Search

Find a vulnerability

Search criteria

    2 vulnerabilities found for RockDisk by I-O DATA DEVICE, INC.

    JVNDB-2014-000069

    Vulnerability from jvndb - Published: 2014-07-02 14:40 - Updated:2017-05-17 17:07
    Severity
    N/A (UNKNOWN) - -
    Summary
    RockDisk vulnerable to cross-site scripting
    Details
    RockDisk provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. RockDisk contains a cross-site scripting vulnerability. NOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000069.html",
      "dc:date": "2017-05-17T17:07+09:00",
      "dcterms:issued": "2014-07-02T14:40+09:00",
      "dcterms:modified": "2017-05-17T17:07+09:00",
      "description": "RockDisk provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. RockDisk contains a cross-site scripting vulnerability.\r\n\r\nNOTE: This vulnerability exists because of an incomplete fix for CVE-2013-4713.\r\n\r\nYuji Tounai of bogus.jp reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2014/JVNDB-2014-000069.html",
      "sec:cpe": [
        {
          "#text": "cpe:/h:i-o_data_device:rockdisk",
          "@product": "RockDisk",
          "@vendor": "I-O DATA DEVICE, INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:i-o_data_device:rockdisk_firmware",
          "@product": "RockDisk Firmware",
          "@vendor": "I-O DATA DEVICE, INC.",
          "@version": "2.2"
        }
      ],
      "sec:cvss": {
        "@score": "4.0",
        "@severity": "Medium",
        "@type": "Base",
        "@vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
        "@version": "2.0"
      },
      "sec:identifier": "JVNDB-2014-000069",
      "sec:references": [
        {
          "#text": "http://jvn.jp/jp/JVN74608669/index.html",
          "@id": "JVN#74608669",
          "@source": "JVN"
        },
        {
          "#text": "http://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000096.html",
          "@id": "JVNDB-2013-000096",
          "@source": "JVN iPedia"
        },
        {
          "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-3887",
          "@id": "CVE-2014-3887",
          "@source": "CVE"
        },
        {
          "#text": "https://nvd.nist.gov/vuln/detail/CVE-2014-3887",
          "@id": "CVE-2014-3887",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-79",
          "@title": "Cross-site Scripting(CWE-79)"
        }
      ],
      "title": "RockDisk vulnerable to cross-site scripting"
    }

    JVNDB-2013-000096

    Vulnerability from jvndb - Published: 2013-10-29 14:40 - Updated:2014-07-02 14:36
    Severity
    N/A (UNKNOWN) - -
    Summary
    RockDisk vulnerable to cross-site scripting
    Details
    RockDisk provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. RockDisk contains a cross-site scripting vulnerability. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.
    Show details on JVN DB website

    {
      "@rdf:about": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000096.html",
      "dc:date": "2014-07-02T14:36+09:00",
      "dcterms:issued": "2013-10-29T14:40+09:00",
      "dcterms:modified": "2014-07-02T14:36+09:00",
      "description": "RockDisk provided by I-O DATA DEVICE, INC. are LAN connectable hard disk drives. RockDisk contains a cross-site scripting vulnerability.\r\n\r\nYuji Tounai of bogus.jp reported this vulnerability to IPA.\r\nJPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.",
      "link": "https://jvndb.jvn.jp/en/contents/2013/JVNDB-2013-000096.html",
      "sec:cpe": [
        {
          "#text": "cpe:/h:i-o_data_device:rockdisk",
          "@product": "RockDisk",
          "@vendor": "I-O DATA DEVICE, INC.",
          "@version": "2.2"
        },
        {
          "#text": "cpe:/o:i-o_data_device:rockdisk_firmware",
          "@product": "RockDisk Firmware",
          "@vendor": "I-O DATA DEVICE, INC.",
          "@version": "2.2"
        }
      ],
      "sec:cvss": {
        "@score": "4.0",
        "@severity": "Medium",
        "@type": "Base",
        "@vector": "AV:N/AC:L/Au:S/C:N/I:P/A:N",
        "@version": "2.0"
      },
      "sec:identifier": "JVNDB-2013-000096",
      "sec:references": [
        {
          "#text": "https://jvn.jp/en/jp/JVN74608669/index.html",
          "@id": "JVN#74608669",
          "@source": "JVN"
        },
        {
          "#text": "http://jvndb.jvn.jp/jvndb/JVNDB-2013-000096",
          "@id": "JVNDB-2014-000069",
          "@source": "JVN iPedia"
        },
        {
          "#text": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4713",
          "@id": "CVE-2013-4713",
          "@source": "CVE"
        },
        {
          "#text": "http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4713",
          "@id": "CVE-2013-4713",
          "@source": "NVD"
        },
        {
          "#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
          "@id": "CWE-79",
          "@title": "Cross-site Scripting(CWE-79)"
        }
      ],
      "title": "RockDisk vulnerable to cross-site scripting"
    }