Lucene search
+L
JvnMost viewed

5651 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/11/01 4:49 a.m.•10 views

REST-APIs unintentionally enabled in Century Systems FutureNet NXR series routers

Overview FutureNet NXR series routers provided by Century Systems Co., Ltd. have REST-APIs, which are configured as disabled in the initial factory default configuration. But, REST-APIs are unexpectedly enabled when the affected product is powered up, provided either http-server GUI or Web...

9.8CVSS7AI score0.00556EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/30 12:0 a.m.•10 views

JVN#39280069: RevoWorks Cloud vulnerable to unintended process execution

RevoWorks Cloud provided by J’s Communication Co., Ltd. is software to build a sandbox environment isolated from a client's local environment. In the sandbox environment, the product provides the function enabling execution of web browsers and detection and blocking of unauthorized processes...

7.8CVSS7.5AI score0.00173EPSS
SaveExploits0
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/19 5:7 a.m.•10 views

Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders

Overview Multiple digital video recorders provided by TAKENAKA ENGINEERING CO., LTD. contain multiple vulnerabilities listed below. Improper authentication CWE-287 - CVE-2024-41929 OS command injection CWE-78 - CVE-2024-43778 Hidden functionality CWE-912 - CVE-2024-47001 Yoshiki Mori, Ushimaru...

8.8CVSS7.8AI score0.00999EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/08/22 2:33 a.m.•10 views

Installer of Trend Micro Security 2020 (Consumer) may insecurely load Dynamic Link Libraries

Overview Installers of Trend Micro Security 2020 Consumer family may insecurely load Dynamic Link Libraries. Multiple products provided by Trend Micro Incorporated contain the DLL search path issue, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Trend Micro Incorporated...

7.8CVSS6.9AI score0.0101EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/08/20 9:12 a.m.•10 views

A vulnerability in TOYOTA MOTOR's DCU (Display Control Unit)

Overview TOYOTA MOTOR's DCU contains a vulnerability which is triggered by BlueBorne vulnerability. TOYOTA MOTER CORPORATION reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact An unauthenticated attacker may cause a denial of service DoS condition or...

8.8CVSS7.3AI score0.01385EPSS
SaveExploits1References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/08/20 8:52 a.m.•10 views

Trend Micro Security (Consumer) Driver vulnerable to Out-of-bounds Read

Overview Trend Micro Security Consumer Driver is vulnerable to Out-of-bounds Read. Multiple products provided by Trend Micro Incorporated contain Out-of-bounds Read vulnerability CWE-125. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN...

7.8CVSS6.3AI score0.01228EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/04/23 9:21 a.m.•10 views

TvRock vulnerable to denial-of-service (DoS)

Overview TvRock provided by TvRock according to the original report submitted by the reporter is a tool to set a timer recording for a TV program. TvRock contains a denial-of-service DoS vulnerability CWE-400. During the meeting of Committee for authorizing the disclosure of unresolved...

5.3CVSS6.7AI score0.00611EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/04/22 6:27 a.m.•10 views

LINE client for iOS vulnerable to improper server certificate verification

Overview The financial module within LINE client for iOS lacks server certificate verification in log transmission CWE-295, CVE-2023-5554. LINE Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact The communication may be eavesdropped under a...

9.8CVSS6.5AI score0.00217EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/04/16 5:30 a.m.•10 views

Proscend Communications M330-W and M330-W5 vulnerable to OS command injection

Overview M330-W and M330-W5 provided by Proscend Communications Inc. are LTE Industrial Cellular Routers. M330-W and M330-W5 contain an OS command injection vulnerability CWE-78. CYNEX Analysis Team of National Institute of Information and Communications Technology reported this vulnerability to...

9.8CVSS7.7AI score0.02346EPSS
SaveExploits2References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/02/07 6:39 a.m.•10 views

Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers

Overview Office/Small Office Multifunction Printers and Laser Printers provided by Canon Inc. contain multiple out-of-bounds write vulnerabilities CWE-787, CVE-2023-6229, CVE-2023-6230, CVE-2023-6231, CVE-2023-6232, CVE-2023-6233, CVE-2023-6234, CVE-2024-0244. Canon Inc. reported these...

