Lucene search
+L
JvnMost viewed

5649 matches found

Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•6 views

LHa Vuffer Overflow Vulnerability in Testing and Extracting Process

Overview LHa for UNIX does not handle the header length information properly when testing or extracting an archive, which could lead to buffer overflow. Impact An attacker could execute arbitrary code with the privilege of the user running LHa. Solution Please refer to the 'Vendor Information'...

10CVSS7.5AI score0.10262EPSS
SaveExploits3References14
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•6 views

LHA extrace_one Vuffer Overflow Vulnerability

Overview LHA lhext.c contains a buffer overflow vulnerability with the extractone funcation, which stems from improper handling of a 'w' option argument. Impact An remote attacker could execute arbitrary code. Solution Please refer to the 'Vendor Information' section for official remediation and...

10CVSS7.5AI score0.18827EPSS
SaveExploits1References10
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•6 views

Cross-site scripting vulnerabilities in multiple Bluemoon Inc. XOOPS modules

Overview Mutiple Bluemoon Inc. XOOPS modules are vulnerable to cross-site scripting. Mutiple modules provided by Blumoon Inc. for XOOPS 2.0.x / XOOPS Cube 2.1 / ImpressCMS are vulnerable to cross-site scripting. Yosuke Yamada and Hirohisa Yamaguchi of NetAgent Co., Ltd. reported this vulnerabilit...

4.3CVSS6.2AI score0.01065EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•6 views

Norton AntiVirus causes abnormal OS termination when a user edits a shared network file

Overview Symantec Norton AntiVirus 2005 contains a vulnerability which could cause abnormal OS termination if a user running the vulnerable Norton AntiVirus edits a file in the shared network folder if "SmartScan" is chosen in the "Which file types to scan for viruses" setting. Impact When a file...

4CVSS6.7AI score0.00446EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•6 views

Hyper Estraier directory traversal/denial of service vulnerability

Overview Hyper Estraier, a full text search system, contains a vulnerability in the process of creating index files. Impact If a remote attacker sends a specially crafted file and a user saves it in a search target directory, the attacker could register a file not to be searched in an index when...

5CVSS6.8AI score0.01388EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•6 views

Multiple vulnerabilities in FreeStyleWiki including cross-site scripting

Overview FreeStyleWiki contains a cross-site scripting and a cross-site request forgery vulnerabilities. The cross-site scripting vulnerability could allow a remote attacker to create a web page containing a malicious script. The cross-site request forgery vulnerability could allow a remote...

5CVSS6.5AI score
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•7 views

Hiki cross-site scripting vulnerability

Overview Hiki, a Wiki clone from the Hiki development team, contains a cross-site scripting vulnerability. Impact A remote attacker could create a content containing attacking code and take over a session by stealing the session ID of the user who logged into the system. If the user logged into t...

4.3CVSS6.1AI score0.01208EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•6 views

WirelessIP5000 has multiple vulnerabilities

Overview WirelessIP5000, a wireless IP phone from Hitachi Cable, contains multiple vulnerabilities; - Illegal access using the port TCP3390 - SNMP access using an arbitrary community name - Access to the HTTP server by an unauthorized user in the factory default configuration - The HTTP server...

7.5CVSS6.9AI score0.01532EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•6 views

nProtect Netizen has multiple vulnerabilities

Overview nProtect Netizen contains multiple vulnerabilities. - It may fetch update files from an arbitrary site - It may download and save malicious files - It may cause an abnormal web browser termination Impact A remote attacker could lead a user to save a malicious file to the local storage an...

4.3CVSS7AI score0.01019EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2008/05/20 3:0 p.m.•6 views

Cybozu Office browser script execution vulnerability

Overview The HTML-mail compliant web mail function of Cybozu Office contains a vulnerability that may allow an attacker to execute browser script. Impact If a Cybozu Office user logs into the system and opens an email containing exploit code sent by a remote attacker using the web mail function,...

5CVSS7AI score
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 5 days ago•5 views

Vulnerability in Cosminexus HTTP Server and Hitachi Web Server

Overview VulnerabilityCVE-2026-43951 has been found in Cosminexus HTTP Server and Hitachi Web Server. Impact Regarding the impact of the vulnerability, please refer to the vendor advisory. Solution Please refer to the 'Vendor Information' section for the official countermeasure and take appropria...

