Priority LOW 37
Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 August 10 allow an attacker to gain privileges via a Trojan horse DLL in an unspecif…
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01231 · Published 2017-09-01 · No fix listed CWE-426
Priority LOW 36
Untrusted search path vulnerability in Security Setup Tool all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01059 · Published 2017-08-28 · No fix listed CWE-426
Priority LOW 36
Untrusted search path vulnerability in Flets Install Tool all versions distributed through the website till 2017 August 8 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01059 · Published 2017-08-28 · No fix listed CWE-426
Priority LOW 36
Untrusted search path vulnerability in Flets Azukeru for Windows Auto Backup Tool v1.0.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01059 · Published 2017-08-28 · No fix listed CWE-426
Priority LOW 36
Untrusted search path vulnerability in Security Kinou Mihariban v1.0.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01059 · Published 2017-08-28 · No fix listed CWE-426
Priority LOW 36
Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
CVSS 3.0HIGH 7.8· Local · No auth · User interaction · EPSS 0.01059 · Published 2017-08-28 · No fix listed CWE-426
Priority LOW 28
Photopt for Android before 2.0.1 does not verify SSL certificates.
CVSS 3.0MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.0084 · Published 2017-04-21 · No fix listed CWE-295
Priority LOW 29
Cross-site scripting (XSS) vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVSS 3.0MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.0102 · Published 2016-06-05 · No fix listed CWE-79
Priority LOW 15
The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read system log files.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.00992 · Published 2014-06-18 · No fix listed CWE-200