Lucene search
+L
JvnMost viewed

5651 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2006/11/10 12:0 a.m.•14 views

JVN#34522909 Kahua vulnerable in allowing to share login sessions

Impact A remote attacker could possibly take over the user privileges and manipulate applications when several user databases are in use. If a multiple applications of Kahua refer to different user database, a user could log into multiple applications which results in a login session to be shared...

7.3AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2006/09/26 12:0 a.m.•14 views

JVN#30144870 SugarCRM cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. In addition, if session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected SugarCRM 4.2.1b and earlier SugarCRM 4.0.1g and earlier SugarCRM 3.5.1h and earlier...

7AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2006/07/12 12:0 a.m.•14 views

JVN#73368472: ServerView directory traversal vulnerability

Impact A remote attacker could view particular files on the server. Solution Products Affected ServerView V2.50 - V3.60L98 ServerView V4.10L11 - V4.11L81...

7.2AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2006/06/02 12:0 a.m.•14 views

JVN#28513736 Mozilla Firefox HTTP 1.0 response smuggling vulnerability

Impact If a user views malicious web pages, an attacker could inject a script into the responses from a server in other domains. Solution Products Affected Mozilla Firefox 1.5.0.3 and earlier...

7AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2005/12/14 12:0 a.m.•14 views

JVN#28011334 Opera bookmark function vulnerability

Impact An user cannot start Opera Web Browser because it crashes during startup. Solution Products Affected Opera for Windows, earlier than version 8.51 Opera for MacOS, earlier than version 8.51...

7.2AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/06/26 5:25 a.m.•13 views

ExpressUpdate Agent for Windows improper access restriction on its named pipe

Overview ExpressUpdate Agent for Windows provided by NEC Corporation is the software module for NEC server products, to support remote management of installed software. ExpressUpdate Agent for Windows configures its named pipe with an improper access restriction. Exposed IOCTL with Insufficient...

8.5CVSS6.2AI score0.00122EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/06/17 5:8 a.m.•13 views

Multiple vulnerabilities in Canon EOS Network Setting Tool

Overview FTP/FTPS/SFTP Communication Testing features of PC Software EOS Network Setting Tool provided by Canon Inc. contain multiple vulnerabilities listed below. Improper validation of SSH host key CWE-295 - CVE-2026-9258 Improper validation of server certificate CWE-295 - CVE-2026-9259 Use of...

9.8CVSS5.8AI score0.00267EPSS
SaveExploits0References13
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/03/17 7:42 a.m.•13 views

Vulnerability in Hitachi Command Suite

Overview VulnerabilityCVE-2025-48976 has been found in Hitachi Command Suite. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropriate action...

7.5CVSS6.8AI score0.67821EPSS
SaveExploits1References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/03/05 3:36 a.m.•13 views

EC-CUBE vulnerable to multi-factor authentication bypass

Overview EC-CUBE provided by EC-CUBE CO.,LTD. contains the following vulnerability. Authentication bypass using an alternate path or channel CWE-288 - CVE-2026-30777 EC-CUBE CO.,LTD. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and EC-CUBE CO.,LT...

6.9CVSS5.8AI score0.00339EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/02/17 3:46 a.m.•13 views

Joomla! CMS vulnerable to cross-site scripting

Overview Joomla! CMS provided by Joomla! Project contains the following vulnerability. Cross-site scripting CWE-79 - CVE-2025-63082 Sho Sugiyama of SUZUKI MOTOR CORPORATION reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

8.4CVSS5.7AI score0.00182EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/01/14 8:3 a.m.•13 views

Chainlit vulnerable to improper access restriction

Overview Chainlit provided by Chainlit contains the following vulnerability. Authorization bypass through user-controlled key CWE-639 - CVE-2025-68492 Shotaro Kimura of NRI SecureTechnologies, Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

4.2CVSS6.6AI score0.00206EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/01/13 10:1 a.m.•13 views

Multiple vulnerabilities in EATON UPS Companion

Overview EATON UPS Companion provided by Eaton contains multiple vulnerabilities listed below. Uncontrolled search path element CWE-427, CVE-2025-59887 Unquoted search path or element CWE-428, CVE-2025-59888 Kazuma Matsumoto of GMO Cybersecurity by IERAE, Inc. reported these vulnerabilities to th...

8.6CVSS7.8AI score0.00277EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/10/17 4:38 a.m.•13 views

Installer of AutoDownloader may insecurely load Dynamic Link Libraries

Overview Installer of AutoDownloader provided by Panasonic Connect Co., Ltd. contains the following vulnerability with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries. Uncontrolled search path element CWE-427 - CVE-2025-11223 Kazuma Matsumoto of GMO Cybersecurity ...