6.5CVSS6.6AI score0.00545EPSS
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 5 days ago•5 views

Multiple Vulnerabilities in Hitachi Ops Center Common Services

Overview Multiple vulnerabilities exist in Hitachi Ops Center Common Services. CVE-2025-10939, CVE-2025-11537, CVE-2025-11538, CVE-2025-12110, CVE-2025-13467, CVE-2025-13881, CVE-2025-14082, CVE-2025-14083, CVE-2025-14777, CVE-2025-66560, CVE-2026-0707, CVE-2026-0871, CVE-2026-0976, CVE-2026-1035...

8.2CVSS6.3AI score0.00526EPSS
SaveExploits1References32
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 6 days ago•5 views

CSV file injection vulnerability in BaserCMS

Overview BaserCMS provided by baserCMS Users Community contains the following vulnerability. Improper neutralization of formula elements in a CSV file CWE-1236 - CVE-2026-65875 This vulnerability was reported by the following persons to JPCERT/CC. JPCERT/CC coordinated with the developer. VCSLab ...

7.1CVSS5.4AI score0.00152EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/07/31 6:13 a.m.•5 views

Security Update for Trend Micro Trend Vision One (July 2026)

Overview Trend Micro Incorporated has released a security update for TrendAI Vision One Service Gateway. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Sensitive information may be obtained by a remote attacker...

5.5AI score
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2026/07/21 5:2 a.m.•5 views

Drupal plugin "AI Agents" vulnerable to incorrect authorization

Overview AI Agents provided by Drupal contains the vulnerability listed below. Incorrect authorization CWE-863 - CVE-2026-13236 Kuniyoshi Noguchi @KuniNogu reported this vulnerability to the developer and IPA. JPCERT/CC coordinated with the developer to publish the advisory under Information...

6.5CVSS5.8AI score0.00145EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/12/17 2:28 a.m.•5 views

Multiple vulnerabilities in CHOCO TEI WATCHER mini

Overview CHOCO TEI WATCHER mini provided by Inaba Denki Sangyo Co., Ltd. contains multiple vulnerabilities listed below. Clickjacking CWE-1021 - CVE-2025-59479 Improper check for unusual conditions CWE-754 - CVE-2025-61976 Improper check for unusual conditions CWE-754 - CVE-2025-66357 JTEKT...

8.7CVSS6.7AI score0.00352EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/08/27 6:13 a.m.•5 views

Multiple vulnerabilities in SS1

Overview SS1 provided by provided by DOS Co., Ltd. contains multiple vulnerabilities listed below. Inadequate encryption strength CWE-326 - CVE-2025-46409 Files or directories accessible to external parties CWE-552 - CVE-2025-52460 Incorrect permission assignment for critical resource CWE-732 -...

9.8CVSS7.7AI score0.00624EPSS
SaveExploits0References12
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/08/08 6:29 a.m.•5 views

WordPress plugin "Advanced Custom Fields" vulnerable to HTML injection

Overview Advanced Custom Fields provided by WPEngine, Inc. contains the following vulnerability. HTML injection WE-94 - CVE-2025-54940 Shogo Kumamaru of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership...

4.6CVSS7AI score0.00209EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/07/23 4:54 a.m.•5 views

Real-time Bus Tracking System vulnerable to improper validation of specified quantity in input

Overview Real-time Bus Tracking System provided by SYNCK GRAPHICA contains the following vulnerability. Improper validation of specified quantity in input CWE-1284 - CVE-2025-43881 n3ddih reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

5.3CVSS6.5AI score0.00286EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/06/13 7:9 a.m.•5 views

Multiple vulnerabilities in RICOH Streamline NX PC Client

Overview RICOH Streamline NX PC Client provided by Ricoh Company, Ltd. contains multiple vulnerabilities listed below. External control of file name or path CWE-73 - CVE-2025-36506 Path traversal CWE-22 - CVE-2025-46783 Use of less trusted source CWE-348 - CVE-2025-48825 Ricoh Company, Ltd...

9.8CVSS7.2AI score0.00776EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/03/28 1:46 a.m.•5 views

a-blog cms vulnerable to untrusted data deserialization

Overview a-blog cms provided by appleple inc. contains untrusted data deserialization vulnerability CWE-502. The developer states that attacks exploiting the vulnerability has been observed on a-blog cms Ver.2.8.x series or later. appleple inc. reported this vulnerability to JPCERT/CC to notify...

