Lucene search
+L
JvnMost viewed

5651 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/09/29 5:44 a.m.9 views

DataSpider Servista improper restriction of XML external entity references

Overview DataSpider Servista provided by Saison Technology Co.,Ltd. is a data integration software. DataSpider Servista contains the following vulnerability. Improper restriction of XML external entity reference CWE-611 - CVE-2025-48006 Shigeaki Tsunoda of Cyber Defense Institute, Inc. reported...

9.1CVSS6.7AI score0.00496EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/09/19 5:58 a.m.9 views

Multiple vulnerabilities in I-O DATA wireless LAN routers

Overview Wireless LAN routers provided by I-O DATA DEVICE, INC. contains multiple vulnerabilities listed below. Hidden functionality CWE-912 - CVE-2025-55075 OS command injection CWE-78 - CVE-2025-58116 Chuya Hayakawa of 00One, Inc. reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinat...

8.6CVSS7.7AI score0.01149EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/09/01 12:0 a.m.9 views

JVN#22016482: Seiko Solutions SkyBridge BASIC MB-A130 vulnerable to OS command injection

SkyBridge BASIC MB-A130 provided by Seiko Solutions Inc. contains the following vulnerability. OS command injection CWE-78 CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 9.3 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Base Score 9.8 CVE-2025-54857 Impact A remote...

9.8CVSS8.1AI score0.03133EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/08/29 5:47 a.m.9 views

Multiple vulnerabilities in multiple iND products

Overview Multiple products provided by iND Co.,Ltd contain multiple vulnerabilities listed below. Insecure storage of sensitive information CWE-922 - CVE-2025-53507 OS command injection CWE-78 - CVE-2025-53508 HL330-DLS, HL320-DLS Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported...

8.6CVSS7.4AI score0.0126EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/08/27 12:0 a.m.9 views

JVN#55678602: Improper file access permission settings in multiple i-フィルター products

Multiple i-フィルター products provided by Digital Arts Inc. contains the following vulnerability. Incorrect default permissions CWE-276 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N Base Score 8.5 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8 CVE-2025-57846 Impact A...

8.5CVSS7.5AI score0.0015EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/08/18 12:0 a.m.9 views

JVN#46919949: PgManage vulnerable to injection

PgManage provided by Command Prompt, Inc. uses RestrictedPython module. The version of RestrictedPython module imported to PgManage contains vulnerabilities, which are inherited to PgManage CWE-477. Impact A user of the affected product may escape a sandbox and execute arbitrary code. Solution...

7.6AI score
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/08/01 3:5 a.m.9 views

Multiple vulnerabilities in PowerCMS

Overview PowerCMS provided by Alfasado Inc. contains multiple vulnerabilities listed below. Reflected cross-site scripting CWE-79 - CVE-2025-36563 Stored cross-site scripting CWE-79 - CVE-2025-41391 Path traversal in file uploading CWE-22 - CVE-2025-41396 Path traversal in backup restore CWE-22 -...

8.6CVSS6.5AI score0.00578EPSS
SaveExploits0References12
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/07/07 7:4 a.m.9 views

Windows shortcut following (.LNK) vulnerability in Trend Micro Security for Windows (CVE-2025-52521)

Overview Trend Micro Incorporated has released a security update for Trend Micro Security for Windows CVE-2025-52521. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact Arbitrary files or folders may be deleted due to a windows...

7.8CVSS6.9AI score0.00339EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/06/24 2:18 a.m.9 views

Trend Micro Internet Security and Trend Micro Maximum Security vulnerable to link following local privilege escalation (CVE-2025-49384, CVE-2025-49385)

Overview Trend Micro Incorporated has released security updates for Trend Micro Internet Security and Trend Micro Maximum Security that contains a fix for a link following local privilege escalation vulnerability CVE-2025-49384, CVE-2025-49385. Trend Micro Incorporated reported this vulnerability...

7.8CVSS6.9AI score0.00146EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/05/23 6:36 a.m.9 views

Improper pattern file validation in i-FILTER optional feature 'Anti-Virus & Sandbox'

Overview The optional feature 'Anti-Virus & Sandbox' of i-FILTER provided by Digital Arts Inc. validates pattern files improperly. Improper pattern file validation CWE-348 - CVE-2025-47149 Digital Arts Inc. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC...

