Lucene search
+L
JvnMost viewed

5651 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/09/16 7:58 a.m.13 views

Photon vulnerable to URL whitelist bypass

Overview Photon provided by Newphoria Corporation Inc. is an application for Android built using "applican". Photon contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Kenta Suefusa and Tomonori Shiomi of Sprout Inc. reported this...

6.8CVSS6.7AI score0.01093EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2015/06/09 5:16 a.m.13 views

MilkyStep fails to restrict access permissions

Overview MilkyStep provided by Igreks Inc. fails to restrict access permissions. Note that this vulnerability is different from JVN16409640. MilkyStep provided by Igreks Inc. is a CGI for e-mail newsletter distribution management. MilkyStep fails to restrict access permissions CWE-264. Kusano...

6.4CVSS6.6AI score0.01553EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/10/28 5:39 a.m.13 views

QNAP QTS vulnerable to OS command injection

Overview QNAP QTS is an operating system for Turbo NAS. QNAP QTS contains a flaw in the GNU Bash shell, which may result in an OS command injection vulnerability CWE-78. Yuuki Wakisaka of University of Electro-Communications reported this vulnerability to IPA. JPCERT/CC coordinated with the...

10CVSS7.8AI score0.99999EPSS
SaveExploits165References30
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/10/16 4:51 a.m.13 views

GIGAPOD vulnerable to denial-of-service (DoS)

Overview GIGAPOD provided by TripodWorks CO.,LTD. contains a denial-of-service DoS vulnerability. GIGAPOD file servers Appliance model and Software model from TripodWorks CO.,LTD. provide two web interfaces. First, a user web interface via ports 80/443, and a second, an administrative web interfa...

7.8CVSS8.6AI score0.01652EPSS
SaveExploits2References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/09/25 5:53 a.m.13 views

N-Media file uploader vulnerability in handling uploaded files

Overview N-Media file uploader is a plugin for WordPress. N-Media file uploader contains a vulnerability CWE-264 in the way it handles uploaded files. As a result, an arbitrary PHP script which is uploaded may be executed. Yuji Tounai of bogus.jp reported this vulnerability to IPA. JPCERT/CC...

6.5CVSS7AI score0.01739EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2014/08/01 6:42 a.m.13 views

ServerView Operations Manager vulnerable to cross-site scripting

Overview ServerView Operations Manager provided by FUJITSU LIMITED is server management software. ServerView Operations Manager contains a cross-site scripting vulnerability. TAIZO TSUKAMOTO of GLOBAL SECURITY EXPERTS inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

4.3CVSS6.1AI score0.01792EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2013/12/17 4:57 a.m.13 views

Android OS vulnerable to arbitrary Java method execution

Overview Android OS contains a vulnerability where an arbitrary Java method may be executed. Tamami Eguchi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When viewing a specially crafted page using the...

9.3CVSS7AI score0.42623EPSS
SaveExploits7References10
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2011/07/29 5:26 a.m.13 views

Android vulnerability where an incorrect SSL certificate is displayed

Overview Android OS contains a vulnerability where an incorrect SSL certificate is displayed. Android OS contains a vulnerability where a SSL certificate from an outside site is displayed when a user attempts to display a SSL certificate from a site that reads in contents from an outside site...

4.3CVSS6.4AI score0.00787EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2011/06/15 12:0 a.m.13 views

JVN#72586781: ASP.NET vulnerable to cross-site scripting

ASP.NET contains an issue in the escape processes for string output. Web applications that use ASP.NET may contain a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the...

6.5AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2011/06/15 12:0 a.m.13 views

JVN#26408023: Internet Explorer vulnerable to cross-site scripting

Internet Explorer contains a cross-site scripting vulnerability due to the processing of malformed file names. Impact An arbitrary script may be executed on the user's web browser when the setting for "Use folder view for FTP sites" is turned off. Note that this setting is turned on by default...

6.4AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2009/02/04 8:42 a.m.13 views

Multiple Vulnerabilities Concerning Hitachi Web Server

Overview Hitachi Web Server has vulnerabilities listed below: 1. A vulnerability that allows to roll back the Open SSL version when using the SSL. 2. Cross-site scripting vulnerability in contents created automatically by the Hitachi Web Server. 3. Cross-site scripting vulnerability due to...

6.8CVSS6.6AI score0.94926EPSS
SaveExploits8References12
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/10/21 10:25 a.m.13 views

Movable Type cross-site scripting vulnerability

Overview Movable Type contains a cross-site scripting vulnerability. Movable Type, a web log system from Six Apart KK, contains a vulnerability resulting from the improper handling of the management page that can lead to cross-site scripting. This vulnerability is different from JVN30385652. An...

