Vulnerability Reports

past 12 months201220112010200920082007200620052004

2013

2013/06/18 JVN#19740283:
Cybozu Live for Android vulnerable in the WebView class
2013/06/18 JVN#63428218:
Cybozu Live for Android vulnerable to arbitrary Java method execution
2013/06/18 JVN#98712361:
Ichitaro series vulnerable to arbitrary code execution
2013/06/13 JVN#53622030:
Orchard vulnerable to cross-site scripting
2013/06/11 JVN#99813183:
Galapagos Browser vulnerable in the WebView class
2013/06/11 JVN#79301570:
Angel Browser vulnerable in the WebView class
2013/06/07 JVN#39218538:
Pizza Hut Japan Official Order App for Android. contains an issue where it fails to verify SSL server certificates
2013/06/07 JVN#63901692:
Internet Explorer vulnerable to information disclosure
2013/06/03 JVN#48108258:
HP ProCurve 1700 series switches vulnerable to cross-site request forgery
2013/05/31 JVN#24560784:
Adobe Reader X vulnerable to sandbox bypass
2013/05/31 JVN#07354844:
Safari information disclosure vulnerability
2013/05/31 JVN#53579095:
FileMaker Pro vulnerable to cross-site scripting
2013/05/31 JVN#85812843:
FileMaker Pro fails to verify SSL server certificates
2013/05/29 JVN#90289505:
Content Provider in MovatwiTouch fails to restrict access permissions
2013/05/29 JVN#22756333:
Sleipnir Mobile for Android vulnerable to address bar spoofing
2013/05/27 JVN#31817913:
Yahoo! Browser vulnerable to address bar spoofing
2013/05/23 JVN#39699406:
EC-CUBE vulnerable to information disclosure as a result of improper input checking
2013/05/23 JVN#45306814:
EC-CUBE fails to restrict access permissions
2013/05/23 JVN#00985872:
EC-CUBE vulnerable to session fixation
2013/05/23 JVN#52552792:
EC-CUBE vulnerable to cross-site scripting
2013/05/20 JVN#10461119:
Cross-site scripting vulnerability in the web2py social bookmarking widget
2013/05/15 JVN#85371480:
Wi-Fi Spot Configuration Software vulnerability in the connection process
2013/05/13 JVN#18501376:
OpenPNE vulnerable to cross-site scripting
2013/05/08 JVN#61972596:
Online Service Gate vulnerable in Office 365 password management
2013/04/26 JVN#55074201:
Yahoo! Browser vulnerable to address bar spoofing
2013/04/26 JVN#01313594:
jigbrowser+ for Android vulnerable to address bar spoofing
2013/04/15 JVN#06251813:
Multiple Cybozu products vulnerable to cross-site request forgery
2013/04/12 JVN#02895867:
Sleipnir Mobile for Android loads arbitrary Extension API
2013/04/11 JVN#65034198:
Sleipnir for Windows vulnerable to address bar spoofing
2013/04/04 JVN#04288738:
Active! mail vulnerable to information disclosure
2013/03/29 JVN#01167429:
OpenWnn for Android vulnerable to information disclosure
2013/03/28 JVN#51305555:
Lotus Domino vulnerable to denial-of-service (DoS)
2013/03/26 JVN#11434157:
OpenWnn/Flick support vulnerable to information disclosure
2013/03/26 JVN#11249169:
COBIME vulnerable to information disclosure
2013/03/26 JVN#80922020:
ArtIME Japanese Input vulnerable to information disclosure
2013/03/26 JVN#77360971:
Simeji vulnerable to information disclosure
2013/03/19 JVN#59503133:
Multiple NEC mobile routers vulnerable to cross-site request forgery
2013/03/18 JVN#41022517:
VxWorks Web Server vulnerable to denial-of-service (DoS)
2013/03/18 JVN#65923092:
VxWorks WebCLI vulnerable to denial-of-service (DoS)
2013/03/18 JVN#20671901:
VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability
2013/03/18 JVN#52492830:
VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability
2013/03/18 JVN#01611135:
VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability
2013/03/18 JVN#45545972:
VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability
2013/03/07 JVN#05132866:
Multiple Cisco products vulnerable to denial-of-service (DoS)
2013/03/01 JVN#55924624:
Kingsoft Writer vulnerable to buffer overflow
2013/02/28 JVN#36339873:
dopvSTAR* vulnerable to cross-site scripting
2013/02/28 JVN#64756004:
dopvCOMET* vulnerable to cross-site scripting
2013/02/26 JVN#16817324:
Multiple JustSystems products vulnerable to arbitrary code execution
2013/02/21 JVN#75585394:
NEC Universal RAID Utility fails to restrict access permissions
2013/02/15 JVN#02596643:
3DM (3ware Disk Manager) vulnerable to directory traversal
2013/02/14 JVN#78601526:
GREE for Android vulnerable to directory traversal
2013/02/14 JVN#09223079:
imgboard vulnerable to cross-site scripting
2013/02/08 JVN#95863326:
Cybozu Garoon vulnerable to cross-site scripting
2013/02/08 JVN#07629635:
Cybozu Garoon vulnerable to SQL injection
2013/02/07 JVN#91387819:
mora Downloader may insecurely load executable files
2013/01/31 JVN#86040029:
Weathernews Touch for Android stores location information in the system log file
2013/01/25 JVN#24343509:
WebSphere Application Server (WAS) vulnerable to cross-site scripting
2013/01/22 JVN#99681273:
myu-s / PHP WeblogSystem by netmania vulnerable to cross-site scripting
2013/01/18 JVN#52197991:
Documents Pro (formerly Files HD) vulnerable to directory traversal
2013/01/18 JVN#91881278:
Documents Pro (formerly Files HD) vulnerable to cross-site scripting