8.4CVSS6.9AI score0.00151EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/10/06 4:52 a.m.•13 views

Trend Micro Antivirus for Mac vulnerable to Local Privilege Escalation

Overview Trend Micro Incorporated has released a security update for Trend Micro Antivirus for Mac. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact An unprivileged user may gain root access by exploiting a leftover file after...

6.8AI score
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/09/05 12:0 a.m.•13 views

JVN#35290164: "Yahoo! Shopping" App for Android fails to restrict custom URL schemes properly

"Yahoo! Shopping" App for Android provided by LY Corporation contains the following vulnerability. Improper authorization in handler for custom URL scheme CWE-939 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N Base Score 5.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N Base Score...

5.3CVSS6.8AI score0.00275EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/08/21 2:49 a.m.•13 views

FUJIFILM Healthcare Americas Synapse Mobility vulnerable to Privilege Escalation

Overview Synapse Mobility provided by FUJIFILM Healthcare Americas Corporation is vulnerable to privilege escalation. Privilege escalation vulnerability through external control of Web parameter CWE-472 - CVE-2025-54551 Christopher Alejandro Moroco reported this vulnerability to CISA ICS...

5.3CVSS7.1AI score0.00232EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/08/14 12:0 a.m.•13 views

JVN#89385114: Seagate Toolkit registers a Windows service with an unquoted file path

Seagate Toolkit provided by Seagate Technology contains the following vulnerability. Unquoted search path or element CWE-428 CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 8.4 CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base Score 6.7 CVE-2025-9043 Impact A user with...

6.7CVSS7.8AI score0.00145EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/07/29 4:44 a.m.•13 views

"SwitchBot" App vulnerable to insertion of sensitive information into log file

Overview "SwitchBot" App provided by SwitchBot contains the following vulnerability. Insertion of sensitive information into log file CWE-532 - CVE-2025-53649 Soh Satoh reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnershi...

5.9CVSS6.3AI score0.00146EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/07/02 2:31 a.m.•13 views

Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS)

Overview CONPROSYS HMI System CHS provided by Contec Co.,Ltd. contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2025-34080 Insertion of sensitive information into debugging code CWE-215 - CVE-2025-34081 Alex Williams of Converge Technology Solutions...

7.5CVSS6.8AI score0.01083EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/06/03 12:0 a.m.•13 views

JVN#05562338: Improper file access permission settings in PC Time Tracer

PC Time Tracer provided by Keiyo System Co., LTD contains a vulnerability listed below. Incorrect default permissions CWE-276 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 7.0 CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H Base Score 7.3 CVE-2025-46355 Impact Arbitrary...

7.3CVSS6.8AI score0.00139EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/04/11 4:52 a.m.•13 views

TP-Link Deco BE65 Pro vulnerable to OS command injection

Overview Deco BE65 Pro provided by TP-LINK contains an OS command injection vulnerability CWE-78. Chuya Hayakawa and Ryo Kamino of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact An arbitrary OS command may be executed by the user who can log...

8CVSS7.4AI score0.01528EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/03/06 5:27 a.m.•13 views

Multiple vulnerabilities in RemoteView Agent (for Windows)

Overview RemoteView allows a local PC to connect and control remote PCs through the cloud service provided by RSUPPORT Co.,Ltd. On the remote PCs should be installed RemoteView Agent. The following vulnerabilities are reported on RemoteView Agent installation. Incorrect access permission of a...

7.8CVSS7AI score0.00149EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/02/18 7:24 a.m.•13 views

Out-of-bounds read vulnerability in OMRON CX-Programmer

Overview CX-Programmer provided by OMRON Corporation contains an out-of-bounds read vulnerability CWE-125, CVE-2025-0591. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact Having a user open a specially crafted file may lead to information...

7.8CVSS6.2AI score0.00174EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/12/02 12:0 a.m.•13 views

JVN#53958863: Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers

UNIVERGE IX/IX-R/IX-V series routers provided by NEC Corporation contain multiple vulnerabilities listed below. Command injection CWE-77 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H Base Score 7.2 CVE-2024-11013 Cross-site request forgery CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N Base...

7.2CVSS7.6AI score0.0107EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/11/26 12:0 a.m.•13 views

JVN#87182660: WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting

WordPress Plugin "WP Admin UI Customize" provided by gqevu6bsiz contains a stored cross-site scripting vulnerability CWE-79. Impact If a malicious admin user customizes the admin screen with some malicious contents, an arbitrary script may be executed on the web browser of the other users who are...