4CVSS5.7AI score0.01019EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/06/20 4:46 a.m.13 views

CGIWrap error page cross-site scripting vulnerability

Overview CGIWrap error page is vulnerable to a cross-site scripting. CGIWrap is a gateway program that allows general users to use CGI scripts and HTML forms on the web server. CGIWrap contains a cross-site scripting vulnerability as it does not specify charset in the error page. Hirohisa Yamaguc...

4.3CVSS5.9AI score0.0125EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/05/20 3:0 p.m.13 views

MDPro cross-site scripting vulnerability

Overview MDPro, an open source content management system, contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. In addition, if session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solutio...

6.8CVSS6.1AI score0.01406EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/05/20 3:0 p.m.13 views

Hitachi Web Server Cross-Site Scripting Vulnerability with Server-Status Page

Overview When Hitachi Web Server receives a request that contains malicious scripts, they are inserted into the server-satus page the Server automatically creates. This allows the inserted malicious scripts to be executed on the client machines. The vulnerability does not affect the product if th...

4.3CVSS7.7AI score0.27783EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/05/20 3:0 p.m.13 views

MailDwarf cross-site scripting vulnerability

Overview MailDwarf is a mail form CGI provided by HTML Dwarf. MailDwarf contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution...

6.8CVSS6.1AI score0.01182EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2008/03/12 12:0 a.m.13 views

JVN#79114735 Google Desktop cross-site scripting vulnerability

Google Desktop, software for searching information on local computers, contains a cross-site scripting vulnerability. Impact An arbitrary script could be executed on the web browser of a user who uses Google Desktop. Solution According to the vendor, this vulnerability has been fixed in Google...

6.3AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2007/12/18 12:0 a.m.13 views

JVN#75130343 Google Web Toolkit vulnerable to cross-site scripting

Google Web Toolkit GWT is an open source software development framework that allows web developers to create Ajax applications in Java. The benchmark reporting system in GWT is vulnerable to cross-site scripting. Impact An arbitrary script can be executed on the user's web browser. Solution Updat...

6.5AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2007/08/31 12:0 a.m.13 views

JVN#20452446 Shopping Basket Pro directory traversal vulnerability

Shopping Basket Pro from CGI RESCUE is shopping cart software. A directory traversal vulnerability exists in Shopping Basket Pro. Impact A remote attacker could obtain a list of the file and directory names on the server where Shopping Basket Pro is installed. Solution Update the Software Apply t...

7.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2007/08/10 12:0 a.m.13 views

JVN#66303599 WebCart cross-site scripting vulnerability

WebCart provided by CGI's is shopping cart software. WebCart's management interface contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version provided by the vendor. For more...

6.6AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2007/01/17 12:0 a.m.13 views

JVN#13939411 Drupal cross-site scripting vulnerability

Impact An arbitrary script could be executed on the browser of the user who logged into Drupal. In addition, if session information from a cookie is leaked, a remote attacker could possibly conduct session hijacking. Solution Products Affected Drupal 4.6.10 and earlier Drupal 4.7.4 and earlier...

7.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2006/12/28 12:0 a.m.13 views

JVN#45006961 Joomla! cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. If session information in a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected Joomla! 1.0.11 and earlier...

7AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2006/11/27 12:0 a.m.13 views

JVN#47223461 tDiary cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. Solution Products Affected 2.0.2 stable and earlier 2.1.4.20061115 developer version and earlier...

7.2AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2006/08/31 12:0 a.m.13 views

JVN#99776858 Multiple vulnerabilities in Webmin and Usermin

Impact A remote attacker could conduct the followings: Steal Webmin and Usermin's configuration information Execute an arbitrary script on the user's web browser Possibly conduct a session hijack attack if session information from a cookie is leaked Solution Products Affected Webmin 1.290 and...

7.4AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2006/07/18 12:0 a.m.13 views

JVN#81108784 Geeklog cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. If session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected Geeklog 1.4.0sr4 and earlier Geeklog 1.3.11sr6 and earlier...

7AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2006/07/18 12:0 a.m.13 views

JVN#62307185 QwikiWiki cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. User credentials could be leaked as a result. Solution Products Affected QwikiWiki version 1.5.5 and earlier...

7.2AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2006/07/11 12:0 a.m.13 views

JVN#13947696 Ruby contains a vulnerability that prevents safe level 4 from functioning as a sandbox.

Impact An attacker may be able to bypass the security model of a server application and change the status of a untained object. Solution Products Affected Ruby 1.8.4-20060516 and earlier Snapshot versions As a workaround, we recommend that users update to the latest Ruby 1.8.4 snapshot version...