9.8CVSS7.8AI score0.01457EPSS
SaveExploits0References19
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/12/11 5:12 a.m.•10 views

Multiple denial-of-service (DoS) vulnerabilities in JTEKT ELECTRONICS HMI GC-A2 series

Overview HMI GC-A2 series provided by JTEKT ELECTRONICS CORPORATION contains multiple denial-of-service DoS vulnerabilities listed below. Denial-of-service DoS vulnerability in FTP service CWE-400 - CVE-2023-41963 Denial-of-service DoS vulnerability in commplex-link service CWE-400 - CVE-2023-491...

7.8CVSS7AI score0.00981EPSS
SaveExploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/10/16 7:11 a.m.•10 views

web2py vulnerable to OS command injection

Overview web2py web application framework contains an OS command injection vulnerability CWE-78. Masashi Yamane of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact When web2py is configured to u...

9.8CVSS7.6AI score0.03689EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/05/26 4:58 a.m.•10 views

ESS REC Agent Server Edition for Linux etc. vulnerable to directory traversal

Overview ESS REC Agent Server Edition for Linux etc. provided by Encourage Technologies Co.,Ltd. contain a directory traversal vulnerability CWE-23. Hayato Ushimaru of Cyber Defense Institute, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

8.8CVSS6.6AI score0.00908EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/05/17 6:9 a.m.•10 views

OS command injection vulnerability in Inaba Denki Sangyo Wi-Fi AP UNIT

Overview Wi-Fi AP UNIT provided by Inaba Denki Sangyo Co., Ltd. contains an OS command injection vulnerability CWE-78. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact An arbitrary OS command may be executed by an authenticat...

7.2CVSS7.5AI score0.00887EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2023/01/04 5:16 a.m.•10 views

Multiple vulnerabilities in Fuji Electric V-SFT and TELLUS

Overview V-SFT and TELLUS provided by FUJI ELECTRIC CO., LTD. contain multiple vulnerabilities listed below. Out-of-bounds Read CWE-125 - CVE-2022-46360 Out-of-bounds Write CWE-787 - CVE-2022-43448 Michael Heinzl reported these vulnerabilities to JPCERT/CC. JPCERT/CC coordinated with the develope...

7.8CVSS7.6AI score0.00243EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/10/07 5:30 a.m.•10 views

Growi vulnerable to improper access control

Overview GROWI provided by WESEEK, Inc. contains an improper access control vulnerability CWE-284. Kenta Yamamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact A us...

6.5CVSS6.6AI score0.00804EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/05/20 8:4 a.m.•10 views

Spring Security OAuth (spring-security-oauth2) vulnerable to denial-of-service (DoS)

Overview Spring Security OAuth spring-security-oauth2 provided by VMware, Inc. contains a denial-of-service vulnerability due to uncontrolled resource consumption CWE-400. Note that Spring Security OAuth spring-security-oauth2 is no longer supported, therefore Spring Security has been developed a...

6.5CVSS6.6AI score0.01234EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/03/08 6:56 a.m.•10 views

Multiple vulnerabilities in OMRON CX-Programmer

Overview CX-Programmer provided by OMRON Corporation contains multiple vulnerabilities listed below. Out-of-bounds Write CWE-787 - CVE-2022-21124 Use After Free CWE-416 - CVE-2022-25230 Use After Free CWE-416 - CVE-2022-25325 Out-of-bounds Read CWE-125 - CVE-2022-21219 Out-of-bounds Write CWE-787...

7.8CVSS7.5AI score0.01512EPSS
SaveExploits0References15
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/01/24 5:7 a.m.•10 views

GROWI vulnerable to authorization bypass through user-controlled key

Overview GROWI provided by WESEEK, Inc. contains an authorization bypass through user-controlled key vulnerability CWE-639, CVE-2021-3852. huntr first reported this vulnerability to JPCERT/CC, then JPCERT/CC contacted WSEEK, Inc. as an intermediator. After the coordination between huntr and WESEE...