6.9CVSS6.6AI score0.00158EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/04/02 6:12 a.m.9 views

Multiple vulnerabilities in JTEKT ELECTRONICS CORPORATION's products

Overview HMI ViewJet C-more series and HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contain multiple vulnerabilities listed below. Improper Restriction of Rendered UI Layers or Frames CWE-1021 - CVE-2025-24310 Allocation of Resources Without Limits or Throttling CWE-770 -...

6.5CVSS7AI score0.00575EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/03/25 8:10 a.m.9 views

Multiple vulnerabilities in AssetView

Overview AssetView provided by Hammock Corporation contains multiple vulnerabilities listed below. Missing authentication for critical function CWE-306 - CVE-2025-25060 Acquiring sensitive information from sent data to the developer CWE-201 - CVE-2025-27244 Takao Kondo of VeriServe Corporation...

8.2CVSS7.2AI score0.00482EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/02/05 5:6 a.m.9 views

Multiple vulnerabilities in Defense Platform Home Edition

Overview Defense Platform Home Edition provided by Humming Heads Inc. contains multiple vulnerabilities listed below. Improper handling of message in specific process CWE-422 - CVE-2025-20094 Execution with unnecessary privileges CWE-250 - CVE-2025-22890 Improper handling of message in specific...

8.8CVSS8.1AI score0.00189EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2025/01/28 12:0 a.m.9 views

JVN#88046370: WordPress Plugin "Simple Image Sizes" vulnerable to cross-site scripting

WordPress Plugin "Simple Image Sizes" provided by Rahe contains a stored cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of the user who is logging in to the product with the administrative privilege and accessing the settings screen...

4.8CVSS6.2AI score0.00266EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/11/19 1:41 a.m.9 views

Multiple vulnerabilities in Rakuten Turbo 5G

Overview Rakuten Turbo 5G provided by Rakuten Mobile, Inc. contains multiple vulnerabilities listed below. Missing authentication for critical function CWE-306 - CVE-2024-47865 OS command injection CWE-78 - CVE-2024-48895 Exposure of sensitive system information to an unauthorized control sphere...

8.8CVSS8AI score0.00999EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/10/22 4:2 a.m.9 views

Multiple SQL injection vulnerabilities in Trend Micro Deep Discovery Inspector

Overview Trend Micro Incorporated has released a security update for Trend Micro Deep Discovery Inspector. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Information disclosure due to multiple SQL injection vulnerabilities...

9.1CVSS8.1AI score0.01234EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/09/30 5:15 a.m.9 views

File Permissions Vulnerability in Hitachi Ops Center Common Services

Overview File permissions vulnerability exists in Hitachi Ops Center Common Services. CVE-2024-2819: File permission vulnerability in Hitachi Ops Center Common Services Display new window Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer ...

6.5CVSS6.8AI score0.00202EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/09/18 5:34 a.m.9 views

Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce"

Overview WordPress plugin "Welcart e-Commerce" provided by Welcart Inc. contains multiple vulnerabilities listed below. SQL injection CWE-89 - CVE-2024-42404 Cross-site scripting CWE-79 - CVE-2024-45366 Shogo Kumamaru of LAC CyberLink Co., Ltd. reported this vulnerability to IPA. JPCERT/CC...

8.8CVSS7.6AI score0.00482EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/09/06 5:39 a.m.9 views

Secure Boot bypass Vulnerability in PRIMERGY

Overview PRIMERGY is an IA server provided by Fsas Technologies Inc. PRIMERGY contains a vulnerability where Secure Boot function is bypassed. This is due to a vulnerability called "PKFail" CVE-2024-8105, which was publicly disclosed by Binarly. Fsas Technologies Inc. reported this vulnerability ...

6.4CVSS6.6AI score0.00274EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/09/02 5:57 a.m.9 views

Panasonic Control FPWIN Pro7 vulnerable to stack-based buffer overflow

Overview Control FPWIN Pro7 provided by Panasonic contains a stack-based buffer overflow vulnerability CWE-121, CVE-2024-7013. Michael Heinzl reported this vulnerability to the developer and coordinated. After the coordination was completed, Panasonic reported the case to JPCERT/CC to notify user...

