Vulnerabilities

TI-2015-02633 CVE-2015-2979 · GHSA-jqq3-xmgh-4v27

Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

LOW 36

Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01383 Published 2015-07-29 No fix listed CWE-78

TI-2015-02632 CVE-2015-2978 · GHSA-qm46-4g33-f75q

Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a…

LOW 25

Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation."

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01277 Published 2015-07-29 No fix listed CWE-287

TI-2015-02631 CVE-2015-2977 · GHSA-cc8j-v8pg-h6jg

Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files, and…

LOW 37

Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02288 Published 2015-07-29 No fix listed CWE-20

Vulnerabilities

Filters

Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors.

Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a…

Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files, and…