7.5CVSS7.2AI score0.00808EPSS
SaveExploits1References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/01/13 6:26 a.m.•10 views

PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption

Overview PASSWORD MANAGER "MIRUPASS" PW10 / PW20 provided by KING JIM CO.,LTD. contain a missing encryption vulnerability CWE-311. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Earl...

4.9CVSS6.5AI score0.00107EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2022/01/13 6:21 a.m.•10 views

Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials

Overview Label printers "TEPRA" PRO SR5900P / SR-R7900P provided by KING JIM CO.,LTD. contain an insufficiently protected credentials vulnerability CWE-522. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

4.3CVSS6.5AI score0.00342EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2021/10/01 5:42 a.m.•10 views

Trend Micro ServerProtect family vulnerable to authentication bypass

Overview Trend Micro Incorporated has released security updates for ServerProtect family. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A remote attacker may bypass authentication for the products. For more information, refer...

10CVSS7AI score0.09385EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2021/06/30 2:36 a.m.•10 views

WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting

Overview WordPress Plugin "WordPress Popular Posts" provided by Hector Cabrera contains a cross-site scripting vulnerability CWE-79. Yu Iwama of Secure Sky Technology Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

5.4CVSS6.2AI score0.01442EPSS
SaveExploits1References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2021/04/20 3:25 a.m.•10 views

Trend Micro Password Manager may insecurely load Dynamic Link Libraries

Overview Password Manager provided by Trend Micro Incorporated contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact...

7.8CVSS6.8AI score0.00469EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/10/07 6:10 a.m.•10 views

Trend Micro Antivirus for Mac vulnerable to a privilege escalation

Overview Antivirus for Mac provided by Trend Micro Incorporated contain a symbolic link privilege escalation vulnerability CWE-61. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Trend Micro Incorporated coordinated unde...

7.8CVSS6.9AI score0.00621EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2020/02/14 6:34 a.m.•10 views

Security information for Hitachi Disk Array Systems

Overview A cross site scripting vulnerability exists in the SVPStorage Navigator of the Hitachi disk array system. Impact Regerding the impact df the vulnerablilty, please refer to the ventor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and...

6.2AI score
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/09/19 8:59 a.m.•10 views

Multiple integer overflow vulnerabilities in LINE(Android)

Overview LINEAndroid provided by LINE Corporation contains multiple integer overflow vulnerabilities CWE-190 listed below. Integer overflow vulnerability in processing images using apng-drawable - CVE-2019-6007 Integer overflow vulnerability in processing images - CVE-2019-6010 LINE Corporation...

8.8CVSS7.5AI score0.02028EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/08/15 5:29 a.m.•10 views

ApeosWare Management Suite and ApeosWare Management Suite 2 contain open redirect vulnerability

Overview ApeosWare Management Suite and ApeosWare Management Suite 2 provided by Fuji Xerox Co.,Ltd. are software products to manage devices and their usages; providing authentication, printing, log accounting, and document distribution. These software products contain an open redirect...

6.1CVSS6.5AI score0.01122EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/07/18 4:56 a.m.•10 views

WordPress Plugin "Category Specific RSS feed Subscription" vulnerable to cross-site request forgery

Overview WordPress Plugin "Category Specific RSS feed Subscription" provided by Tips and Tricks HQ contains a cross-site request forgery vulnerability CWE-352. Gota Abe of Cryptography Laboratory,Department of Information and Communication Engineering,Tokyo Denki University directly reported this...

8.8CVSS6.5AI score0.00846EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/05/31 4:51 a.m.•10 views

Multiple vulnerabilities in WordPress Plugin "Zoho SalesIQ"

Overview WordPress Plugin "Zoho SalesIQ" provided by Zoho SalesIQ Team contains multiple vulnerabilities listed below. Cross-site Scripting CWE-79 - CVE-2019-5962 Cross-site Request Forgery CWE-352 - CVE-2019-5963 Kouhei Ikeda of Cryptography Laboratory,Department of Information and Communication...

