Lucene search
+L
JvnMost viewed

5651 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/08/19 12:0 a.m.•40 views

JVN#20812625: Advance-Flow vulnerable to SQL injection

Advance-Flow provided by OSK Co., LTD contains an issue in processing input data, which may result in SQL injection. Impact A user may obtain or alter information on the database. Solution Do not use Advance-Flow The developer has stated that the support of Advance-Flow has been discontinued thus...

7.5CVSS6.8AI score0.01164EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/03/17 12:0 a.m.•40 views

JVN#16263849: Demaecan for Android. contains an issue where it fails to verify SSL server certificates

Demaecan for Android. contains an issue where it fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by the...

5.8CVSS6.2AI score0.00587EPSS
SaveExploits1
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2014/01/24 12:0 a.m.•40 views

JVN#69986880: OpenPNE vulnerable to PHP Object Injection

OpenPNE contains an issue in processing Cookie headers, which may result in a PHP Object Injection vulnerability. Impact A remote, unauthenticated attacker may execute an arbitrary PHP code. Solution Apply an update Update to the latest version according to the information provided by the...

7.5CVSS6.8AI score0.01527EPSS
SaveExploits2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/09/20 12:0 a.m.•40 views

JVN#43152129: SEIL Series routers vulnerable to buffer overflow

The PPP Access Concentrator PPPAC in SEIL Series routers provided by Internet Initiative Japan Inc. contains a buffer overflow vulnerability in processing L2TP messages. Impact An attacker may execute an arbitrary code on the vulnerable system. Solution Update the Firmware Apply the appropriate...

6.8CVSS7.6AI score0.02676EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/07/17 12:0 a.m.•40 views

JVN#68663052: Oracle Outside In vulnerable to denial-of-service (DoS)

Oracle Outside In is a library to decode over 500 file types. Oracle Outside In contains a denial-of-service DoS vulnerability. Impact When Oracle Outside In processes a specially crafted Hangul Word Processor file, the process may hang. Solution Apply an update Update to the latest version...

6.8CVSS5.7AI score0.01732EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/03/18 12:0 a.m.•40 views

JVN#65923092: VxWorks WebCLI vulnerable to denial-of-service (DoS)

The VxWorks WebCLI contains a denial-of-service DoS vulnerability due to an issue in parsing command strings. Impact An attacker that can login to a CLI session may cause the current CLI session to crash. Solution Apply a patch Apply the appropriate patch according to the information provided by...

4CVSS6.1AI score0.01878EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2013/02/14 12:0 a.m.•40 views

JVN#09223079: imgboard vulnerable to cross-site scripting

imgboard provided by imgboard.com CGI Download Center formerly 1998 t-club CGI Download Center is a bulletin board software that supports posting picture files. imgboard contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution...

4.3CVSS5.9AI score0.01148EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/10/05 12:0 a.m.•41 views

JVN#58160713: MyWebSearch vulnerable to cross-site scripting

MyWebSearch is a CGI script for searching within a website. MyWebSearch contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the...

4.3CVSS6AI score0.01161EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/06/19 12:0 a.m.•40 views

JVN#58102473: WEB PATIO vulnerable to cross-site scripting

WEB PATIO is a bulletin-board software. WEB PATIO contains a vulnerability in handling cookies, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information...

4.3CVSS6.3AI score0.01148EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/06/14 12:0 a.m.•40 views

JVN#90751882: Dolphin Browser vulnerable in the WebView class

Dolphin Browser is a web browser for Android devices. Dolphin Browser HD and Dolphin for Pad contain a vulnerability in the WebView class. Impact If a user of the affected product uses other malicious Android application, information managed by the affected product may be disclosed. Solution Upda...

4.3CVSS6.2AI score0.01066EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/04/24 12:0 a.m.•40 views

JVN#09619876: Multiple JustSystems products vulnerable to buffer overflow

Multiple products provided by JustSystems Corporation contain a buffer overflow vulnerability due to improper handling of image files. Impact If this vulnerability is exploited, a system may be crashed or arbitrary code may be executed. Solution Update the Software Apply the appropriate update...

9.3CVSS7.2AI score0.04227EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2012/02/23 12:0 a.m.•40 views

JVN#49836527: Movable Type vulnerable to cross-site scripting

mt-wizard.cgi and Movable Type templates contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version of each product according to the information provided by the developer. Products...

4.3CVSS5.7AI score0.0134EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/09/09 12:0 a.m.•40 views

JVN#45458289: Megalith vulnerable to authentication bypass

Megalith is a bulletin board software. Megalith contains an authentication bypass vulnerability. Impact A remote attacker may obtain administrative privileges. Solution Update the software Update to the latest version according to the information provided by the developer. Products Affected...