2012

2012/12/21 JVN#33159152:
Loctouch for Android information management vulnerability
2012/12/21 JVN#42625179:
Loctouch for Android vulnerable in handling of implicit intents
2012/12/21 JVN#65458431:
concrete5 vulnerable to cross-site scripting
2012/12/20 JVN#27691264:
Opera Mini / Opera Mobile for Android vulnerable in the WebView class
2012/12/20 JVN#69589791:
Boat Browser / Boat Browser Mini vulnerable in the WebView class
2012/12/17 JVN#66596216:
WikkaWiki vulnerable to cross-site scripting
2012/12/14 JVN#53269985:
Welcart vulnerable to cross-site request forgery
2012/12/14 JVN#18731696:
Welcart vulnerable to cross-site scripting
2012/12/06 JVN#23563149:
KENT-WEB ACCESS REPORT vulnerable to cross-site scripting
2012/12/06 JVN#68830017:
KENT-WEB ACCESS REPORT vulnerable to cross-site scripting
2012/11/30 JVN#83907168:
Multiple KYOCERA mobile devices may reboot during email reception
2012/11/21 JVN#60931933:
BIGACE vulnerable to session fixation
2012/11/16 JVN#56923652:
Monaca Debugger for Android information management vulnerability
2012/11/14 JVN#74829345:
Multiple Android devices vulnerable to denial-of-service (DoS)
2012/11/07 JVN#18223913:
BeZIP vulnerable to directory traversal
2012/11/02 JVN#55398821:
Pebble vulnerable to open redirect
2012/11/02 JVN#39563771:
Pebble vulnerable to HTTP header injection
2012/11/02 JVN#75492883:
Pebble vulnerability where entries may become unviewable
2012/11/02 JVN#52264310:
MosP kintai kanri vulnerable to authentication bypass
2012/11/02 JVN#23465354:
MosP kintai kanri fails to restrict access permissions
2012/10/31 JVN#75345069:
Mac OS X OpenSSH vulnerable to denial-of-service (DoS)
2012/10/26 JVN#00322303:
Tokyo BBS vulnerable to cross-site scripting
2012/10/23 JVN#42676559:
Safari vulnerable to local file content disclosure
2012/10/10 JVN#63650108:
Smarty vulnerable to cross-site scripting
2012/10/05 JVN#58160713:
MyWebSearch vulnerable to cross-site scripting
2012/09/28 JVN#86318665:
jigbrowser+ for Android vulnerable in the WebView class
2012/09/27 JVN#42014489:
Trend Micro Control Manager vulnerable to SQL injection
2012/09/25 JVN#93344001:
ATOK for Android issue in the access permissions for the learning information file
2012/09/20 JVN#56373673:
myLittleAdmin for SQL Server 2000 vulnerable to arbitrary script execution
2012/09/20 JVN#50701493:
Email Anti-virus (formerly WebShield SMTP) vulnerable to denial-of-service
2012/09/13 JVN#03015214:
KUNAI Browser for Remote Service beta vulnerable in the WebView class
2012/09/07 JVN#59652356:
Cybozu KUNAI for Android vulnerable in the WebView class
2012/09/07 JVN#23568423:
Cybozu KUNAI for Android vulnerable to arbitrary Java method execution
2012/08/31 JVN#77393797:
Cybozu Live for Android vulnerable in the WebView class
2012/08/31 JVN#23009798:
Cybozu Live for Android vulnerable to arbitrary Java method execution
2012/08/30 JVN#69880570:
Opera address bar spoofing vulnerability
2012/08/30 JVN#51615542:
Adobe Reader fails to properly handle signatures
2012/08/17 JVN#92038939:
mixi for Android information management vulnerability
2012/08/16 JVN#99192898:
Multiple GREE Android applications vulnerable in the WebView class
2012/08/08 JVN#39519659:
Sleipnir Mobile for Android vulnerable to arbitrary script execution
2012/08/08 JVN#99730704:
Sleipnir Mobile for Android vulnerable to arbitrary Java method execution
2012/08/07 JVN#67435981:
LINE for Android vulnerable in handling of implicit intents
2012/08/02 JVN#01598734:
GoodReader vulnerable to cross-site scripting
2012/07/30 JVN#51769987:
Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration
2012/07/30 JVN#90389651:
Multiple web browsers vulnerable in processing Tranfer-Encoding header
2012/07/24 JVN#88643450:
Sleipnir Mobile for Android vulnerable in the WebView class
2012/07/13 JVN#46088915:
Yahoo! Browser vulnerable in the WebView class
2012/07/06 JVN#79111101:
Movable Type plugin MT4i vulnerable to cross-site scripting
2012/07/06 JVN#03582364:
YY-BOARD vulnerable to cross-site scripting
2012/07/06 JVN#80835745:
Movable Type plugin MT4i vulnerable to cross-site scripting
2012/07/06 JVN#90615481:
Ruby hash table implementation vulnerable to denial-of-service
2012/07/03 JVN#59842447:
Zenphoto vulnerable to cross-site scripting
2012/07/03 JVN#05102851:
Yome Collection for Android issue in management of IMEI
2012/06/19 JVN#36993373:
SmallPICT vulnerable to cross-site scripting
2012/06/19 JVN#51176027:
Python SimpleHTTPServer vulnerable to cross-site scripting
2012/06/19 JVN#58102473:
WEB PATIO vulnerable to cross-site scripting
2012/06/19 JVN#33171616:
WEB PATIO vulnerable to cross-site scripting
2012/06/14 JVN#90751882:
Dolphin Browser vulnerable in the WebView class
2012/06/11 JVN#38163638:
Flash Player issue in implementations of the Same Origin Policy
2012/06/07 JVN#18397171:
FeedDemon vulnerable to arbitrary script execution
2012/06/06 JVN#24646833:
SEIL series fail to restrict access permissions
2012/06/06 JVN#15646988:
WordPress plugin WassUp vulnerable to cross-site scripting
2012/06/05 JVN#78305073:
@WEB ShoppingCart vulnerable to cross-site scripting
2012/06/01 JVN#23328321:
Puella Magi Madoka Magica iP for Android vulnerable to information disclosure
2012/06/01 JVN#97995841:
Segue vulnerable to SQL injection
2012/06/01 JVN#29083866:
Segue vulnerable to cross-site scripting
2012/05/25 JVN#85934986:
Logitec LAN-W300N/R series fails to restrict access permissions
2012/05/25 JVN#21422837:
Roundcube Webmail vulnerable to cross-site scripting
2012/05/25 JVN#39707339:
Opera fails to verify SSL server certificates
2012/05/25 JVN#47662377:
Sybase EAServer vulnerable to cross-site scripting
2012/05/25 JVN#77947437:
RSSOwl vulnerable to arbitrary script execution
2012/05/21 JVN#86044443:
iLunascape for Android vulnerable in the WebView class
2012/05/17 JVN#45898075:
Drupal Form API fails to validate the redirect URL
2012/05/15 JVN#53465692:
baserCMS vulnerable to session management
2012/05/15 JVN#63941302:
WEB MART from KENT-WEB vulnerable to cross-site scripting
2012/05/15 JVN#47536971:
WEB MART from KENT-WEB vulnerable to cross-site scripting
2012/04/26 JVN#15503729:
OSQA vulnerable to cross-site scripting
2012/04/26 JVN#82029095:
sp mode mail issue in the verification of SSL certificates
2012/04/24 JVN#09619876:
Multiple JustSystems products vulnerable to buffer overflow
2012/04/24 JVN#95378720:
Multiple JustSystems products may insecurely load dynamic libraries
2012/04/20 JVN#00000601:
TwitRocker2 (Android version) vulnerable in the WebView class
2012/04/13 JVN#90055996:
Dokodemo Rikunabi 2013 vulnerable to cross-site scripting
2012/04/13 JVN#33283707:
ActiveScriptRuby vulnerable to arbitrary Ruby script execution
2012/04/05 JVN#97200417:
SENCHA SNS vulnerable to session fixation
2012/04/05 JVN#44913777:
SENCHA SNS vulnerable to cross-site request forgery
2012/04/05 JVN#92830293:
TOSHIBA TEC e-Studio series vulnerable to authentication bypass
2012/03/19 JVN#83459967:
Janetter vulnerable to cross-site request forgery
2012/03/19 JVN#10745573:
Janetter vulnerable to information disclosure
2012/03/13 JVN#93406632:
Redmine vulnerable to cross-site scripting
2012/03/13 JVN#31860555:
twicca fails to restrict access permissions
2012/03/09 JVN#79950061:
Jenkins vulnerable to cross-site scripting
2012/03/09 JVN#14791558:
Jenkins vulnerable to cross-site scripting
2012/03/09 JVN#56653852:
SquirrelMail plugin Autocomplete vulnerable to cross-site scripting
2012/03/05 JVN#08871006:
ES File Explorer fails to restrict access permissions
2012/03/01 JVN#31517714:
Kingsoft Internet Security 2011 vulnerable to denial-of-service
2012/02/23 JVN#20083397:
Movable Type vulnerable to session hijacking
2012/02/23 JVN#92683325:
Movable Type vulnerable to OS command injection
2012/02/23 JVN#49836527:
Movable Type vulnerable to cross-site scripting
2012/02/23 JVN#70683217:
Movable Type vulnerable to cross-site request forgery
2012/02/22 JVN#25731073:
Multiple COOKPAD applications for Android vulnerable in WebView class
2012/02/15 JVN#35256978:
cforms II vulnerable to cross-site scripting
2012/02/13 JVN#85695061:
ALFTP may insecurely load executable files
2012/02/10 JVN#79099262:
Apache Struts 2 vulnerable to an arbitrary Java method execution
2012/02/01 JVN#33021167:
Pocket WiFi (GP02) vulnerable to cross-site request forgery
2012/01/23 JVN#65869891:
glucose 2 vulnerable to arbitrary script execution
2012/01/20 JVN#38216398:
osCommerce vulnerable to directory traversal
2012/01/20 JVN#64386898:
osCommerce vulnerable to cross-site scripting
2012/01/20 JVN#36559450:
osCommerce Japanese version vulnerable to cross-site scripting
2012/01/20 JVN#54779201:
Oracle WebLogic Server vulnerable to cross-site scripting
2012/01/11 JVN#78901873:
Wibu-Systems CodeMeter Runtime vulnerable to denial-of-service
2012/01/11 JVN#63249231:
Cogent DataHub vulnerable to HTTP header injection
2012/01/11 JVN#12983784:
Cogent DataHub vulnerable to cross-site scripting