8.8CVSS6.6AI score0.01587EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/05/20 6:38 a.m.•10 views

DoS Vulnerability in Hitachi IT Operations Director, JP1/IT Desktop Management - Manager and JP1/IT Desktop Management 2 - Manager

Overview A DoS Vulnerability was found in Hitachi IT Operations Director, JP1/IT Desktop Management - Manager and JP1/IT Desktop Management 2 - Manager. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section...

6.8AI score
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/05/13 6:25 a.m.•10 views

Multiple Vulnerabilities in Hitachi Command Suite and Hitachi Infrastructure Analytics Advisor

Overview Multiple vulnerabilities have been found in Hitachi Command Suite and Hitachi Infrastructure Analytics Advisor. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure...

7.1AI score
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2019/01/24 6:37 a.m.•10 views

HOUSE GATE App for iOS vulnerable to directory traversal

Overview HOUSE GATE App for iOS provided by HOUSE GATE inc. uses the old version of cordova-plugin-ionic-webview, and inherits a directory traversal vulnerability CWE-22, CVE-2018-16202. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC...

8.6CVSS6.8AI score0.03305EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/12/06 7:19 a.m.•10 views

Multiple vulnerabilities in multiple SEIKO EPSON printers and scanners

Overview Multiple printers and scanners provided by SEIKO EPSON CORPORATION contain multiple vulnerabilities listed below. Open Redirect CWE-601 - CVE-2018-0688 HTTP header injection CWE-113 - CVE-2018-0689 Toshitsugu Yoneyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability t...

8.8CVSS7.7AI score0.01642EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/11/14 6:34 a.m.•10 views

Cybozu Mailwise vulnerable to directory traversal

Overview Cybozu Mailwise provided by Cybozu, Inc. contains a directory traversal vulnerability CWE-22 due to a flaw in processing parameter of the HTTP request. Yuji Tounai reported this vulnerability to Cybozu, Inc., and Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of it...

8.6CVSS6.8AI score0.01947EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/07/02 6:22 a.m.•10 views

Cybozu Garoon vulnerable to SQL injection

Overview Cybozu Garoon provided by Cybozu, Inc. contains an SQL injection vulnerability CWE-89 in application "Notifications". Cybozu, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and Cybozu, Inc. coordinated under the Information Security...

8.8CVSS7.8AI score0.01153EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/05/22 6:26 a.m.•10 views

Multiple cross-site scripting vulnerabilities in Cybozu Mailwise

Overview Cybozu Mailwise contains multiple cross-site scripting vulnerabilities below. Stored cross-site scripting vulnerability in "E-mail Details Screen" CWE-79 - CVE-2018-0557 Reflected cross-site scripting vulnerability in "System settings" CWE-79 - CVE-2018-0558 Reflected cross-site scriptin...

6.1CVSS6AI score0.00809EPSS
SaveExploits0References11
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/03/15 4:38 a.m.•10 views

The installer of PhishWall Client Firefox and Chrome edition for Windows may insecurely load Dynamic Link Libraries

Overview PhishWall Client Firefox and Chrome edition for Windows provided by SecureBrain Corporation is an anti-phishing and anti-MITB software. The installer of PhishWall Client Firefox and Chrome edition for Windows contains an issue with the DLL search path, which may lead to insecurely loadin...

7.8CVSS6.8AI score0.00928EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/03/13 7:47 a.m.•10 views

PHP 2chBBS vulnerable to cross-site scripting

Overview PHP 2chBBS provided by Kagaminokuni is software that can be downloaded from the Internet. PHP 2chBBS is a bulletin board software that can be used by placing it on a website. PHP 2chBBS contains a cross-site scripting vulnerability CWE-79. During the meeting of Committee for authorizing...