7.8CVSS7.5AI score0.00284EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/08/29 6:8 a.m.9 views

WindLDR and WindO/I-NV4 store sensitive information in cleartext

Overview PLC programming software "WindLDR" and Operator Interfaces' Touchscreen Programming Software "WindO/I-NV4" provided by IDEC Corporation store sensitive information in cleartext form CWE-312. Yuki Meguro of Toinx Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

8.1CVSS6.6AI score0.00447EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/07/10 5:16 a.m.9 views

Out-of-bounds write vulnerability in Ricoh MFPs and printers

Overview MFPs multifunction printers and printers provided by Ricoh Company, Ltd. contain an out-of-bounds write vulnerability CWE-787. Ricoh Company, Ltd. reported this vulnerability to IPA to notify users of its solution through JVN. JPCERT/CC and Ricoh Company, Ltd. coordinated under the...

8.2CVSS6.8AI score0.00576EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/07/09 5:27 a.m.9 views

Multiple vulnerabilities in multiple Webmin products

Overview Multiple Webmin products contain multiple vulnerabilities listed below. sysinfo.cgi is vulnerable to cross-site scripting CWE-79 CVE-2024-36450 sessionlogin.cgi is vulnerable to cross-site scripting CWE-79 CVE-2024-36453 ajaxterm module is vulnerable to improper handling of insufficient...

8.8CVSS6.3AI score0.00569EPSS
SaveExploits0References10
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/05/17 6:46 a.m.9 views

Panasonic KW Watcher vulnerable to memory buffer error

Overview KW Watcher provided by Panasonic contains a vulnerability due to improper restriction of operations within the bounds of a memory buffer CWE-119, CVE-2024-4162. Michael Heinzl reported this vulnerability to Panasonic and coordinated. After the coordination was completed, Panasonic report...

4.4CVSS6.8AI score0.00172EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/04/23 9:21 a.m.9 views

TvRock vulnerable to denial-of-service (DoS)

Overview TvRock provided by TvRock according to the original report submitted by the reporter is a tool to set a timer recording for a TV program. TvRock contains a denial-of-service DoS vulnerability CWE-400. During the meeting of Committee for authorizing the disclosure of unresolved...

5.3CVSS6.7AI score0.00611EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/04/08 4:44 a.m.9 views

Multiple vulnerabilities in WordPress Plugin "Ninja Forms"

Overview WordPress Plugin "Ninja Forms" provided by Saturday Drive contains multiple vulnerabilities listed below. Cross-site request forgery CWE-352 - CVE-2024-25572 Stored cross-site scripting in submit processing CWE-79 - CVE-2024-26019 Stored cross-site scripting in custom fields for labels...

8.8CVSS6.2AI score0.00532EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/04/01 5:44 a.m.9 views

KEYENCE VT STUDIO may insecurely load Dynamic Link Libraries

Overview VT STUDIO provided by KEYENCE CORPORATION contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427, CVE-2024-28099. KEYENCE CORPORATION reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact...

7.8CVSS6.8AI score0.00188EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/04/01 3:31 a.m.9 views

Multiple vulnerabilities in KEYENCE KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12

Overview KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12 provided by KEYENCE CORPORATION contain multiple vulnerabilities listed below. Out-of-bounds write CWE-787 - CVE-2024-29218 Out-of-bounds read CWE-125 - CVE-2024-29219 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC...

8.8CVSS7.3AI score0.00848EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/03/25 9:16 a.m.9 views

BUFFALO LinkStation 200 series vulnerable to arbitrary code execution

Overview LinkStation 200 series provided by BUFFALO INC. is a network attached storage NAS. LinkStation 200 series contains an arbitrary code execution vulnerability CWE-354, CVE-2023-51073 due to insufficient verification of data authenticity during firmware update. BUFFALO INC. reported this...

8.1CVSS7.8AI score0.01312EPSS
SaveExploits1References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/02/21 6:53 a.m.9 views

EL Injection Vulnerability in Hitachi Global Link Manager

Overview An EL Injection Vulnerability CVE-2024-0715 exists in Hitachi Global Link Manager. Affected products and versions are listed below. Please upgrade your version to the appropriate version. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Plea...

