
CVSS Score: 8.4 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN99737748/index.html; http://jvn.jp/en/jp/JVN99737748/index.html
CVE: CVE-2017-2219
Published: 2017-06-09
Description: Untrusted search path vulnerability in the [Simeji for Windows] installer (simeji.exe) allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://jvn.jp/en/jp/JVN31236539/index.html; http://jvn.jp/en/jp/JVN31236539/index.html