7.5CVSS7.1AI score0.00474EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/03/18 6:1 a.m.•5 views

+F FS010M vulnerable to OS command injection

Overview +F FS010M provided by FUJI SOFT INCORPORATED contains multiple OS command injection vulnerabilities listed below. OS command injection CWE-78 - CVE-2025-24306 OS command injection CWE-78 - CVE-2025-25220 Takeshi Kuramori of National Institute of Information and Communications Technology,...

8.8CVSS7.6AI score0.01036EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/02/19 7:19 a.m.•5 views

Multiple cross-site scripting vulnerabilities in Movable Type

Overview Movable Type provided by Six Apart Ltd. contains multiple cross-site scripting vulnerabilities listed below. Stored cross-site scripting vulnerability in the custom block edit page of MT Block Editor CWE-79 - CVE-2025-22888 Stored cross-site scripting vulnerability in the HTML edit mode ...

6.1CVSS6.1AI score0.00249EPSS
SaveExploits0References7
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/02/17 9:22 a.m.•5 views

Out-of-bounds read vulnerability in Cente middleware

Overview Some products in Cente middleware TCP/IP Network Series developed by DMG MORI Digital Co., LTD. and provided by NXTech Co., Ltd. treat TCP MSS option values improperly, leading to an out-of-bounds read vulnerability CWE-125, CVE-2025-23406. DMG MORI Digital Co., LTD. reported this...

5.3CVSS6.5AI score0.00389EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/01/28 4:44 a.m.•5 views

WordPress Plugin "Simple Image Sizes" vulnerable to cross-site scripting

Overview WordPress Plugin "Simple Image Sizes" provided by Rahe contains a stored cross-site scripting vulnerability CWE-79. Ibuki Sato of Nippon Engineering College of Hachioji reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

4.8CVSS6AI score0.00266EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2025/01/27 5:25 a.m.•5 views

EXIF Viewer Classic vulnerable to cross-site scripting

Overview EXIF Viewer Classic provided by Rodrigue former Kakera is a Google Chrome browser extension. The affected versions of the product improperly handle EXIF meta data, resulting in a cross-site scripting vulnerability CWE-79. Versions 2.3.2 and 2.4.0 were reported as vulnerable. The vendor...

6.1CVSS5.9AI score0.00353EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/12/16 6:7 a.m.•5 views

"Shonen Jump+" App for Android fails to restrict custom URL schemes properly

Overview "Shonen Jump+" App for Android provided by SHUEISHA INC. provides the function to access a requested URL using Custom URL Scheme. The App does not restrict access to the function properly CWE-939 which may be exploited to direct the App to access any sites. Toshiki Iwasaki of Mitsui Buss...

3.3CVSS6.7AI score0.00165EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/12/16 2:51 a.m.•5 views

Multiple vulnerabilities in FXC AE1021 and AE1021PE

Overview AE1021 and AE1021PE are information outlet type wireless LAN routers provided by FXC Inc. They contain multiple vulnerabilities listed below. Weak Authentication CWE-1390 - CVE-2024-47397 OS Command Injection CWE-78 - CVE-2024-53688 Inclusion of Undocumented Features CWE-1242 -...

7.5CVSS7.7AI score0.01535EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/11/27 5:36 a.m.•5 views

HAProxy vulnerable to HTTP request/response smuggling

Overview HAProxy HTTP/3 implementation contains an issue on accepting malformed HTTP headers. When a request including malformed HTTP headers is forwarded to a HTTP/1.1 non-compliant back-end server, it is exploited to conduct an HTTP request/response smuggling attack CWE-444. Yuki Mogi of FFRI...

5.3CVSS6.5AI score0.01043EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/11/05 6:29 a.m.•5 views

Incorrect authorization vulnerability in OMRON Sysmac Studio

Overview Sysmac Studio provided by OMRON Corporation contains an incorrect authorization vulnerability CWE-863, CVE-2024-49501. OMRON Corporation reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC coordinated with OMRON Corporation for the JVN advisory...