2011

2011/12/26 JVN#44439553:
WordPress Japanese vulnerable to cross-site scripting
2011/12/26 JVN#40498018:
WordPress vulnerable to arbitrary PHP code execution
2011/12/26 JVN#60887968:
Movable Type Plugin MailForm vulnerable to cross-site scripting
2011/12/22 JVN#76515037:
PukiWiki Plus! vulnerable to cross-site scripting
2011/12/22 JVN#25435092:
Apache Struts vulnerable to cross-site scripting
2011/12/15 JVN#15549168:
Safari for iOS vulnerable to denial-of-service
2011/12/15 JVN#05255562:
Multiple vulnerabilities in products that use the Preboot Execution Environment (PXE) SDK
2011/12/09 JVN#94002296:
FFFTP may insecurely load executable files
2011/12/08 JVN#70502960:
phpWebSite vulnerable to cross-site scripting
2011/12/06 JVN#04329324:
Etomite vulnerable to cross-site scripting
2011/12/02 JVN#61695284:
PowerChute Business Edition vulnerable to cross-site scripting
2011/11/21 JVN#48839888:
Nikki vulnerable to OS command injection
2011/11/21 JVN#80081509:
Nikki vulnerable to directory traversal
2011/11/08 JVN#16901583:
ChaSen vulnerable to buffer overflow
2011/11/08 JVN#33861625:
Iwate Portal Bar vulnerable to arbitrary script execution
2011/11/04 JVN#37223351:
WebObjects vulnerable to cross-site scripting
2011/11/04 JVN#71349007:
Opengear console servers vulnerable to authentication bypass
2011/11/01 JVN#98649286:
CSWorks LiveData Service vulnerable to denial-of-service (DoS)
2011/10/31 JVN#56667137:
Multiple SKYARC System Co., Ltd. products vulnerable to cross-site request forgery
2011/10/31 JVN#41032068:
Multiple SKYARC System Co., Ltd. products fail to restrict access permissions
2011/10/28 JVN#50227837:
Touhou Hisouten vulnerable to denial-of-service
2011/10/28 JVN#72640744:
Multiple D-Link products vulnerable to buffer overflow
2011/10/28 JVN#62336482:
FFFTP may insecurely load executable files
2011/10/17 JVN#41657660:
Safari for iOS vulnerable to cross-site scripting
2011/10/14 JVN#44496332:
EC-CUBE vulnerable to SQL injection
2011/10/14 JVN#51216285:
DBD::mysqlPP vulnerable to SQL injection
2011/10/13 JVN#07414354:
DAEMON Tools vulnerable to denial-of-service
2011/10/13 JVN#04013920:
Pligg vulnerable to cross-site scripting
2011/10/13 JVN#08307791:
Plume vulnerable to cross-site scripting
2011/10/11 JVN#80971236:
WEB FORUM vulnerable to cross-site scripting
2011/10/11 JVN#89764731:
WEB FORUM vulnerable to cross-site scripting
2011/10/11 JVN#36684331:
WEB FORUM vulnerable to cross-site scripting
2011/10/07 JVN#84838479:
Cybozu Office vulnerable in restricting access
2011/10/07 JVN#34980730:
A-Form vulnerable in restricting access
2011/10/07 JVN#03869266:
Enkai-kun vulnerable to cross-site scripting
2011/09/30 JVN#16617002:
BaserCMS vulnerable to access restriction
2011/09/30 JVN#09789751:
BaserCMS vulnerable to cross-site scripting
2011/09/16 JVN#28973089:
SemanticScuttle vulnerable to cross-site scripting
2011/09/09 JVN#45458289:
Megalith vulnerable to authentication bypass
2011/09/02 JVN#58019849:
GTK+ may insecurely load dynamic libraries
2011/09/02 JVN#44642341:
Juniper Networks IDP ACM vulnerable to cross-site scripting
2011/09/02 JVN#99203127:
Sage vulnerable to arbitrary script execution
2011/09/02 JVN#30221194:
Sage vulnerable to arbitrary script execution
2011/09/02 JVN#71435255:
Multiple vulnerabilities in Phorum
2011/08/26 JVN#29529126:
Samba Web Administration Tool vulnerable to cross-site request forgery
2011/08/26 JVN#63041502:
Samba Web Administration Tool vulnerable to cross-site scripting
2011/08/26 JVN#02134508:
WebsiteBaker vulnerable to cross-site scripting
2011/08/19 JVN#06924191:
Microsoft Windows XP vulnerable to denial-of-service (DoS)
2011/08/16 JVN#31506102:
Aipo vulnerable to SQL injection
2011/08/16 JVN#72854072:
Aipo vulnerable to cross-site request forgery
2011/08/12 JVN#96E584EB:
Internet Explorer window display vulnerability
2011/08/10 JVN#80404511:
Windows URL Protocol Handler may insecurely load executable files
2011/07/29 JVN#43105011:
Android vulnerability where an incorrect SSL certificate is displayed
2011/07/28 JVN#74649877:
Mozilla Firefox vulnerable to cross-site scripting
2011/07/28 JVN#96950482:
Mozilla Firefox vulnerable to cross-site scripting
2011/07/28 JVN#70984231:
Mozilla Firefox vulnerable to denial-of-service (DoS)
2011/07/28 JVN#36721438:
Mozilla Firefox vulnerability in processing content-length header
2011/07/27 JVN#41222793:
Plone vulnerable to cross-site scripting
2011/07/25 JVN#47124169:
Oracle iPlanet Web Server information disclosure vulnerability
2011/07/15 JVN#87908726:
ASP.NET vulnerable to cross-site scripting
2011/07/15 JVN#86220950:
Google Search Appliance vulnerable to cross-site scripting
2011/07/08 JVN#51325625:
Internet Explorer vulnerable to cross-site scripting
2011/07/05 JVN#17844633:
XnView may insecurely load executable files
2011/07/05 JVN#47757122:
Opera vulnerable to denial-of-service (DoS)
2011/06/29 JVN#01547302:
ALZip vulnerable to buffer overflow
2011/06/24 JVN#55508059:
Cybozu Office vulnerable to cross-site scripting
2011/06/24 JVN#54074460:
Multiple Cybozu products vulnerable to cross-site scripting
2011/06/24 JVN#80877328:
Multiple Cybozu products vulnerable to cross-site scripting
2011/06/24 JVN#59779256:
Cybozu Garoon vulnerable to cross-site scripting
2011/06/20 JVN#43386477:
WeblyGo vulnerable to cross-site scripting
2011/06/16 JVN#87239473:
Ichitaro series vulnerable to arbitrary code execution
2011/06/15 JVN#40382909:
Microsoft Outlook read receipt function vulnerability
2011/06/15 JVN#72586781:
ASP.NET vulnerable to cross-site scripting
2011/06/15 JVN#26408023:
Internet Explorer vulnerable to cross-site scripting
2011/06/15 JVN#73643130:
Microsoft MSXML vulnerability in HTTP request processing
2011/06/15 JVN#63451350:
Clipboard contents alteration vulnerability in Internet Explorer
2011/06/15 JVN#5D1D3E36:
Microsoft Windows VBScript implementation file name disclosure vulnerability
2011/06/10 JVN#18680611:
Java Web Start may insecurely load dynamic libraries
2011/06/10 JVN#09206238:
Java Web Start may insecurely load settings files
2011/06/10 JVN#29212182:
Java Web Start may insecurely load policy files
2011/05/26 JVN#46984044:
WalRack upload file handilng vulnerability
2011/05/25 JVN#45658190:
Movable Type vulnerable to cross-site scripting
2011/05/19 JVN#77697803:
iVIEW Suite vulnerable to SQL injection
2011/05/17 JVN#99175647:
Virus Buster 2009 key input encryption function vulnerability
2011/05/11 JVN#96839637:
La Fonera+ vulnerable to denial-of-service (DoS)
2011/05/11 JVN#63898867:
Applications that use the Windows Help function may be vulnerable to privilege escalation
2011/05/10 JVN#37878530:
EC-CUBE vulnerable to cross-site request forgery
2011/04/19 JVN#50505257:
Multiple Buffalo routers vulnerable to cross-site request forgery
2011/04/11 JVN#55714408:
Multiple Yamaha routers vulnerable to denial-of-service (DoS)
2011/04/08 JVN#11424086:
Password Vault Web Access vulnerable to cross-site scripting
2011/03/25 JVN#99977321:
Picasa may insecurely load executable files
2011/03/14 JVN#01635457:
e107 vulnerable to cross-site scripting
2011/03/10 JVN#81294135:
IBM Tivoli vulnerable to denial-of-service (DoS)
2011/03/07 JVN#73162541:
OTRS vulnerable to OS command injection
2011/03/04 JVN#97334690:
IBM Lotus vulnerable to denial-of-service (DoS)
2011/03/04 JVN#26301278:
IBM WebSphere Application Server vulnerable to denial-of-service (DoS)
2011/03/04 JVN#16308183:
IBM DB2 vulnerable to denial-of-service (DoS)
2011/03/02 JVN#20982938:
Multiple Things CGI products vulnerable to cross-site scripting
2011/02/28 JVN#88991166:
SEIL Series routers vulnerable to buffer overflow
2011/02/23 JVN#38362957:
Lunascape may insecurely load executable files
2011/02/16 JVN#71542734:
F-Secure Internet Gatekeeper for Linux authentication issue
2011/02/02 JVN#33880169:
Opera may insecurely load executable files
2011/02/02 JVN#84393059:
EC-CUBE vulnerable to cross-site scripting
2011/01/26 JVN#95385972:
MODx Evolution vulnerable to directory traversal
2011/01/26 JVN#54092716:
MODx Evolution vulnerable to SQL injection
2011/01/21 JVN#94695018:
Lunascape may insecurely load dynamic libraries
2011/01/21 JVN#26605630:
Cisco Linksys WRT54GC vulnerable to buffer overflow
2011/01/18 JVN#09115481:
Cross-site scripting vulnerability in multiple Rocomotion products
2011/01/18 JVN#30414126:
Ruby Version Manager escape sequence injection vulnerability
2011/01/11 JVN#86347943:
SGX-SP Final and SGX-SP Final NE vulnerable to cross-site scripting
2011/01/11 JVN#53293565:
Contents-Mall vulnerability in password handling
2011/01/11 JVN#50704770:
Aipo vulnerable to SQL injection
2011/01/07 JVN#30881447:
SquirrelMail vulnerable to cross-site request forgery
2011/01/07 JVN#09157962:
SquirrelMail vulnerable to cross-site scripting