4.8CVSS6.1AI score0.00369EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/24 12:0 a.m.•13 views

JVN#78356367: Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions

Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION fail to restrict access permissions CWE-451. Impact An attacker who identified WAN-side IPv6 address may access the product's Device Setting page via WAN-side. Solution Update the firmware Updat...

5.3CVSS5.1AI score0.00428EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/08/03 4:45 a.m.•13 views

OMRON CJ series and CS/CJ Series EtherNet/IT unit vulnerable to Denial-of-Service (DoS)

Overview Denial-of-service DoS vulnerability due to improper validation of specified type of input CWE-1287 issue exists in the built-in EtherNet/IP port of the CJ Series CJ2 CPU unit and the communication function of the CS/CJ Series EtherNet/IP unit provided by OMRON Corporation. OMRON...

7.5CVSS6.8AI score0.00866EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/03/27 4:39 a.m.•13 views

baserCMS vulnerable to arbitrary file uploads

Overview baserCMS provided by baserCMS Users Community allows an authenticated user to upload arbitrary files CWE-434. Taisei Inoue of GMO Cybersecurity by Ierae, Inc. and Yusuke Akagi of Mitsui Bussan Secure Directions, Inc., Shiga Takuma of BroadBand Security, Inc. reported this vulnerability t...

9.8CVSS7AI score0.01089EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/01/31 5:10 a.m.•13 views

SUSHIRO App for Android outputs sensitive information to the log file

Overview SUSHIRO App for Android provided by AKINDO SUSHIRO CO., LTD. outputs sensitive information to the log file CWE-532. Impact An attacker may obtain a credential information from the log file. Solution Update the Application Update the application to the latest version according to the...

7.5CVSS6.5AI score0.00784EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/04/22 4:53 a.m.•13 views

Hammock AssetView missing authentication for critical functions

Overview AssetView provided by Hammock Corporation misses authentication for some critical functions CWE-306 on the managing server. Denis Faiustov, Ruslan Sayfiev of GMO Cyber Security by IERAE reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Securit...

9.8CVSS7.9AI score0.04398EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/08/11 5:20 a.m.•13 views

Multiple vulnerabilities in CyberMail

Overview CyberMail contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2020-5540 Open Redirect CWE-601 - CVE-2020-5541 Tony Kuo and Chia-Lung Hsieh of CHT Security reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security...

6.1CVSS6.6AI score0.01501EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/11/02 5:56 a.m.•13 views

WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting

Overview The WordPress plugin "Event Calendar WD" provided by Web-Dorado contains a stored cross-site scripting vulnerability CWE-79. Yuta Kitaoka of TokyoDenkiUniversity Cryptography Lab reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

5.4CVSS5.9AI score0.01204EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/08/17 4:49 a.m.•13 views

NoMachine App for Android vulnerable to environment variables alteration

Overview NoMachine App for Android contains an information alteration vulnerability. Satoru Nagaoka of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A remote attacker may alte...

9.8CVSS7.2AI score0.01652EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/08/03 6:4 a.m.•13 views

Multiple cross-site scripting vulnerabilities in GROWI

Overview GROWI provided by WESEEK, Inc. contains multiple cross-site scripting vulnerabilities listed below. Stored cross-site scripting vulnerability in the UserGroup Management section of admin page CWE-79 - CVE-2018-0652 Stored cross-site scripting vulnerability in Wiki page view CWE-79 -...

6.4CVSS5.9AI score0.00899EPSS
SaveExploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/07/23 5:28 a.m.•13 views

Installer of ChatWork Desktop App for Windows may insecurely load Dynamic Link Libraries

Overview Installer of ChatWork Desktop App for Windows provided by ChatWork Co,. LTD. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Hamasaki Hiroki of NTT Communications Corporation reported this vulnerability to IPA. JPCERT/CC...

7.8CVSS6.8AI score0.00796EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/04/05 1:22 a.m.•13 views

DoS Vulnerability in JP1/ServerConductor/Deployment Manager and Hitachi Compute Systems Manager

Overview A DoS Vulnerability was found in JP1/ServerConductor/Deployment Manager and Hitachi Compute Systems Manager Deployment Manager Plug-in. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the...

7.8CVSS6.8AI score
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/03/13 7:43 a.m.•13 views

QQQ SYSTEMS vulnerable to cross-site scripting

Overview QQQ SYSTEMS provided by Gundam Cult QQQ is a CGI script to create quiz pages. quiz.cgi of QQQ SYSTEMS contains a cross-site scripting vulnerability CWE-79. When a user accesses a malicious page and is redirected to a page created with the product, an arbitrary script may be executed on t...