7.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2006/01/31 12:0 a.m.13 views

JVN#89344424 Multiple email clients vulnerable in handling an attachement inapropriately

Impact Actual impact could differ depending on the email clients though, email clients may crash when hadling an attached file with a particular file name. Other possible impacts could be an attached file not being saved or hanged up while in the saving process, or an error message being displaye...

7AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2005/12/05 12:0 a.m.13 views

JVN#76357668 MitakeSearch cross-site scripting vulnerability

Impact A malicious script may be executed on the user's web browser. Solution Products Affected MitakeSearch V4.2...

7.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2005/10/28 12:0 a.m.13 views

JVN#18282718 Hyper Estraier directory traversal/denial of service vulnerability

Impact If a remote attacker sends a specially crafted file and a user saves it in a search target directory, the attacker could register a file not to be searched in an index when the user creats an index, or cause a denial of service. Solution Products Affected Versions earlier than Hyper Estrai...

7.1AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/07/01 5:55 a.m.12 views

Seiko Solutions SkyBridge MB-A100/MB-A110 vulnerable to OS command injection

Overview SkyBridge MB-A100/MB-A110 provided by Seiko Solutions Inc. contains the following vulnerability. OS command injection CWE-78 - CVE-2026-50043 Takeshi Kuramori and Kaori Takashima of National Institute of Information and Communications Technology, Cybersecurity Research Institute reported...

8.6CVSS7.1AI score0.01367EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/06/30 9:7 a.m.12 views

RPG MAKER MV and MZ vulnerable to OS command injection

Overview RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. are game development tools, which provide "save data" facility to create a file to preserve game status and related parameters. A user can save the current game status to a save-file, and later load the file to resume playing the...

8.4CVSS7.1AI score0.00677EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/06/17 5:8 a.m.12 views

Multiple vulnerabilities in Canon EOS Network Setting Tool

Overview FTP/FTPS/SFTP Communication Testing features of PC Software EOS Network Setting Tool provided by Canon Inc. contain multiple vulnerabilities listed below. Improper validation of SSH host key CWE-295 - CVE-2026-9258 Improper validation of server certificate CWE-295 - CVE-2026-9259 Use of...

9.8CVSS5.8AI score0.00267EPSS
SaveExploits0References13
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/06/10 2:16 a.m.12 views

Vulnerability in Cosminexus HTTP Server and Hitachi Web Server

Overview Vulnerability has been found in Cosminexus HTTP Server and Hitachi Web Server. CVE-2025-65082 This vulnerability will not occur if CGI is not used. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information'...

6.5CVSS6.7AI score0.00789EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/04/02 5:58 a.m.12 views

Multiple vulnerabilities in FUJI Electric V-SFT (April 2026)

Overview V-SFT provided by FUJI ELECTRIC CO., LTD. contains multiple vulnerabilities listed below. Stack-based buffer overflow in VS6ComFile!CV7BaseMap::WriteV7DataToRom CWE-121 - CVE-2026-32925 Out-of-bounds read in VS6ComFile!loadlinkinf CWE-125 - CVE-2026-32926 Out-of-bounds read in...

8.4CVSS6.8AI score0.00209EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/03/26 8:41 a.m.12 views

Digital Photo Frame GH-WDF10A vulnerable to improper access restriction

Overview Digital Photo Frame GH-WDF10A provided by GREEN HOUSE CO., LTD. contains the following vulnerability. Active debug code CWE-489 - CVE-2026-33201 Koki Takase reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

7CVSS6.8AI score0.00174EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/02/20 3:31 a.m.12 views

Installer for Job log aggregation/analysis software RICOH Job Log Aggregation Tool may insecurely load Dynamic Link Libraries

Overview The installer for Job log aggregation/analysis software RICOH Job Log Aggregation Tool contains the following vulnerability related to the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2026-26050 Kazuma...

8.4CVSS5.7AI score0.0016EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/02/17 11:46 a.m.12 views

Vulnerability in Cosminexus HTTP Server

Overview Vulnerability has been found in Cosminexus HTTP Server. CVE-2025-23048 This vulnerability does not apply if SSL is disabled. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official...

9.1CVSS5.5AI score0.0097EPSS
SaveExploits1References2
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/02/03 5:57 a.m.12 views

Multiple vulnerabilities in ELECOM wireless LAN products

Overview Wireless LAN products provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Cross-site request forgery CWE-352 - CVE-2026-20704 OS command injection CWE-78 - CVE-2026-22550 Use of weak credentials CWE-1391 - CVE-2026-24449 Stack-based buffer overflow CWE-121 -...