2010

2010/12/17 JVN#02175694:
AttacheCase may insecurely load executable files
2010/12/15 JVN#33301529:
Internet Explorer vulnerable to cross-site scripting
2010/12/15 JVN#21120853:
Internet Explorer vulnerable to cross-site scripting
2010/12/15 JVN#30273074:
Internet Explorer vulnerable to cross-site scripting
2010/12/15 JVN#62275332:
Internet Explorer vulnerable to cross-site scripting
2010/12/08 JVN#78536512:[Critical]
Movable Type vulnerable to SQL injection
2010/12/08 JVN#36673836:
Movable Type vulnerable to cross-site scripting
2010/12/08 JVN#62736872:
Vulnerability in Epson printer driver installer where access permissions are changed
2010/12/01 JVN#76662040:
Clipboard contents alteration vulnerability in Grani
2010/12/01 JVN#64764004:
Clipboard contents alteration vulnerability in Sleipnir
2010/11/26 JVN#36765384:
Google Chrome information disclosure vulnerability
2010/11/26 JVN#46026251:
Safari address bar spoofing vulnerability
2010/11/09 JVN#48425028:
Flash Player access restriction bypass vulnerability
2010/11/04 JVN#01948274:
Ichitaro series vulnerable to arbitrary code execution
2010/11/04 JVN#19173793:
Ichitaro series vulnerable to arbitrary code execution
2010/11/01 JVN#27868039:
GVim may insecurely load dynamic libraries
2010/10/29 JVN#72541530:
Active! mail 6 vulnerable to HTTP header injection
2010/10/22 JVN#07497935:
Multiple Yokka provided products may insecurely load executable files
2010/10/22 JVN#89272705:
Sleipnir and Grani may insecurely load executable files
2010/10/22 JVN#50610528:
Sleipnir and Grani may insecurely load dynamic libraries
2010/10/21 JVN#71138390:
Apsaly may insecurely load executable files
2010/10/21 JVN#48097065:
TeraPad may insecurely load dynamic libraries
2010/10/20 JVN#68536660:
Archive Decoder may insecurely load executable files
2010/10/20 JVN#85599999:
Explzh may insecurely load executable files
2010/10/18 JVN#50133036:
Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server
2010/10/15 JVN#36921800:
K2Editor may insecurely load executable files
2010/10/15 JVN#04665167:
XacRett may insecurely load executable files
2010/10/15 JVN#18774708:
Lhaplus may insecurely load executable files
2010/10/12 JVN#88850043:
Lhasa may insecurely load executable files
2010/10/12 JVN#82752978:
Lhaplus may insecurely load dynamic libraries
2010/10/05 JVN#69191943:
AD-EDIT2 vulnerable to cross-site scripting
2010/09/10 JVN#35605523:
Cross-site scripting vulnerability in Access Analyzer CGI by futomi's CGI Cafe
2010/08/31 JVN#75101998:
moobbs2 vulnerable to cross-site scripting
2010/08/31 JVN#24423311:
moobbs vulnerable to cross-site scripting
2010/08/25 JVN#12683004:
SEIL/X Series and SEIL/B1 IPv6 Unicast RPF vulnerability
2010/08/20 JVN#91740962:[Critical]
Winny vulnerable to buffer overflow
2010/08/20 JVN#21471805:[Critical]
Winny vulnerable to buffer overflow
2010/08/20 JVN#25393522:[Critical]
Winny node information processing vulnerability
2010/08/20 JVN#54336184:[Critical]
Winny BBS information processing vulnerability
2010/08/13 JVN#86832361:
Microsoft Windows denial of service (DoS) vulnerability
2010/06/22 JVN#34729123:
Explzh buffer overflow vulnerability
2010/06/14 JVN#67120749:
Multiple vulnerabilities in ActiveGeckoBrowser
2010/06/02 JVN#36925871:
e-Pares vulnerable to session fixation
2010/06/02 JVN#82465391:
e-Pares vulnerable to cross-site request forgery
2010/06/02 JVN#58439007:
e-Pares vulnerable to cross-site scripting
2010/06/01 JVN#17293765:
Ichitaro series vulnerable to arbitrary code execution
2010/05/17 JVN#82749282:
CapsSuite Small Edition PatchMeister vulnerable to denial of service
2010/05/17 JVN#90872372:
WebSAM DeploymentManager vulnerable to denial of service
2010/05/17 JVN#90248889:
Interstage Application Server vulnerable in request processing
2010/05/12 JVN#92854093:
Movable Type vulnerable to cross-site scripting
2010/04/19 JVN#87730223:
Multiple Cybozu products vulnerable to authentication bypass
2010/04/12 JVN#98467259:
Ichitaro series vulnerable to arbitrary code execution
2010/04/08 JVN#14313132:
Cisco Router and Security Device Manager vulnerable to cross-site scripting
2010/04/08 JVN#46669729:
MODx vulnerable to cross-site scripting
2010/04/08 JVN#19774883:
MODx vulnerable to SQL injection
2010/04/07 JVN#49467403:
Internet Explorer information disclosure vulnerability
2010/04/02 JVN#60969543:
HL-SiteManager vulnerable to SQL injection
2010/04/01 JVN#38687002:
Compiere vulnerable to cross-site scripting
2010/04/01 JVN#57963254:
Compiere vulnerable to cross-site scripting
2010/04/01 JVN#41842181:
PrettyFormMail vulnerable to cross-site scripting
2010/03/05 JVN#06874657:
OpenPNE authentication bypass vulnerability
2010/02/25 JVN#73331060:
tDiary plugin tb-send.rb vulnerable to cross-site scripting
2010/01/14 JVN#50837839:
Oracle Application Server vulnerable to cross-site scripting
2010/01/12 JVN#22247093:
WebCalenderC3 vulnerable to directory traversal
2010/01/12 JVN#33977065:
WebCalenderC3 cross-site scripting vulnerability
2010/01/06 JVN#09872874:
Movable Type access restriction bypass vulnerability