9.8CVSS7AI score0.00457EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/02/07 5:25 a.m.9 views

Sharp NEC Display Solutions' public displays vulnerable to local file inclusion

Overview Multiple public displays provided by Sharp NEC Display Solutions, Ltd. contain a local file inclusion vulnerability CWE-22, CVE-2023-7077. Tunahan TEKEOĞLU of Senior Cyber Security Consultant reported this vulnerability to Sharp NEC Display Solutions, Ltd. and coordinated. Sharp NEC...

9.8CVSS6.9AI score0.00694EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/01/23 6:13 a.m.9 views

Improper restriction of XML external entity references (XXE) in Electronic Deliverables Creation Support Tool provided by Ministry of Defense

Overview Electronic Deliverables Creation Support Tool provided by Ministry of Defense improperly restricts XML external entity references XXE CWE-611. Toyama Taku of NEC Corporation reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

5.5CVSS6.6AI score0.00195EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/01/15 6:59 a.m.9 views

Pleasanter vulnerable to cross-site scripting

Overview Pleasanter provided by Implem Inc. contains a cross-site scripting vulnerability CWE-79. Masamitsu Kushi of Operation Group, Communication Technology Department, Digital Innovation HQ at Mitsubishi Heavy Industries, Ltd. reported this vulnerability to Implem Inc. and coordinated. After t...

6.1CVSS6AI score0.00355EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/12/13 6:30 a.m.9 views

Multiple vulnerabilities in GROWI

Overview GROWI provided by WESEEK, Inc. contains multiple vulnerabilities listed below. Stored cross-site scripting vulnerability in the presentation feature CWE-79 - CVE-2023-42436 Stored cross-site scripting vulnerability in the App Settings /admin/app page and the Markdown Settings...

6.5CVSS5.9AI score0.0045EPSS
SaveExploits0References31
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/11/02 8:21 a.m.9 views

FUJIFILM Business Innovation Corp. and Xerox Corporation MFPs export Address Books with insufficient encryption strength

Overview Multiple MFPs multifunction printers provided by FUJIFILM Business Innovation Corp. and Xerox Corporation provide a facility to export the contents of their Address Book with encrypted form, but the encryption strength is insufficient CWE-1391. Kunal Thakrar and Ceri Coburn of Pen Test...

5.9CVSS6.6AI score0.0035EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/11/02 3:14 a.m.9 views

Multiple Vulnerabilities in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer

Overview Multiple vulnerabilities have been found in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official...

8.6CVSS7AI score0.0028EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/10/27 7:10 a.m.9 views

Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL

Overview Multiple Windows kernel drivers provided by Advanced Micro Devices Inc. are vulnerable to insufficient access control on its IOCTL CWE-782, CVE-2023-20598. Takahiro Haruyama of VMware reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By sending a...

7.8CVSS6.8AI score0.0046EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/10/16 7:11 a.m.9 views

web2py vulnerable to OS command injection

Overview web2py web application framework contains an OS command injection vulnerability CWE-78. Masashi Yamane of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When web2py is configured to u...

9.8CVSS7.6AI score0.03689EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/09/27 5:44 a.m.9 views

Multiple vulnerabilities in Panasonic KW Watcher

Overview KW Watcher provided by Panasonic contains multiple vulnerabilities listed below. Improper restriction of operations within the bounds of a memory buffer CWE-119 - CVE-2023-3471 Use after free CWE-416 - CVE-2023-3472 Michael Heinzl reported these vulnerabilities to Panasonic and...

8.6CVSS7.5AI score0.00419EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/09/27 4:49 a.m.9 views

Shihonkanri Plus vulnerable to relative path traversal

Overview Shihonkanri Plus provided by EKAKIN contains a relative path traversal vulnerability CWE-23. Shimizu Yutaro of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An attack...

7.8CVSS7.4AI score0.00318EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/08/10 7:4 a.m.9 views

Multiple server-side request forgery vulnerabilities in Trend Micro Apex Central (July 2023)

Overview Trend Micro Apex Central is vulnerable to multiple server-side request forgeries. Trend Micro Incorporated has released Patch 5 build 6481 for Trend Micro Apex Central. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact...