7.5CVSS6.7AI score0.01661EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/07/28 12:0 a.m.•40 views

JVN#74649877: Mozilla Firefox vulnerable to cross-site scripting

Mozilla Firefox contains a vulnerability in the rendering of Cascading Style Sheets CSS, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided ...

6.1CVSS5.8AI score0.00697EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/07/28 12:0 a.m.•40 views

JVN#96950482: Mozilla Firefox vulnerable to cross-site scripting

Mozilla Firefox contains a vulnerability in the rendering of specific numeric character references, which may result in cross-site scripting. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the informatio...

4.3CVSS8.9AI score0.01761EPSS
SaveExploits2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/06/24 12:0 a.m.•40 views

JVN#80877328: Multiple Cybozu products vulnerable to cross-site scripting

Multiple groupware provided by Cybozu, Inc. contain a cross-site scripting vulnerability due to an issue when downloading graphic files from the bulletin board system. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Update the software Update to...

4.3CVSS5.8AI score0.01223EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2011/04/08 12:0 a.m.•40 views

JVN#11424086: Password Vault Web Access vulnerable to cross-site scripting

Password Vault Web Access PVWA is a module in the Privileged Identity Management Suite that allows access via a web portal. PVWA contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the web browser of an user who is logged on. Solution Apply a patch Apply t...

4.3CVSS5.8AI score0.01053EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/11/04 12:0 a.m.•40 views

JVN#01948274: Ichitaro series vulnerable to arbitrary code execution

The "Ichitaro" series word processing software, from JustSystems Corporation contains a vulnerability that may allow arbitrary code execution. Impact When opening a specially crafted file locally or through a website, an attacker may be able to execute arbitrary code. Solution Update the Software...

9.3CVSS6.9AI score0.05557EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/04/19 12:0 a.m.•40 views

JVN#87730223 Multiple Cybozu products vulnerable to authentication bypass

Multiple Cybozu products contain an issue in which the login page for mobile devices is not properly restrcited, leading to an authentication bypass vulnerability. As a result, an attacker may impersonate a user of a Cybozu product. Impact A remote attacker may view or modify information stored b...

5.8CVSS6.5AI score0.01374EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2010/01/12 12:0 a.m.•40 views

JVN#33977065 WebCalenderC3 cross-site scripting vulnerability

WebCalenderC3 from C3 Corp. is a calender software. WebCalenderC3 contains a cross-site scripting vulnerability. According to the developer, they were not able to reproduce the vulnerability. However, to mitigate against potential security risks, the developer has released a security enhanced...

4.3CVSS6AI score0.01074EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2009/09/09 12:0 a.m.•40 views

JVN#62211338 Buffer overflow vulnerability in Microsoft Windows

Windows Media Format Runtime included in Microsoft Windows contains a buffer overflow vulnerability when parsing specific files. Impact If a user opens a specially crafted file, an attacker may execute arbitrary code. Solution Update the software Apply the update according to the information...

9.3CVSS6.8AI score0.2121EPSS
SaveExploits2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/07/03 12:0 a.m.•40 views

JVN#77432756 FreeStyleWiki cross-site scripting vulnerability

FreeStyleWiki, one of Wiki clones, contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed if a FreeStyleWiki user views a specially crafted web page with Internet Explorer. Other web browsers that use the Internet Explorer browser engine may also be affected...

4.3CVSS6AI score0.11811EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/04/28 12:0 a.m.•41 views

JVN#31351020 Cross-site scripting vulnerabilities in multiple Bluemoon Inc. XOOPS modules

Mutiple modules provided by Blumoon Inc. for XOOPS 2.0.x / XOOPS Cube 2.1 / ImpressCMS are vulnerable to cross-site scripting. Impact An arbitrary script can be executed on the user's web browser. Solution Update the Software Update the product to the latest version according to the information...

4.3CVSS6.1AI score0.01065EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2007/11/22 12:0 a.m.•40 views

JVN#82610488 Lhaplus buffer overflow vulnerability

Lhaplus, file compression/decompression software supporting multiple compression file formats, contains a buffer overflow vulnerability. If a user decompresses a specially crafted file, an attacker could execute arbitrary code with the privilege of the user. This vulnerability is different from...

6.6CVSS7.7AI score0.03456EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/06 12:0 a.m.•39 views

JVN#32529796: Multiple products from KINGSOFT JAPAN vulnerable to path traversal

KINGSOFT JAPAN, INC. provides Kingsoft Office Software's WPS Office and its related products localized for Japan. WPS Office and its related products provided by KINGSOFT JAPAN, INC. contain a path traversal vulnerability CWE-22, CVE-2024-7262, CVE-2024-7263 due to inadequate file path validation...

