Untrusted search path vulnerability in Remote Support Tool (Enkaku Support Tool) All versions distributed through the website till 2017 August 10 allow an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
Vendor
ntt vulnerabilities
9 published CVES affecting ntt, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 9
- Critical
- 0
- High
- 6
- Medium
- 2
- Low
- 1
- Unscored
- 0
- CISA KEV
- 0
Products
- 050 plus 1
- enkaku support tool 1
- flets azukuu pc automatic backup tool 1
- flets install tool 1
- flets setsuzoku tool 1
- photopt 1
- security kinou mihariban 1
- security setup tool 1
- webarena service formmail 1
Latest ntt CVEs
Newest publication first
-
HighCVSS 7.8 EPSS 1.2%
-
HighCVSS 7.8 EPSS 1.1%
Untrusted search path vulnerability in Flets Setsuzoku Tool for Windows all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
-
HighCVSS 7.8 EPSS 1.1%
Untrusted search path vulnerability in Security Setup Tool all versions allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
-
HighCVSS 7.8 EPSS 1.1%
Untrusted search path vulnerability in Flets Install Tool all versions distributed through the website till 2017 August 8 allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
-
HighCVSS 7.8 EPSS 1.1%
Untrusted search path vulnerability in Flets Azukeru for Windows Auto Backup Tool v1.0.3.0 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
-
HighCVSS 7.8 EPSS 1.1%
Untrusted search path vulnerability in Security Kinou Mihariban v1.0.21 and earlier allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory.
-
MediumCVSS 5.9 EPSS 0.84%
Photopt for Android before 2.0.1 does not verify SSL certificates.
-
MediumCVSS 6.1 EPSS 1.0%
Cross-site scripting (XSS) vulnerability in NTT PC Communications WebARENA Service formmail before 2.2.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
-
LowCVSS 2.6 EPSS 0.99%
The NTT 050 plus application before 4.2.1 for Android allows attackers to obtain sensitive information by leveraging the ability to read system log files.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.