5.7CVSS6.6AI score0.0018EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/10/30 6:7 a.m.•5 views

Hikvision network camera security enhancement to prevent cleartext transmission of Dynamic DNS credentials

Overview Multiple network cameras provided by Hangzhou Hikvision Digital Technology Co., Ltd. support two Dynamic DNS services, DynDNS and NO-IP.The user can select which to use on the GUI configuration page. Both the services provide their APIs accessible via HTTP and HTTPS, but old firmware...

6.5AI score
SaveExploits0References2
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/10/18 5:48 a.m.•5 views

N-LINE vulnerable to HTML injection

Overview N-LINE provided by NEUMANN CO.LTD. is an online learning management system for driving schools. N-LINE processes inputs with insufficient check CWE-94, and malicious inputs from an student's device may badly impact the instructor's screen. Ayato Shitomi of Fore-Z co.ltd reported this...

7.4CVSS6.8AI score0.00225EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/10/16 5:12 a.m.•5 views

SHIRASAGI vulnerable to path traversal

Overview SHIRASAGI provided by SHIRASAGI Project processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability CWE-22. Shogo Kumamaru of LAC Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

8.6CVSS6.7AI score0.0103EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/10/10 5:57 a.m.•5 views

baserCMS plugin "BurgerEditor" vulnerable to directory listing

Overview baserCMS plugin "BurgerEditor" provided by D-ZERO CO.,LTD. contains a directory listing vulnerability CWE-548, CVE-2024-44807. If accessing a URL of the web site using the plugin that has a specific string added to the end, a list of uploaded files may be obtained. In addition, the...

5.3CVSS6.7AI score0.00487EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/10/03 4:42 a.m.•5 views

Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software

Overview Kostac PLC Programming Software provided by JTEKT ELECTRONICS CORPORATION contains multiple vulnerabilities listed below. Out-of-bounds write CWE-787 - CVE-2024-47134 Stack-based buffer overflow CWE-121 - CVE-2024-47135 Out-of-bounds read CWE-125 - CVE-2024-47136 Michael Heinzl reported...

7.8CVSS7.7AI score0.00296EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/10/01 8:51 a.m.•5 views

Apache Tomcat improper handling of TLS handshake process data

Overview Apache Tomcat provided by The Apache Software Foundation improperly handles TLS handshake process data, which may lead to a denial-of-service DoS condition CWE-770, CVE-2024-38286. The reporter, Ozaki of North Grid Corporation, reported this issue directly to and coordinated with the...

8.6CVSS6.6AI score0.01702EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/30 6:17 a.m.•5 views

RevoWorks Cloud vulnerable to unintended process execution

Overview RevoWorks Cloud provided by J's Communication Co., Ltd. is software to build a sandbox environment isolated from a client's local environment. In the sandbox environment, the product provides the function enabling execution of web browsers and detection and blocking of unauthorized...

7.8CVSS6.5AI score0.00173EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/30 5:14 a.m.•5 views

Multiple vulnerabilities in Smart-tab

Overview Smart-tab provided by TECHNO SUPPORT COMPANY is a multi-functional guest room tablet system for hotels and other accommodation facilities. Smart-tab contains multiple vulnerabilities listed below. Active debug code CWE-489 - CVE-2024-41999 Plaintext storage of a password CWE-256 -...

6.8CVSS7.5AI score0.00261EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/24 7:0 a.m.•5 views

Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions

Overview Multiple Home GateWay/Hikari Denwa routers provided by NIPPON TELEGRAPH AND TELEPHONE EAST CORPORATION fail to restrict access permissions CWE-451. Keishi Awata of logicalmixed reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early...

5.3CVSS6.6AI score0.00428EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/11 9:19 a.m.•5 views

Malleability attack against executables encrypted by CBC mode with no integrity check

Overview Researchers at NTT, University of Hyogo, and NEC have identified a security issue that leads to executing arbitrary code in executable files that are encrypted by CBC mode with no integrity check. This issue has been published in ACNS 2020 . There is a risk that an encrypted executable...

7.8AI score
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/04 4:1 a.m.•5 views

WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting

Overview The field labels in WordPress Plugin "Advanced Custom Fields" provided by WP Engine contains a cross-site scripting vulnerability CWE-79. Ryo Sotoyama of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information...