6.1CVSS6AI score0.0072EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2018/03/02 4:45 a.m.•10 views

Multiple vulnerabilities in Jubatus

Overview Jubatus provided by Jubatus Community contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0524 Directory traversal CWE-22 - CVE-2018-0525 Symantec Japan, Inc. Advisory Services Team reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

7.5CVSS8.2AI score0.03207EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/11/22 4:51 a.m.•10 views

PWR-Q200 vulnerable to DNS cache poisoning attacks

Overview PWR-Q200 provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION is a mobile WiFi router. PWR-Q200 is vulnerable to DNS cache poisoning attacks as DNS queries are done with a fixed source port CWE-330. Toshifumi Sakaguchi reported this vulnerability to IPA. JPCERT/CC coordinated with...

7.5CVSS6.6AI score0.01323EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/11/21 6:40 a.m.•10 views

The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries

Overview Media Go and Music Center for PC provided by Sony Group are file management tools. The installer of Media Go and Music Center for PC contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. and Shun Suza...

9.3CVSS6.9AI score0.01029EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/10/11 7:43 a.m.•10 views

HIBUN Confidential File Decryption program may insecurely load Dynamic Link Libraries

Overview HIBUN Confidential File Decryption program provided by Hitachi Solutions, Ltd. contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Note that this vulnerability is different from JVN58909026. Eili Masami of Tachibana Lab. report...

9.3CVSS6.8AI score0.01008EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/09/11 5:55 a.m.•10 views

Installer of FENCE-Explorer may insecurely load Dynamic Link Libraries and invoke executable files

Overview FENCE-Explorer provided by FUJITSU BROAD SOLUTION & CONSULTING Inc. is a tool to view and edit a file in "FENCE Briefcase" which is created by FENCE-Pro and other FENCE series software. Installer of FENCE-Explorer contains an issue with the search path for DLL/executable files, which may...

9.3CVSS6.8AI score0.01059EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/08/31 7:35 a.m.•10 views

Multiple Fuji Xerox products may insecurely load Dynamic Link Libraries

Overview Installers of multiple products, and DocuWorks self-extracting documents provided by Fuji Xerox Co.,Ltd. contain an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Eili Masami of Tachibana Lab. reported this vulnerability to IPA...

9.3CVSS6.9AI score0.01059EPSS
SaveExploits0References12
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/07/24 4:52 a.m.•10 views

Multiple cross-site scripting vulnerabilities in ScreenOS

Overview ScreenOS provided by Juniper Networks contains multiple cross-site scripting vulnerabilities. Toshitsugu Yoneyama and Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

9.6CVSS6.3AI score0.01194EPSS
SaveExploits0References13
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/07/07 6:47 a.m.•10 views

Microsoft IME may insecurely load Dynamic Link Libraries

Overview Microsoft IME, bundled with Microsoft Windows, contains an issue in loading DLLs. When some application programs are invoked, they may initiate Microsoft IME. This IME, when initiated, checks a certain registry key for a file path to a DLL file and loads it. This registry key does not...

7.8CVSS7AI score0.02181EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/07/03 6:22 a.m.•10 views

Cybozu Garoon fails to restrict access permission

Overview Cybozu Garoon provided by Cybozu, Inc. contains an improper access restriction. Jun Kokatsu of KDDI Singapore Dubai Branch reported vulnerability to Cybozu, Inc., and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. Impact When a logged-in user accesses ...

5.8CVSS6.5AI score0.00849EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/06/28 1:23 a.m.•10 views

Hard-coded credentials vulnerability in Toshiba Lighting & Technology Corporation Home gateway

Overview Home gateway provided by Toshiba Lighting & Technology Corporation contains hard-coded credentials. Yutaka Kokubu of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

9.8CVSS6.8AI score0.0142EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2017/06/01 7:44 a.m.•10 views

RW-5100 driver installer may insecurely load Dynamic Link Libraries

Overview RW-5100 driver installer for IC Card Reader/Writer devices provided by Sharp Corporation contains an issue with the DLL search path, which may lead to insecurely load Dynamic Link Libraries CWE-427. Yuji Tounai of NTT Communications Corporation and BlackWingCat of PinkFlyingWhale reporte...

9.3CVSS6.9AI score0.01059EPSS
SaveExploits0References6
Total number of security vulnerabilities5000