2009

2009/12/15 JVN#00152874:
P forum vulnerable to directory traversal
2009/12/09 JVN#49602378:
SEIL/B1 authentication issue
2009/12/08 JVN#36207497:
Active! mail 2003 cookie disclosure vulnerability
2009/12/08 JVN#85821104:
Active! mail 2003 session ID disclosure vulnerability
2009/12/08 JVN#49083120:
Active! mail 2003 cross-site scripting vulnerability
2009/12/07 JVN#79762947:[Critical]
EC-CUBE information disclosure vulnerability
2009/11/19 JVN#87341298:
Redmine vulnerable to cross-site request forgery
2009/11/19 JVN#01245481:
Redmine vulnerable to cross-site scripting
2009/11/04 JVN#75694913:
Roundcube Webmail vulnerable to cross-site request forgery
2009/11/04 JVN#72974205:
Roundcube Webmail vulnerable to cross-site request forgery
2009/10/28 JVN#13011682:
SEIL/X Series and SEIL/B1 denial of service vulnerability
2009/10/28 JVN#06362164:
SEIL/X Series and SEIL/B1 buffer overflow vulnerability
2009/10/26 JVN#75368899:
Implementations of IPv6 may be vulnerable to denial of service (DoS) attacks
2009/10/20 JVN#33822756:
Canon IT Solutions Inc. ACCESSGUARDIAN vulnerable to cross-site scripting
2009/10/15 JVN#23108985:
Multiple Cybozu products vulnerable to cross-site scripting
2009/10/02 JVN#84396512:
SugarCRM vulnerable to cross-site scripting
2009/09/18 JVN#65914253:
Directory traversal vulnerability in multiple phpspot products
2009/09/18 JVN#53591199:
Cross-site scripting vulnerability in multiple phpspot products
2009/09/17 JVN#00425482:
XF-Section vulnerable to cross-site scripting
2009/09/17 JVN#39157969:
Third-party cookie issue in Opera
2009/09/11 JVN#05857667:[Critical]
Webservice-DIC yoyaku_v41 vulnerable to command injection
2009/09/09 JVN#62211338:[Critical]
Buffer overflow vulnerability in Microsoft Windows
2009/09/02 JVN#57040664:
ATOK screen lock bypass vulnerability
2009/08/27 JVN#68640473:
bingo!CMS core and bingo!CMS vulnerable to cross-site request forgery
2009/08/24 JVN#31035930:
SugarCRM vulnerable to SQL injection
2009/08/21 JVN#20478978:
Site Calendar 'mycaljp' vulnerable to cross-site scripting
2009/08/19 JVN#21388501:
ColdFusion vulnerable to cross-site scripting
2009/08/05 JVN#15267895:
Cross-site request forgery vulnerability in FreeNAS
2009/08/05 JVN#89791790:
Cross-site scripting vulnerability in FreeNAS
2009/07/31 JVN#80436657:[Critical]
Webservice-DIC yoyaku_v41 vulnerable to command injection
2009/07/29 JVN#59748723:
MySQL Connector/J vulnerable to SQL injection
2009/07/24 JVN#29852698:
Cross-site scripting vulnerability in RevoCounter CGI (Animation Counter)
2009/07/14 JVN#31110006:
shiromuku(fs6)DIARY cross-site scripting vulnerability
2009/06/25 JVN#32788272:
PHP-I-BOARD from Let's PHP! vulnerable to directory traversal
2009/06/25 JVN#20219071:
PHP-I-BOARD from Let's PHP! vulnerable to cross-site scripting
2009/06/25 JVN#93827000:
Tree BBS from Let's PHP! vulnerable to cross-site scripting
2009/06/24 JVN#08369659:
Movable Type access restriction bypass vulnerability
2009/06/24 JVN#86472161:
Movable Type cross-site scripting vulnerability
2009/06/19 JVN#12244807:
Cross-site scripting vulnerability in PukiWikiMod from XOOPS Maniac
2009/06/18 JVN#87239696:
iPhone OS denial of service (DoS) vulnerability
2009/06/11 JVN#70858401:[Critical]
Buffer overflow vulnerability in Microsoft Works converters
2009/06/10 JVN#55752635:
Cross-site scripting vulnerability in activeCollab
2009/06/09 JVN#87272440:
Apache Tomcat denial of service (DoS) vulnerability
2009/06/09 JVN#63832775:
Apache Tomcat information disclosure vulnerability
2009/06/08 JVN#20689557:
Predictable session ID vulnerability in Serene Bach
2009/05/29 JVN#70836284:
IMG-BBS from MT312 vulnerable to cross-site scripting
2009/05/29 JVN#01115659:
REP-BBS from MT312 vulnerable to cross-site scripting
2009/05/29 JVN#62527913:
Directory traversal vulnerability in multiple Cisco Systems products
2009/05/22 JVN#57036470:
Cross-site scripting vulnerability in leger (free edition)
2009/05/21 JVN#42927215:
a-News from Appleple vulnerable to cross-site scripting
2009/05/20 JVN#02331156:
HP System Management Homepage vulnerable to cross-site scripting
2009/05/18 JVN#28521500:
Trees from CGI RESCUE vulnerable to cross-site scripting
2009/05/13 JVN#73653977:
Sun GlassFish Enterprise Server and Sun Java System Application Server vulnerable to cross-site scripting
2009/05/11 JVN#03114223:
SQL injection vulnerability in SKIP from SKIP User Group
2009/05/11 JVN#43233160:
Cross-site scripting vulnerability in SKIP from SKIP User Group
2009/04/27 JVN#28020230:
Web Mailer from CGI RESCUE vulnerable to HTTP header injection
2009/04/27 JVN#76370393:
FORM2MAIL from CGI RESCUE allows unauthorized email transmission
2009/04/27 JVN#11396739:
Cross-site scripting vulnerability in MiniBBS from CGI RESCUE
2009/04/27 JVN#36982346:
MiniBBS22 from CGI RESCUE allows unauthorized email transmission
2009/04/24 JVN#97248625:
Movable Type cross-site scripting vulnerability
2009/04/16 JVN#82744714:
Cross-site scripting vulnerability in apricot.php from LovPop.net
2009/04/07 JVN#33846134:
Ichitaro series buffer overflow vulnerability
2009/04/02 JVN#74747784:
XOOPS Cube Legacy cross-site scripting vulnerability
2009/03/31 JVN#63511247:
Access Analyzer CGI Professional Version vulnerability allows third party to gain administrative privileges
2009/03/16 JVN#23558374:
Cross-site scripting vulnerability in Access Analyzer CGI Standard Version (Ver. 3.x)
2009/03/10 JVN#84899898:
MP Form Mail CGI vulnerability allows third party to gain administrative privileges
2009/02/26 JVN#66905322:
Apache Tomcat information disclosure vulnerability
2009/02/25 JVN#91591874:
PEAK XOOPS piCal cross-site scripting vulnerability
2009/02/23 JVN#16767117:
Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras
2009/02/12 JVN#29641290:[Critical]
Becky! Internet Mail buffer overflow vulnerability
2009/02/10 JVN#45184501:
FAST ESP cross-site scripting vulnerability
2009/01/23 JVN#80771386:
Fulltext search CGI vulnerability allows third party to gain administrative privileges
2009/01/20 JVN#93431860:
Oracle WebLogic Server vulnerable to cross-site scripting
2009/01/15 JVN#28344798:
Cisco IOS cross-site scripting vulnerability
2009/01/09 JVN#72630020:
MODx vulnerable to SQL injection
2009/01/09 JVN#66828183:
MODx cross-site request forgery vulnerability
2009/01/09 JVN#10170564:
MODx cross-site scripting vulnerability
2009/01/08 JVN#71945722:
Movable Type Enterprise cross-site scripting vulnerability
2009/01/07 JVN#36802959:
MyNETS cross-site scripting vulnerability

