Skip to content
OpenAdvisories

Vendor

KDDI

20 known vulnerabilities.

KDDI at a glance

Last 12 months
2
Critical · all time
1
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 1 vulnerability June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202610
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202510
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202560
Feb 202500
Jan 202500
Dec 202400

20 results · Feed

  • Medium 4.8

    Android App "あんしんフィルター for au" provided by KDDI CORPORATION contains Cleartext Transmission of Sensitive Information (C…

  • Medium 4.8

    Improper certificate validation vulnerability exists in 'デジラアプリ' App for iOS prior to ver.80.10.00. If this vulnerabili…

  • High 8.1

    Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file deletion proces…

  • Low 2.1

    Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file download proces…

  • High 8.8

    Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file upload process …

  • Medium 6.5

    Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file/folder listing …

  • Low 3.6

    Cross-site scripting vulnerability exists in the USB storage file-sharing function of HGW-BL1500HM Ver 002.002.003 and …

  • Medium 5.4

    Cross-site scripting vulnerability exists in the NickName registration screen of HGW-BL1500HM Ver 002.002.003 and earli…

  • Medium 6.5

    HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated a…

  • High 8.8

    HGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network-adjacent unauthenticated a…

  • High 8.8

    HGW BL1500HM Ver 002.001.013 and earlier allows a network-adjacent unauthenticated attacker to execute an arbitrary com…

  • Critical 9.8

    Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbi…

  • High 7.5

    Stack-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. Processing a specially crafted co…

  • Unscored —

    HOME SPOT CUBE2 V102 contains an OS command injection vulnerability due to improper processing of data received from DH…

  • Unscored —

    Untrusted search path vulnerability in Anshin net security for Windows Version 16.0.1.44 and earlier allows an attacker…

  • Unscored —

    Untrusted search path vulnerability in Installer of Qua station connection tool for Windows version 1.00.03 allows an a…

  • Unscored —

    HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via WebUI.

  • Unscored —

    Buffer overflow in HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to execute arbitrary code via WebUI.

  • Unscored —

    HOME SPOT CUBE2 firmware V101 and earlier allows authenticated attackers to execute arbitrary OS commands via Clock Set…

  • Unscored —

    HOME SPOT CUBE2 firmware V101 and earlier allows an attacker to bypass authentication to load malicious firmware via We…