9.3CVSS7.7AI score0.01773EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/03/25 8:28 a.m.•39 views

Multiple vulnerabilities in home gateway HGW BL1500HM

Overview Home gateway HGW BL1500HM provided by KDDI CORPORATION contains multiple vulnerabilities listed below. Use of weak credentials CWE-1391 - CVE-2024-21865, CVE-2024-29071 Command injection CWE-77 - CVE-2024-28041 Chuya Hayakawa of 00One, Inc. reported these vulnerabilities to JPCERT/CC...

8.8CVSS7.9AI score0.0062EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/02/06 12:0 a.m.•39 views

JVN#18743512: Cybozu KUNAI for Android vulnerable to denial-of-service (DoS)

Cybozu KUNAI for Android is a client application for using Cybozu products from an Android device. Cybozu KUNAI for Android contains an issue allowing to send massive requests to the connected Cybozu product if a user performs certain operations on KUNAI, which may result in repeated session...

7.5CVSS7.4AI score0.00754EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/08/17 12:0 a.m.•39 views

JVN#46993816: EC-CUBE 2 series vulnerable to cross-site scripting

EC-CUBE 2 series provided by EC-CUBE CO.,LTD. contains a cross-site scripting vulnerability CWE-79 in "mail/template" and "products/product" of Management page. Impact An arbitrary script may be executed on the web browser of the other administrator or the user who accessed the website using the...

4.8CVSS4.9AI score0.00362EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/04/19 12:0 a.m.•39 views

JVN#50862842: EC-CUBE plugin "NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)" vulnerable to authentication bypass

EC-CUBE plugin "NEXT ENGINE Integration Plugin for EC-CUBE 2.0 series" provided by NE Inc. contains an authentication bypass vulnerability CWE-287. Impact A remote attacker may alter the information stored in the system. Solution Stop using "NEXT ENGINE Integration Plugin for EC-CUBE 2.0 series "...

5.3CVSS5.4AI score0.007EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/02/06 12:0 a.m.•39 views

JVN#11257333: Ichiran App vulnerable to improper server certificate verification

Ichiran App developed by Betrend Corporation and provided by ICHIRAN INC. is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the application Update the application t...

5.9CVSS5.3AI score0.00513EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/01/24 12:0 a.m.•39 views

JVN#01398015: pgAdmin 4 vulnerable to directory traversal

PostgreSQL management tool pgAdmin 4 contains a directory traversal vulnerability CWE-22. Impact A user of the product may change another user's settings or alter the database. Solution Update the Software Update the software to the latest version according to the information provided by the...

6.5CVSS6.3AI score0.08826EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/07/27 12:0 a.m.•39 views

JVN#81563390: "Hulu / フールー" App for iOS vulnerable to improper server certificate verification

"Hulu / フールー" App for iOS provided by HJ Holdings, Inc. is vulnerable to improper server certificate verification CWE-295. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the application Update the application to the latest versi...

4.8CVSS4.7AI score0.00234EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/06/24 12:0 a.m.•39 views

JVN#51464799: L2Blocker Sensor setup screen vulnerable to authentication bypass

L2Blocker provided by SOFTCREATE CORP. contains a vulnerability CWE-288 in which the login authentication is bypassed by using alternative paths or channels for Sensor. Impact An attacker who can access the device may perform an unauthorized login and obtain the stored information or cause a...

8.1CVSS8.1AI score0.00393EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2021/08/27 12:0 a.m.•39 views

JVN#14134801: baserCMS vulnerable to cross-site scripting

baserCMS provided by baserCMS Users Community contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update the software to the latest version according to the information provided by the developer...

8.7CVSS5.6AI score0.00929EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/07/01 12:0 a.m.•39 views

JVN#28218613: The management console of iDoors Reader vulnerable to authentication bypass

The management console of iDoors Reader provided by A.T.WORKS, Inc. contains an authentication bypass vulnerability CWE-288. Impact An attacker in the same segment may access the management console and operate the product. Solution Update the Firmware Apply the firmware update according to the...

8.8CVSS8.8AI score0.00716EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/05/28 12:0 a.m.•39 views

JVN#16471686: WordPress plugin "Email Subscribers & Newsletters" vulnerable to cross-site scripting

The WordPress plugin "Email Subscribers & Newsletters" provided by Icegram contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on a logged in user's web browser. Solution Update the plugin Update the plugin according to the information provid...

6.1CVSS6AI score0.01224EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/06/02 12:0 a.m.•39 views

JVN#91170929: Installer of SaAT Netizen may insecurely load Dynamic Link Libraries

The installer of SaAT Netizen provided by NetMove Corporation contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest...

8.8CVSS8.8AI score0.01636EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/05/19 12:0 a.m.•39 views

JVN#11326581: Empirical Project Monitor - eXtended vulnerable to cross-site scripting

Empirical Project Monitor - eXtended provided by INFORMATION-TECHNOLOGY PROMOTION AGENCY, JAPAN IPA contains a reflected cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Do not use Empirical Project Monitor - eXtended The...