2008

2008/12/25 JVN#98063934:
BlackJumboDog authentication bypass vulnerability
2008/12/25 JVN#17298485:
Mayaa cross-site scripting vulnerability
2008/12/19 JVN#50327700:
PHP vulnerable to cross-site scripting
2008/12/12 JVN#07468800:
Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe
2008/12/03 JVN#02216739:
Movable Type Enterprise cross-site scripting vulnerability
2008/11/26 JVN#70599814:
I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability
2008/11/21 JVN#86833991:
CGI RESCUE MiniBBS2000 directory traversal vulnerability
2008/11/17 JVN#47875752:
GungHo LoadPrgAx vulnerable to arbitrary Java program execution
2008/11/06 JVN#19072922:[Critical]
EC-CUBE vulnerable to SQL injection
2008/11/06 JVN#67060882:
sISAPILocation vulnerability bypasses HTTP header rewrite function
2008/10/28 JVN#20502807:[Critical]
Snoopy command injection vulnerability
2008/10/20 JVN#53267766:
MyNETS cross-site scripting vulnerability
2008/10/20 JVN#55410403:
Internet Explorer vulnerable in handling CDO protocol
2008/10/20 JVN#03300113:
Blosxom vulnerable to cross-site scripting
2008/10/17 JVN#81490697:
Movable Type cross-site scripting vulnerability
2008/10/17 JVN#67334580:
hisa_cart information disclosure vulnerability
2008/10/10 JVN#30732239:
Apache Tomcat allows access from a non-permitted IP address
2008/10/06 JVN#92651529:
Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting
2008/10/01 JVN#81111541:[Critical]
EC-CUBE vulnerable to SQL injection
2008/10/01 JVN#99916563:
EC-CUBE cross-site scripting vulnerability
2008/10/01 JVN#36085487:
EC-CUBE cross-site scripting vulnerability
2008/10/01 JVN#26621646:
EC-CUBE cross-site scripting vulnerability
2008/09/26 JVN#54824688:
phpMyAdmin cross-site scripting vulnerability
2008/09/17 JVN#94163107:
Kantan WEB Server cross-site scripting vulnerability
2008/09/17 JVN#79026329:
Kantan WEB Server directory traversal vulnerability
2008/09/10 JVN#18616622:
Multiple Tor World CGI scripts vulnerable to arbitrary script execution
2008/09/09 JVN#30385652:
Movable Type vulnerable to cross-site scripting
2008/09/09 JVN#55010230:
Sound Master 2nd from High Norm vulnerable to cross-site scripting
2008/09/03 JVN#79914432:
Webservice-DIC shop_v50 and shop_v52 vulnerable to cross-site scripting
2008/08/29 JVN#03859837:
Blogn vulnerable to cross-site scripting
2008/08/29 JVN#84125369:
Blogn vulnerable to cross-site request forgery
2008/08/26 JVN#27417220:
mysql-lists from AquaGardenSoft Co.,Ltd. vulnerable to cross-site scripting
2008/08/21 JVN#53886050:
Vulnerability in La!cooda WIZ and LacoodaST allowing an arbitrary PHP script execution
2008/08/21 JVN#52557009:
La!cooda WIZ and LacoodaST vulnerable to cross-site scripting
2008/08/21 JVN#31723154:
LacoodaST from SpaceTag, Inc. session fixation vulnerability
2008/08/21 JVN#83428818:
La!cooda WIZ and LacoodaST vulnerable to cross-site request forgery
2008/08/12 JVN#66077895:
Virus Security and Virus Security ZERO denial of service (DoS) vulnerability
2008/07/31 JVN#33706820:
Multiple Panasonic Communications Co., Ltd. network cameras vulnerable to cross-site scripting
2008/07/25 JVN#60419863:
Geeklog Forum Plugin vulnerable to cross-site scripting
2008/07/23 JVN#72065744:
K's CGI Access Log Kaiseki (Jcode.pm) vulnerable to cross-site scripting
2008/07/23 JVN#46869708:
K's CGI Access Log Kaiseki (jcode.pl) vulnerable to cross-site scripting
2008/07/22 JVN#67573833:
Multiple Century Systems routers vulnerable to cross-site request forgery
2008/07/18 JVN#49704543:
WebProxy from LunarNight Laboratory vulnerable to cross-site scripting
2008/07/18 JVN#81667751:
Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins
2008/07/14 JVN#88676089:
Safari installed in iPod touch and iPhone vulnerable in handling server certificates
2008/07/07 JVN#00945448:
Redmine vulnerable to cross-site scripting
2008/07/03 JVN#77432756:
FreeStyleWiki cross-site scripting vulnerability
2008/06/27 JVN#52363223:
Cybozu Garoon vulnerable to arbitrary script execution
2008/06/27 JVN#18700809:
Cybozu Garoon session fixation vulnerability
2008/06/27 JVN#18405927:
Multiple Cybozu products vulnerable to cross-site request forgery
2008/06/25 JVN#36635562:
nProtect : Netizen denial of service (DoS) vulnerability
2008/06/19 JVN#45389864:
CGIWrap error page cross-site scripting vulnerability
2008/06/17 JVN#14072646:
BlognPlus SQL injection vulnerability
2008/06/10 JVN#88935101:
X.Org Foundation X server buffer overflow vulnerability
2008/06/04 JVN#25448394:
Sleipnir and Grani vulnerable to arbitrary script execution when Bookmark search results are restored from history
2008/05/30 JVN#43906021:
WEB MART from KENT WEB vulnerable to cross-site scripting
2008/04/28 JVN#74468481:[Critical]
Lhaplus buffer overflow vulnerability
2008/04/28 JVN#31351020:
Cross-site scripting vulnerabilities in multiple Bluemoon Inc. XOOPS modules
2008/04/23 JVN#76788395:
Sony mylo COM-2 does not verify server SSL certificate
2008/04/04 JVN#21563357:
Mozilla Firefox cross-site scripting vulnerability
2008/03/27 JVN#76669770:
PerlMailer cross-site scripting vulnerability
2008/03/27 JVN#58803701:
DesignForm cross-site scripting vulnerability
2008/03/21 JVN#00892830:
Namazu cross-site scripting vulnerability
2008/03/18 JVN#13159997:[Critical]
Multiple I-O DATA DEVICE wireless LAN routers default configuration does not set authentication
2008/03/12 JVN#79114735:
Google Desktop cross-site scripting vulnerability
2008/03/11 JVN#04032535:
Sun Java Runtime Environment (JRE) contains a vulnerability in processing XSLT transformations
2008/03/07 JVN#10606373:
BFup ActiveX Control buffer overflow vulnerability
2008/03/07 JVN#21312708:
MTCMS WYSIWYG Editor cross-site scripting vulnerability
2008/03/07 JVN#95014590:
Zimbra Collaboration Suite script execution vulnerability
2008/03/05 JVN#10056705:
FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers
2008/02/29 JVN#53757727:
Nagios cross-site scripting vulnerability
2008/02/21 JVN#54593414:
Cross-site scripting vulnerability in multiple Tor World CGI scripts
2008/02/21 JVN#42381549:
Internet Scanner reporting engine vulnerable to cross-site scripting
2008/02/12 JVN#09470767:
Apache Tomcat fails to properly handle cookie value
2008/02/07 JVN#38893575:
PC2M cross-site scripting vulnerability
2008/02/05 JVN#91868305:
RaidenHTTPD cross-site scripting vulnerability
2008/01/28 JVN#01162446:
Cross-site scripting vulnerabilities in multiple Hal Networks shopping cart products
2008/01/28 JVN#88575577:
Multiple Yamaha routers vulnerable to cross-site request forgery
2008/01/07 JVN#08237857:
Multiple JustSystems products vulnerable to buffer overflow