9.8CVSS6.3AI score0.01664EPSS
SaveExploits0References10
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/01/21 6:17 a.m.12 views

Ruijie Networks AP180 series vulnerable to OS command injection

Overview AP180 series provided by Ruijie Networks Co., Ltd. contains the following vulnerability. OS command injection CWE-78 - CVE-2026-23699 Thanh Do of BabyPhD reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

8.6CVSS5.9AI score0.0154EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/01/16 6:6 a.m.12 views

Multiple Vulnerabilities in TOA Network Cameras TRIFORA 3 series

Overview Network Cameras TRIFORA 3 series provided by TOA Corporation contain multiple vulnerabilities listed below. OS command injection CWE-78 - CVE-2026-20759 Cross-site scripting CWE-79 - CVE-2026-20894 Path traversal CWE-22 - CVE-2026-22876 Shogo Iyota of GMO Cybersecurity by Ierae reported...

8.8CVSS7.5AI score0.0143EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/01/09 9:17 a.m.12 views

RICOH Streamline NX vulnerable to improper authorization

Overview RICOH Streamline NX provided by Ricoh Company, Ltd. contains the following vulnerability. Improper authorization CWE-639 - CVE-2026-21409 Ricoh Company, Ltd. reported this vulnerability to IPA to notify the users of its solution through JVN. JPCERT/CC and Ricoh Company, Ltd. coordinated...

8.2CVSS5.7AI score0.00311EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2026/01/07 5:10 a.m.12 views

Multiple vulnerabilities in multiple NEC branded projectors manufactured by Sharp Display Solutions, Ltd.

Overview Multiple NEC branded projectors manufactured by Sharp Display Solutions, Ltd. contain multiple vulnerabilities listed below. Path traversal CWE-22, CVE-2025-11540 Stack-based buffer overflow CWE-121, CVE-2025-11541, CVE-2025-11542 Improper validation of integrity check value CWE-354,...

9.8CVSS7.7AI score0.0037EPSS
SaveExploits0References12
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/11/07 5:55 a.m.12 views

CLUSTERPRO X and EXPRESSCLUSTER X vulnerable to OS command injection

Overview CLUSTERPRO X and EXPRESSCLUSTER X provided by NEC Corporation contain the following vulnerability. OS command injection CWE-78 - CVE-2025-11546 NEC Corporation reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and NEC Corporation coordinated under...

9.8CVSS7.4AI score0.00442EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/10/10 4:56 a.m.12 views

BUFFALO NAS Navigator2 registers a Windows service with an unquoted file path

Overview NAS Navigator2 provided by BUFFALO INC. contains the following vulnerability. Unquoted search path or element CWE-428 - CVE-2025-61871 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

8.4CVSS7.5AI score0.00155EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/09/19 7:21 a.m.12 views

OMRON SOCIAL SOLUTIONS Uninterruptible Power Supply (UPS) management application registers a Windows service with an unquoted file path

Overview Uninterruptible Power Supply UPS management application provided by OMRON SOCIAL SOLUTIONS Co., Ltd. registers a Windows service with an unquoted file path CWE-428, CVE-2025-9818. OMRON SOCIAL SOLUTIONS Co., Ltd. reported this vulnerability to JPCERT/CC to notify users of its solution...

6.7CVSS6.7AI score0.00139EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/09/12 12:0 a.m.12 views

JVN#89109713: WTW-EAGLE App vulnerable to improper server certificate validation

WTW-EAGLE App provided by Wireless Tsukamoto Co., Ltd. contains the following vulnerability. Improper server certificate validation CWE-295 CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 6.3 CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N Base Score 4.8 CVE-2025-58781...

6.3CVSS6.3AI score0.00143EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/09/05 6:12 a.m.12 views

"Yahoo! Shopping" App for Android fails to restrict custom URL schemes properly

Overview "Yahoo! Shopping" App for Android provided by LY Corporation contains the following vulnerability. Improper authorization in handler for custom URL scheme CWE-939 - CVE-2025-41408 Shiga Takuma of BroadBand Security, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

5.3CVSS6.8AI score0.00275EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/09/03 12:0 a.m.12 views

JVN#65839588: Web Caster V130 vulnerable to cross-site request forgery

Web Caster V130 provided by NTT EAST, Inc. and NTT WEST, Inc. is a 050IP telephony-enabled broadband router. Web Caster V130 contains the following vulnerability. Cross-site request forgery CWE-352 CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:A/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N Base Score 2.0...

3.7CVSS6.4AI score0.00129EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/09/01 6:22 a.m.12 views

Denial-of-service (DoS) vulnerability in Konica Minolta bizhub series

Overview A vulnerability that could allow a Denial-of-Service DoS is reported in the Konica Minolta bizhub series. Konica Minolta bizhub series provided by Konica Minolta, Inc. contains the following vulnerability. Uncaught exception CWE-248 - CVE-2025-54777 Konica Minolta, Inc. reported this...

5.3CVSS6.8AI score0.00117EPSS
SaveExploits0References4
Total number of security vulnerabilities5000