6.1CVSS6.1AI score0.01195EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/05/16 12:0 a.m.•39 views

JVN#70411623: WordPress plugin "MaxButtons" vulnerable to cross-site scripting

The WordPress plugin "MaxButtons" provided by Max Foundry contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the logged in user's web browser. Solution Update the plugin Update the plugin according to the information provided by the developer...

6.1CVSS6AI score0.01379EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/11/11 12:0 a.m.•39 views

JVN#23549283: CG-WLR300NX fails to restrict access permissions

CG-WLR300NX provided by Corega Inc is a wireless LAN router. CG-WLR300NX fails to restrict access permissions. Impact An attacker who can access the product may perform an arbitrary operation in the product while an administrator logs in. Solution Update the Firmware Update to the latest version ...

8.8CVSS8.6AI score0.00889EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/09/06 12:0 a.m.•39 views

JVN#48237713: ADOdb vulnerable to cross-site scripting

ADOdb is a database abstraction layer for PHP. The library's test script test.php contains a cross-site scripting CWE-79 vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information...

6.1CVSS6.2AI score0.01946EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/06/14 12:0 a.m.•39 views

JVN#96052093: ETX-R vulnerable to denial-of-service (DoS)

ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a denial-of-service DoS vulnerability. Impact A remote unauthenticated attacker may cause the web server on the product to be terminated abnormally. Solution Apply a Workaround The following workarounds may mitigate the...

5.3CVSS5.3AI score0.01599EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/06/14 12:0 a.m.•39 views

JVN#61317238: ETX-R vulnerable to cross-site request forgery

ETX-R provided by I-O DATA DEVICE, INC. is a wired LAN router. ETX-R contains a cross-site request forgery vulnerability CWE-352. Impact If a user views a malicious page while logged in, unintended operations may be performed. Solution Apply a Workaround The following workarounds may mitigate the...

8.8CVSS8.7AI score0.00629EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/06/02 12:0 a.m.•39 views

JVN#48789425: Trend Micro Internet Security multiple vulnerabilities

Trend Micro Internet Security provided by Trend Micro Incorporated contains the following vulnerabilities. Access Restriction Flaw - CVE-2016-1225 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N| Base Score: 5.3 CVSS v2| AV:N/AC:L/Au:N/C:P/I:N/A:N| Base...

6.5CVSS6.8AI score0.03462EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/05/30 12:0 a.m.•39 views

JVN#40898764: DMM.com Securities FX Apps for Android fail to verify SSL server certificates

Multiple Android Applications provided by DMM.com Securities Co.,Ltd. fail to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Application Update to the latest version according to the informati...

5.9CVSS5.5AI score0.00928EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/05/30 12:0 a.m.•39 views

JVN#53542912: Cybozu Garoon fails to restrict access permissions

Cybozu Garoon is a groupware. Cybozu Garoon fails to restrict access permissions in the mail function. Impact An unintentional image file may be displayed on the mail view. As a result, an attacker may be convinced that the user read the email. Solution Update the Software Update to the latest...

4.3CVSS4.3AI score0.01298EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/05/27 12:0 a.m.•39 views

JVN#46888319: Japan Connected-free Wi-Fi vulnerable to API execution

Japan Connected-free Wi-Fi provided by NTT Broadband Platform, Inc. contains a vulnerability which allows an arbitrary API to be executed by a man-in-the-middle attacker. Impact Android version of this app may allow an arbitrary API to be executed if permissions to execute that API are granted in...

5.6CVSS5.3AI score0.00782EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/01/15 12:0 a.m.•39 views

JVN#50899877: acmailer vulnerable to OS command injection

acmailer provided by Seeds Co.,Ltd. contains an OS command injection vulnerability CWE-78. Impact An authenticated attacker may execute an arbitrary OS command on the server. Solution Update the software Update to the latest version according to the information provided by the developer. Products...

9.1CVSS9.3AI score0.02411EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/11/06 12:0 a.m.•39 views

JVN#90135579: SonicWall TotalSecure TZ 100 Series vulnerable to denial-of-service (DoS)

SonicWall TotalSecure TZ 100 Series is a firewall product provided by Dell Inc. SonicWall TotalSecure TZ 100 Series contains a denial-of-service DoS vulnerability. Impact Processing a specially crafted packet may lead to a denial-of-service DoS. Solution Update the firmware Update to the latest...

5CVSS6.2AI score0.02897EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/10/29 12:0 a.m.•39 views

JVN#13874649: Enisys Gw vulnerable to cross-site scripting

Enisys Gw provided by Techno Project Japan Co. is an open source groupware. Enisys Gw contains a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information...

4.3CVSS5.8AI score0.01171EPSS
SaveExploits0
Total number of security vulnerabilities5000