Satoshi Ogawa

Name of the Vulnerable Software and Affected Versions: QND Advance/Premium/Standard versions 11.0.4i and earlier Description: A privilege escalation issue allows an attacker who can log in to the PC where the product's Windows client is installed to gain administrative privileges via unspecified vectors. This could result in sensitive information being altered or obtained, or unintended operations being performed. Recommendations: For QND Advance/Premium/Standard versions 11.0.4i and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-300FEBK-A (affected versions not specified) Description: A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators and execute an arbitrary request via an unspecified vector. This can result in the alteration of device settings and/or the starting of the telnet daemon. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: ELECOM WRC-300FEBK-A (affected versions not specified) Description: The issue allows remote authenticated attackers to inject arbitrary script via unspecified vectors, which can lead to cross-site scripting. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

A cross-site scripting issue allows an attacker to inject arbitrary web script or HTML via unspecified vectors.

A cross-site request forgery issue allows remote attackers to hijack the authentication of logged-in users, enabling them to conduct unintended operations. The exact vectors used for exploitation are not specified.

The issue allows an attacker on the same network segment to bypass access restrictions and perform arbitrary operations.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the parameters `hostname`, `database`, and `username`.

A cross-site scripting issue allows an attacker with administrator rights to inject arbitrary web script or HTML via unspecified vectors.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the language.php file.

A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of an administrator, enabling them to change settings. The exact vectors used for this exploitation are not specified.

The issue is related to improper session management, which allows remote attackers to disclose or alter unauthorized information. The exact vectors used for the attack are not specified.

The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users.

A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. This could potentially lead to unauthorized access or control of the affected devices.

A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of arbitrary users. This can be exploited by tricking a user into performing unintended actions on the web application.

The issue allows remote authenticated users to execute arbitrary OS commands via unspecified vectors.