5.4CVSS7.1AI score0.00328EPSS
SaveExploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/06/07 2:52 a.m.9 views

Multiple vulnerabilities in KbDevice digital video recorders

Overview Multiple digital video recorders provided by KbDevice,Inc. contain multiple vulnerabilities listed below. Improper authentication CWE-287 - CVE-2023-30762 OS command injection CWE-78 - CVE-2023-30764 Hidden functionality CWE-912 - CVE-2023-30766 Yoshiki Mori, Ushimaru Hayato, Hiromu...

9.8CVSS8AI score0.01543EPSS
SaveExploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/05/17 6:9 a.m.9 views

OS command injection vulnerability in Inaba Denki Sangyo Wi-Fi AP UNIT

Overview Wi-Fi AP UNIT provided by Inaba Denki Sangyo Co., Ltd. contains an OS command injection vulnerability CWE-78. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact An arbitrary OS command may be executed by an authenticat...

7.2CVSS7.5AI score0.00887EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/04/25 5:31 a.m.9 views

Heap-based buffer overflow vulnerability in OMRON CX-Drive

Overview CX-Drive provided by OMRON Corporation contains a heap-based buffer overflow vulnerability CWE-122, CVE-2023-27385. Michael Heinzl reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact By having a user open a specially crafted SDD file, arbitrary code...

7.8CVSS7.5AI score0.00226EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/03/22 4:41 a.m.9 views

Multiple vulnerabilities in Contec CONPROSYS IoT Gateway products

Overview CONPROSYS IoT Gateway products provided by Contec CO.,LTD. contain multiple vulnerabilities listed below. OS Command Injection CWE-78 - CVE-2023-27917 Network Maintenance page validates input values improperly, resulting in OS command injection. Inadequate Encryption Strength CWE-326 -...

8.8CVSS8.2AI score0.01929EPSS
SaveExploits0References14
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/03/08 6:12 a.m.9 views

Multiple vulnerabilities in Buffalo network devices

Overview Multiple network devices provided by BUFFALO INC. contain multiple vulnerabilities listed below. Use of hard-coded credentials CWE-798 - CVE-2023-26588 Improper access control CWE-284 - CVE-2023-24544 Stored cross-site scripting CWE-79 - CVE-2023-24464 Impact An attacker may access the...

8.1CVSS6.3AI score0.03551EPSS
SaveExploits4References11
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2023/01/11 6:4 a.m.9 views

TP-Link SG105PE vulnerable to authentication bypass

Overview TP-Link SG105PE contains an authentication bypass vulnerability CWE-287. Baba Takao of BPS Co., Ltd reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Under certain conditions, an attacker may...

9.8CVSS6.8AI score0.00945EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/12/21 5:13 a.m.9 views

+Message App improper handling of Unicode control characters

Overview +Message App displays text unprocessed, even when control characters are contained, and the text is shown based on Unicode control character's specifications. Therefore, a crafted text may display misleading web links CWE-451. Akaki Tsunoda reported this vulnerability to IPA. JPCERT/CC...

5.4CVSS6.5AI score0.00488EPSS
SaveExploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/11/01 5:51 a.m.9 views

Multiple vulnerabilities in the web interfaces of Kyocera Document Solutions MFPs and printers

Overview The web interface "Command Center" of multiple MFPs and printers provided by KYOCERA Document Solutions Inc. contain multiple vulnerabilities listed below. Session Information Easily Guessable CWE-287 - CVE-2022-41798 Missing authorization CWE-425 - CVE-2022-41807 Stored cross-site...

6.5CVSS6.4AI score0.00823EPSS
SaveExploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2022/10/06 4:5 a.m.9 views

IPFire WebUI vulnerable to cross-site scripting

Overview The web user interface of IPFire provided by IPFire Project contains multiple stored cross-site scripting vulnerabilities CWE-79. This analysis assumes a scenario where one administrative user prepares malicious content, and then another administrative user accesses this content, resulti...

4.8CVSS6AI score0.00718EPSS
SaveExploits0References7
Total number of security vulnerabilities5000