KD
Vendor
Kddi
19
CVEs
0
On KEV
0
New 30D
Products
HS9.8
Home Spot Cube 2 Firmware
Kddi
7 CVEs0 on KEV0 new
HS7.5
Home Spot Cube Firmware
Kddi
6 CVEs0 on KEV0 new
ME5.9
+ Message
Kddi
2 CVEs0 on KEV0 new
AN7.8
Anshin Net Security
Kddi
1 CVEs0 on KEV0 new
ED–
Ezfactory Download Cgi
Kddi
1 CVEs0 on KEV0 new
QS7.8
Qua Station Firmware
Kddi
1 CVEs0 on KEV0 new
ST9.8
Smart TV Box Firmware
Kddi
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-23978 | HS Home Spot Cube 2 Firmware Kddi | 9.8 | Feb 2 | Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier |
| CVE-2024-21780 | HS Home Spot Cube 2 Firmware Kddi | 7.5 | Feb 2 | Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier |
| CVE-2022-43543 | ME + Message Kddi | 5.4 | Dec 21 | KDDI +Message App, NTT DOCOMO +Message App, and SoftBank +Message App contain a vulnerability caused by improper handling of Unicode control characters |
| CVE-2022-33948 | HS Home Spot Cube 2 Firmware Kddi | 8.8 | Jul 4 | HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DHCP server |
| CVE-2019-6005 | ST Smart TV Box Firmware Kddi | 9.8 | Sep 12 | Smart TV Box firmware version prior to 1300 allows remote attackers to bypass access restriction to conduct arbitrary operations on the device without user's intent, such as… |
| CVE-2018-0691 | ME + Message Kddi | 5.9 | Nov 15 | Multiple +Message Apps (Softbank +Message App for Android prior to version 10.1.7, Softbank +Message App for iOS prior to version 1.1.23, NTT DOCOMO +Message App for Android prior… |
| CVE-2018-0517 | AN Anshin Net Security Kddi | 7.8 | Feb 8 | Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified… |
| CVE-2017-2289 | QS Qua Station Firmware Kddi | 7.8 | Aug 18 | Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an attacker to gain privileges via a Trojan horse DLL in an… |
| CVE-2017-2186 | HS Home Spot Cube 2 Firmware Kddi | 8.8 | Jul 7 | HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via WebUI |
| CVE-2017-2185 | HS Home Spot Cube 2 Firmware Kddi | 8.8 | Jul 7 | HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI |
| CVE-2017-2184 | HS Home Spot Cube 2 Firmware Kddi | 8.8 | Jul 7 | Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI |
| CVE-2017-2183 | HS Home Spot Cube 2 Firmware Kddi | 8.0 | Jul 7 | HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Settings |
| CVE-2016-1141 | HS Home Spot Cube Firmware Kddi | 4.7 | Jan 30 | KDDI HOME SPOT CUBE devices before 2 allow remote authenticated users to execute arbitrary OS commands via unspecified vectors |
| CVE-2016-1140 | HS Home Spot Cube Firmware Kddi | 6.1 | Jan 30 | KDDI HOME SPOT CUBE devices before 2 allow remote attackers to conduct clickjacking attacks via unspecified vectors |
| CVE-2016-1139 | HS Home Spot Cube Firmware Kddi | 7.5 | Jan 30 | Cross-site request forgery (CSRF) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to hijack the authentication of unspecified victims via unknown… |
| CVE-2016-1138 | HS Home Spot Cube Firmware Kddi | 4.7 | Jan 30 | CRLF injection vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to inject arbitrary HTTP headers via unspecified vectors |
| CVE-2016-1137 | HS Home Spot Cube Firmware Kddi | 7.4 | Jan 30 | Open redirect vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified… |
| CVE-2016-1136 | HS Home Spot Cube Firmware Kddi | 5.4 | Jan 30 | Cross-site scripting (XSS) vulnerability on KDDI HOME SPOT CUBE devices before 2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors |
| CVE-2007-3692 | ED Ezfactory Download Cgi Kddi | – | Jul 11 | Directory traversal vulnerability in download.cgi in EZFactory KDDI Download CGI 1.x allows remote attackers to read and download arbitrary files via a |