Vulnerabilities > Webservice DIC

DATE CVE VULNERABILITY TITLE RISK
2015-07-29 CVE-2015-2979 OS Command Injection vulnerability in Webservice-Dic Yoyaku 41
Webservice-DIC yoyaku_v41 allows remote attackers to execute arbitrary OS commands via unspecified vectors.
network
low complexity
webservice-dic CWE-78
7.5
2015-07-29 CVE-2015-2978 Improper Authentication vulnerability in Webservice-Dic Yoyaku 41
Webservice-DIC yoyaku_v41 allows remote attackers to bypass authentication and complete a conference-room reservation via unspecified vectors, as demonstrated by an "unintentional reservation."
network
low complexity
webservice-dic CWE-287
5.0
2015-07-29 CVE-2015-2977 Improper Input Validation vulnerability in Webservice-Dic Yoyaku 41
Webservice-DIC yoyaku_v41 allows remote attackers to create arbitrary files, and consequently execute arbitrary code, via unspecified vectors.
network
low complexity
webservice-dic CWE-20
7.5