2007

2007/12/26 JVN#33044255:
GreaseKit and Creammonkey allows execution of userscript functions
2007/12/25 JVN#44736880:
WinAce buffer overflow vulnerability
2007/12/21 JVN#89292430:
Cross-site scripting in Sun Java System Web Server and Sun Java System Web Proxy Server
2007/12/20 JVN#50876069:
Flash Player allows to send arbitrary HTTP headers
2007/12/20 JVN#45675516:
Flash Player vulnerable in handling cross-domain policy files
2007/12/18 JVN#75130343:
Google Web Toolkit vulnerable to cross-site scripting
2007/12/13 JVN#80057925:
Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap"
2007/12/13 JVN#52846259:
JP1/Cm2/Network Node Manager vulnerable to cross-site scripting
2007/12/12 JVN#23120863:
Rainboard cross-site scripting vulnerability
2007/12/11 JVN#90712589:
Multiple Cybozu products vulnerable to cross-site scripting
2007/12/11 JVN#77730435:
Multiple Cybozu products vulnerable to HTTP header injection
2007/12/11 JVN#50342989:
Multiple Cybozu products vulnerable to cross-site scripting
2007/12/11 JVN#77414947:
Cybozu Office denial of service (DoS) vulnerability
2007/12/07 JVN#02854109:
HttpLogger vulnerable to cross-site scripting
2007/12/04 JVN#66291445:
SonicStage CP buffer overflow vulnerability
2007/11/22 JVN#82610488:[Critical]
Lhaplus buffer overflow vulnerability
2007/11/21 JVN#55833292:
FileMaker cross-site scripting vulnerability
2007/11/20 JVN#33218020:
Feed2JS cross-site scripting vulnerability
2007/11/19 JVN#33820033:
RoundCube Webmail cross-site request forgery vulnerability
2007/11/13 JVN#65427327:
Sleipnir and Grani Bookmark Search vulnerable to arbitrary script execution
2007/11/09 JVN#99453765:
Cross-site scripting vulnerability in updir.php in UPDIR.NET
2007/11/07 JVN#84565055:
Lotus Domino cross-site scripting vulnerability
2007/11/05 JVN#79295963:
NetCommons cross-site scripting vulnerability
2007/10/25 JVN#29211062:
Ichitaro series buffer overflow vulnerability
2007/10/25 JVN#32981509:
Ichitaro series buffer overflow vulnerability
2007/10/25 JVN#50495547:
Ichitaro series buffer overflow vulnerability
2007/10/12 JVN#63304072:
MouseoverDictionary vulnerable to arbitrary script execution
2007/10/12 JVN#71872818:
AirStation series and BroadStation series vulnerable to cross-site request forgery
2007/10/05 JVN#61323184:
PowerArchiver buffer overflow vulnerability
2007/10/03 JVN#61208749:
Webmin OS command injection vulnerability
2007/10/01 JVN#79013771:
Safari allows access from HTTP to HTTPS
2007/09/28 JVN#70075625:
Aipo session fixation vulnerability
2007/09/21 JVN#70734805:
Lhaplus buffer overflow vulnerability
2007/09/07 JVN#35677737:
Fingerprint Authentication Software for Sony Pocket Bit installs hidden folders and files
2007/09/06 JVN#75899905:
Fuktommy.com httpd.pl included in its HTML preprocessor vulnerable in allowing an attacker to view arbitrary CGI source code
2007/09/06 JVN#01913089:
Fuktommy.com httpd.pl including HTML preprocessor vulnerable to directory traversal
2007/09/05 JVN#62868899:
7-ZIP32.DLL buffer overflow vulnerability
2007/09/03 JVN#43091983:
Fulltext search CGI from futomi's CGI Cafe vulnerable to cross-site scripting
2007/08/31 JVN#20452446:
Shopping Basket Pro directory traversal vulnerability
2007/08/27 JVN#38199598:
Mayaa cross-site scripting vulnerability
2007/08/27 JVN#82276964:
Tuigwaa cross-site scripting vulnerability
2007/08/15 JVN#59851336:
Apache Tomcat Host Manager cross-site scripting vulnerability
2007/08/10 JVN#66303599:
WebCart cross-site scripting vulnerability
2007/08/02 JVN#16018033:
Safari URL spoofing vulnerability
2007/07/31 JVN#43615794:
Yayoi Kaikei improper handling of credential information
2007/07/25 JVN#25471539:
Aruba Mobility Controller Series cross-site scripting vulnerability
2007/07/20 JVN#34058672:
Nessus report function vulnerable to arbitrary script execution
2007/07/11 JVN#72595280:
Flash Player allows to send arbitrary Referer headers
2007/07/09 JVN#33593387:
KDDI sample CGI download program directory traversal vulnerability
2007/06/27 JVN#44532794:
rktSNS cross-site scripting vulnerability
2007/06/27 JVN#74063879:
sHTTPd cross-site scripting vulnerability
2007/06/25 JVN#05187780:
Hiki arbitrary file deletion vulnerability
2007/06/21 JVN#90438169:
RaidenHTTPD cross-site scripting vulnerability
2007/06/19 JVN#16535199:
Apache Tomcat Accept-Language Header Cross-Site Scripting Vulnerability
2007/06/18 JVN#27203006:
Internet Explorer vulnerable in MHTML handling
2007/06/18 JVN#95019167:
Internet Explorer vulnerable in handling MHTML protocol
2007/06/15 JVN#64851600:
Apache Tomcat sample web application cross-site scripting vulnerability
2007/06/15 JVN#07100457:
Apache Tomcat cross-site scripting vulnerability
2007/06/14 JVN#63602912:
dotProject cross-site scripting vulnerability
2007/06/07 JVN#23891849:
ADPLAN cross-site scripting vulnerability
2007/06/04 JVN#89497739:
Meneame cross-site scripting vulnerability
2007/06/01 JVN#38605899:
Mozilla Firefox cross-site scripting vulnerability
2007/06/01 JVN#19240523:
HP System Management Homepage cross-site scripting vulnerability
2007/05/18 JVN#92832583:
Advance-Flow cross-site scripting vulnerability
2007/05/16 JVN#81294906:[Critical]
Homepage Builder sample CGI programs vulnerable to OS command injection
2007/05/09 JVN#36628264:
Lunascape RSS reader arbitrary script execution vulnerability
2007/05/08 JVN#44724673:[Critical]
Java Web Start vulnerable to execution of unauthorized system classes
2007/04/19 JVN#06735665:
Canon Network Camera Server VB100 Series vulnerable to cross-site scripting
2007/04/19 JVN#19445002:
APOP password recovery vulnerability
2007/04/17 JVN#91305178:
InfoBarrier4 self-decrypted file vulnerability
2007/04/16 JVN#62334841:
Shihonkanri Plus Ver2 GOOUT directory traversal vulnerability
2007/04/16 JVN#84646028:
open-gorotto cross-site scripting vulnerability
2007/03/30 JVN#40511721:
MailDwarf cross-site scripting vulnerability
2007/03/30 JVN#08951968:
MailDwarf vulnerability allows unauthorized sending of emails
2007/03/30 JVN#62399483:
Overlay Weaver cross-site scripting vulnerability
2007/03/29 JVN#73258608:
CruiseWorks and Minna De Office vulnerable in access restrictions
2007/03/26 JVN#86092776:
BASP21 vulnerable in handling CRFL sequences
2007/03/22 JVN#64227086:
NewsGlue and Ikinari Jijyoutsuu arbitrary script execution vulnerability
2007/03/19 JVN#83832818:
Interstage Application Server cross-site scripting vulnerability
2007/03/16 JVN#19795972:
FENCE-Pro and Systemwalker Desktop Encryption self-decoding file vulnerability
2007/03/13 JVN#91706484:
Trac cross-site scripting vulnerability
2007/03/12 JVN#80126589:
CCC Cleaner division-by-zero vulnerability when scanning UPX-packed executables
2007/02/16 JVN#84746611:
Ariel AirOne series cross-site scripting vulnerability
2007/02/14 JVN#48566866:
ColdFusion error page cross-site scripting vulnerability
2007/02/14 JVN#14243645:
Adobe JRun cross-site scripting vulnerability
2007/02/14 JVN#28356427:
ColdFusion cross-site scripting vulnerability
2007/02/10 JVN#77366274:
CCC Cleaner buffer overflow vulnerability
2007/02/09 JVN#84430861:
Sage vulnerable to arbitrary script execution
2007/01/29 JVN#80271113:
MODx cross-site scripting vulnerability
2007/01/26 JVN#93700808:
Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone
2007/01/26 JVN#64354801:
b2evolution cross-site scripting vulnerability
2007/01/25 JVN#82258242:[Critical]
Shopping Basket Professional vulnerable to OS command injection
2007/01/25 JVN#24879092:
CGI RESCUE WebFORM missing mail content vulnerability
2007/01/25 JVN#05123538:
CGI RESCUE WebFORM vulnerable to cross-site scripting
2007/01/25 JVN#05088443:
CGI RESCUE WebFORM vulnerable to HTTP header injection
2007/01/23 JVN#32985115:
Movable Type cross-site scripting vulnerability
2007/01/22 JVN#07274813:
phpAdsNew cross-site scripting vulnerability
2007/01/18 JVN#95249468:
Fresh Reader RSS feed cross-site scripting vulnerability
2007/01/17 JVN#13939411:
Drupal cross-site scripting vulnerability
2007/01/05 JVN#65500885:
Serene Bach cross-site scripting vulnerability