6.1CVSS6.1AI score0.00395EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/09/02 5:57 a.m.•5 views

Panasonic Control FPWIN Pro7 vulnerable to stack-based buffer overflow

Overview Control FPWIN Pro7 provided by Panasonic contains a stack-based buffer overflow vulnerability CWE-121, CVE-2024-7013. Michael Heinzl reported this vulnerability to the developer and coordinated. After the coordination was completed, Panasonic reported the case to JPCERT/CC to notify user...

7.8CVSS7.5AI score0.00284EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/08/06 6:13 a.m.•5 views

Firmware update for RICOH JavaTM Platform resets the TLS configuration

Overview JavaTM Platform provided by Ricoh Company, Ltd. is the execution environment for firmware extensions of Ricoh MFPs and printers, providing TLS Transport Layer Security communication mechanism. When the firmware for JavaTM Platform is updated from Ver.12.89 or earlier versions to a newer...

7.5CVSS7AI score0.0051EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/08/05 4:58 a.m.•5 views

Pimax Play and PiTool accept WebSocket connections from unintended endpoints

Overview Pimax Play and PiTool provided by Pimax accept WebSocket connections from unintended endpoints CWE-923. Rei Yano reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact Arbitrary code may be executed by a...

9.8CVSS7AI score0.00678EPSS
SaveExploits0References5
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/07/30 6:34 a.m.•5 views

Multiple vulnerabilities in ELECOM wireless LAN routers

Overview Multiple wireless LAN routers provided by ELECOM CO.,LTD. contain multiple vulnerabilities listed below. Unrestricted Upload of File with Dangerous Type CWE-434 CVE-2024-34021 OS Command Injection CWE-78 CVE-2024-39607 Cross-Site Request Forgery CWE-352 CVE-2024-40883 CVE-2024-34021 Toya...

8.8CVSS7.8AI score0.00853EPSS
SaveExploits0References9
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/07/16 7:14 a.m.•5 views

Cybozu Garoon vulnerable to cross-site scripting

Overview Cybozu Garoon provided by Cybozu, Inc. contains a cross-site scripting vulnerability in PDF preview CWE-79. Masato Kinugawa reported this vulnerability to Cybozu, Inc. and Cybozu, Inc. reported it to JPCERT/CC to notify users of its solution through JVN. Impact An arbitrary script may be...

7.4CVSS6AI score0.00249EPSS
SaveExploits0References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/07/16 5:41 a.m.•5 views

FUJITSU Network Edgiot GW1500 vulnerable to path traversal

Overview FUJITSU Network Edgiot GW1500 M2M-GW for FENICS provided by Fujitsu Limited contains a path traversal vulnerability CWE-22. Eddy HUYNH & Jonathan PAUC from LCIE - BUREAU VERITAS CPS reported this vulnerability to Fujitsu Limited and coordinated. After the coordination was completed,...

6.5CVSS6.8AI score0.01422EPSS
SaveExploits1References4
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/06/07 6:24 a.m.•5 views

WordPress Plugin "Music Store - WordPress eCommerce" vulnerable to SQL injection

Overview WordPress Plugin "Music Store - WordPress eCommerce" provided by CodePeople contains an SQL injection vulnerability CWE-89. Daiki Sato of GMO Cybersecurity by Ierae, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

6.5CVSS7.9AI score0.00519EPSS
SaveExploits0References6
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/06/07 5:51 a.m.•5 views

Multiple vulnerabilities in "FreeFrom - the nostr client" App

Overview "FreeFrom - the nostr client" App provided by FreeFrom K.K. contains multiple vulnerabilities listed below. Improper verification of cryptographic signature CWE-347 - CVE-2024-36277 Reliance on obfuscation or encryption of security-relevant inputs without integrity checking CWE-649 -...

5.3CVSS6.6AI score0.00257EPSS
SaveExploits0References8
Japan Vulnerability Notes
Japan Vulnerability Notes
•added 2024/05/17 4:54 a.m.•5 views

Ruijie BCR810W/BCR860 vulnerable to OS command injection

Overview Network router BCR810W/BCR860 provided by Ruijie Networks Co., Ltd. contains an OS command injection vulnerability CVE-2023-3608, CWE-78. Note that this vulnerability can only be exploited when the BCOS port of the product is connected to the Internet. JPCERT/CC has confirmed attacks...

8.8CVSS7.6AI score0.12292EPSS
SaveExploits1References5
Total number of security vulnerabilities5000