6.1CVSS5.9AI score0.0072EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/11/02 4:57 a.m.•13 views

Installer of "Flets Easy Setup Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Easy Setup Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

7.8CVSS6.8AI score0.00911EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/08/25 6:2 a.m.•13 views

Installer of "Flets Install Tool" may insecurely load Dynamic Link Libraries

Overview Installer of "Flets Install Tool" provided by NIPPON TELEGRAPH AND TELEPHONE WEST CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA. JPCERT/CC...

9.3CVSS6.9AI score0.01059EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/04/25 4:36 a.m.•13 views

Installer of Vivaldi for Windows may insecurely load executable files

Overview The installer of Vivaldi for Windows contains an issue in the file search path when loading files, which may insecurely load executable files CWE-427. Eiji James Yoshida of Security Professionals Network Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer...

7.8CVSS6.9AI score0.02516EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/04/11 4:37 a.m.•13 views

ASSETBASE vulnerable to cross-site scripting

Overview ASSETBASE provided by UCHIDA YOKO CO., LTD. is an IT asset management tool. ASSETBASE contains a cross-site scripting vulnerability CWE-79. Keitaro Yamazaki of Kyoto University reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

6.1CVSS6AI score0.01174EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/10/03 6:43 a.m.•13 views

Cybozu Office vulnerable to information disclosure

Overview Cybozu Office contains an information disclosure vulnerability in the page where CGI environment variables are displayed. Cookie that contains session information has httponly attribute, and the Cookie value cannot be obtained by JavaScript code. However, Cookie values can be obtained in...

6.5CVSS6.3AI score0.02023EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/09/15 5:26 a.m.•13 views

H2O use of externally-controlled format string

Overview H2O is an open source web server software. H2O uses externally-controlled format strings CWE-134 in the code which output error logs. Kazuho Oku reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Kazuho Oku coordinated under the Information...

7.5CVSS7AI score0.01802EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/08/17 7:12 a.m.•13 views

Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries

Overview PhishWall Client Internet Explorer Version, provided by SecureBrain Corporation, is an anti-phishing and anti-MITB software. The installer of PhishWall Client Internet Explorer Version contains an issue with the DLL search path, which may lead to insecurely loading dynamic linking...

9.3CVSS6.9AI score0.01475EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2016/08/05 12:0 a.m.•13 views

JVN#09470233: Android stock browser vulnerable to denial-of-service (DoS)

The Android stock browser contains a denial-of-service DoS vulnerability. Impact When receiving a specially crafted packet, the Android stock browser may crash. Solution Do not use Android stock browser If using an affected version of the Android stock browser, it is recommended to use another...

7AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/12/17 6:19 a.m.•13 views

Welcart vulnerable to SQL injection

Overview Welcart provided by Collne Inc. is a WordPress plugin. Welcart contains an SQL injection vulnerability CWE-89 due to a flaw in the processing of searchcolumn and switch parameter in admin.php. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

6.5CVSS7.6AI score0.01579EPSS
SaveExploits1References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/10/09 5:12 a.m.•13 views

Dojo Toolkit vulnerable to cross-site scripting

Overview Dojo Toolkit is a software to assist in building web applications. Dojo Toolkit contains a cross-site scripting vulnerability. Daiki Fukumori of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

4.3CVSS6AI score0.02224EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/09/30 6:4 a.m.•13 views

MATCHA INVOICE vulnerable to SQL injection

Overview MATCHA INVOICE provided by ICZ Corporation is a web-based billing management software. MATCHA INVOICE contains multiple SQL injection CWE-89 vulnerabilities. Shoji Baba reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

6.5CVSS7.5AI score0.01049EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/09/29 5:5 a.m.•13 views

niconico App for iOS fails to verify SSL server certificates

Overview niconico App for iOS provided by DWANGO Co., Ltd. fails to verify SSL server certificates. AOKI Keiichi reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A man-in-the-middle attack may allow an attack...

7.4CVSS6.4AI score0.00945EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2015/09/16 7:58 a.m.•13 views

Photon vulnerable to URL whitelist bypass

Overview Photon provided by Newphoria Corporation Inc. is an application for Android built using "applican". Photon contains an issue where an arbitrary page may be loaded if the application is launched using the URL-scheme. Kenta Suefusa and Tomonori Shiomi of Sprout Inc. reported this...

6.8CVSS6.7AI score0.01093EPSS
SaveExploits0References5
Total number of security vulnerabilities5000