2006

2006/12/28 JVN#45006961:
Joomla! cross-site scripting vulnerability
2006/12/28 JVN#31185550:
tDiary arbitrary Ruby script execution vulnerability
2006/12/25 JVN#02729869:
pnamazu cross-site scripting vulnerability
2006/12/22 JVN#78520316:
a-blog cross-site scripting vulnerability
2006/12/21 JVN#74079537:
SugarCRM cross-site scripting vulnerability
2006/12/08 JVN#34830904:
Shobo Shobo Nikki System (sns) cross-site scripting vulnerability
2006/12/05 JVN#47272891:
Hanako buffer overflow vulnerability
2006/12/04 JVN#84798830:
Denial of service vulnerability in Ruby CGI library (cgi.rb)
2006/12/04 JVN#38746816:
TikiWiki cross-site scripting vulnerability
2006/11/30 JVN#08494205:
Chama Cargo cross-site scripting vulnerability
2006/11/29 JVN#21125043:
Blogn cross-site scripting vulnerability
2006/11/27 JVN#47223461:
tDiary cross-site scripting vulnerability
2006/11/24 JVN#57280612:
phpComasy cross-site scripting vulnerability
2006/11/20 JVN#46244305:
eyeOS cross-site scripting vulnerability
2006/11/17 JVN#61543834:
EC-CUBE cross-site scripting vulnerability
2006/11/14 JVN#84656399:
Nucleus cross-site scripting vulnerability
2006/11/10 JVN#34522909:
Kahua vulnerable in allowing to share login sessions
2006/11/06 JVN#30994815:
MyODBC Japanese Conversion Edition denial of service vulnerability
2006/11/06 JVN#88325166:
Hyper NIKKI System cross-site scripting vulnerability
2006/10/24 JVN#07235355:
desknet's buffer overflow vulnerability
2006/10/20 JVN#85996645:
NEC MultiWriter 1700C/7500C FTP server vulnerability
2006/10/20 JVN#63999575:
NEC MultiWriter 1700C web server authentication bypass vulnerability
2006/10/18 JVN#90815371:
Ichitaro buffer overflow vulnerability
2006/10/12 JVN#41241092:
Kmail CGI authentication bypass vulnerability
2006/10/02 JVN#93484133:
TeraStation HD-HTGL series cross-site request forgery vulnerability
2006/09/28 JVN#79484135:
Joomla! cross-site scripting vulnerability
2006/09/28 JVN#82240092:
Drupal cross-site scripting vulnerability
2006/09/26 JVN#68295640:
Movable Type vulnerabile to cross-site scripting
2006/09/26 JVN#30144870:
SugarCRM cross-site scripting vulnerability
2006/09/22 JVN#46630603:
MDPro cross-site scripting vulnerability
2006/09/13 JVN#52201480:
Microsoft Windows Indexing Service cross-site scripting vulnerability
2006/08/31 JVN#99776858:
Multiple vulnerabilities in Webmin and Usermin
2006/08/28 JVN#31125599:
Cybozu Office 6 information disclosure vulnerability
2006/08/28 JVN#90420168:
Cybozu products vulnerable to directory traversal
2006/08/23 JVN#11048526:
mail f/w system vulnerable to allow unauthorized email transmissionk
2006/08/16 JVN#39103264:
Owl SQL injection vulnerability
2006/08/16 JVN#01137722:
Owl cross-site scripting vulnerability
2006/08/14 JVN#02091617:
04WebServer cross-site scripting vulnerability
2006/08/14 JVN#27428836:
04WebServer directory traversal vulnerability
2006/08/14 JVN#51301450:
NetCommons cross-site scripting vulnerability
2006/08/10 JVN#62171179:
Kiri directory traversal vulnerability
2006/07/31 JVN#65677118:
Pixelpost cross-site scripting vulnerability
2006/07/28 JVN#27794427:
Dokeos cross-site scripting vulnerability
2006/07/18 JVN#92975133:
Loudblog cross-site scripting vulnerability
2006/07/18 JVN#62307185:
QwikiWiki cross-site scripting vulnerability
2006/07/18 JVN#81108784:
Geeklog cross-site scripting vulnerability
2006/07/12 JVN#76686161:
ServerView cross-site scripting vulnerability
2006/07/12 JVN#73368472:
ServerView directory traversal vulnerability
2006/07/11 JVN#83768862:
Ruby vulnerability caused by a problem with the alias funtion so that safe level 4 does not function as a sandbox
2006/07/11 JVN#13947696:
Ruby contains a vulnerability that prevents safe level 4 from functioning as a sandbox.
2006/07/06 JVN#44846612:
ATutor cross-site scripting vulnerability
2006/07/06 JVN#73705637:
ACollab SQL injection vulnerability
2006/07/03 JVN#98836916:
Wiki clone products vulnerable to denial of service attacks
2006/06/26 JVN#39188922:
dotProject cross-site scripting vulnerability
2006/06/26 JVN#76207423:
Phorum cross-site scripting vulnerability
2006/06/23 JVN#67974490:
Webmin directory traversal vulnerability
2006/06/14 JVN#74969119:
Microsoft Internet Explorer address bar spoofing vulnerability
2006/06/09 JVN#39570254:
CGI RESCUE WebFORM allows unauthorized email transmission
2006/06/05 JVN#97636431:
dotProject cross-site scripting vulnerability
2006/06/02 JVN#28513736:
Mozilla Firefox HTTP 1.0 response smuggling vulnerability
2006/06/02 JVN#62734622:
Mozilla Firefox vulnerable to HTTP response splitting
2006/05/24 JVN#16558862:
RWiki cross-site scripting vulnerability
2006/05/24 JVN#46691257:
RWiki arbitrary Ruby script execution vulnerability
2006/05/22 JVN#55425662:
MyWeb SQL injection vulnerability
2006/05/17 JVN#03D5EAA8:
Sun Java System Web Server cross-site scripting vulnerability
2006/05/09 JVN#84775942:
Multiple email clients vulnerable to directory traversal due to inappropriate unicode handling
2006/04/27 JVN#7F8621DE:
DonutP and UnDonut confirmation dialog display vulnerability
2006/04/26 JVN#72225922:
Apache Struts Validator allows to bypass input data validation
2006/04/21 JVN#74294680:
Winny buffer overflow vulnerability
2006/04/21 JVN#83263796:
SquirrelMail cross-site scripting vulnerability
2006/04/19 JVN#84091359:
Trac cross-site scripting vulnerability
2006/04/17 JVN#35274905:
FreeStyleWiki cross-site scripting vulnerability
2006/04/13 JVN#68630618:
QUICK CART cross-site scripting vulnerability
2006/04/13 JVN#10222000:
QUICK CART OS command injection vulnerability
2006/04/10 JVN#78363061:
CAFEMILK Shopping Cart CGI cross-site scripting vulnerability
2006/03/01 JVN#27365476:
Minnu's filer2 vulnerable in allowing arbitrary Ruby script execution
2006/02/28 JVN#65542239:
Hyper NIKKI System allows unauthorized email submission
2006/02/03 JVN#41550845:
Nagasaki Electronic Prefectural Office System SQL injection vulnerability
2006/02/01 JVN#77886599:
Hatena Toolbar sends URL information unecnrypted
2006/01/31 JVN#89344424:
Multiple email clients vulnerable in handling an attachement inapropriately
2006/01/17 JVN#73133641:
Eudora Japanese version stops working after the application crashes
2006/01/12 JVN#836B21C0:
Nagasaki Electronic Prefectural Office System vulnerable to bypass authentication
2006/01/12 JVN#6CA72ADB:
Nagasaki Electronic Prefectural Office System authentication information vulnerability

2005

2005/12/27 JVN#93004125:
BBSNote cross-site scripting vulnerability
2005/12/20 JVN#87830692:
WebNote Clip vulnerable to OS command injection
2005/12/15 JVN#06045169:
mod_imap cross-site scripting vulnerability
2005/12/14 JVN#28011334:
Opera bookmark function vulnerability
2005/12/13 JVN#15972537:
Fujitsu Java Runtime Environment reflection API vulnerability
2005/12/09 JVN#15243167:
Problem with referer header handling on mobile phone web browsers
2005/12/05 JVN#76357668:
MitakeSearch cross-site scripting vulnerability
2005/12/05 JVN#67001206:
Multiple vulnerabilities in FreeStyleWiki including cross-site scripting
2005/11/16 JVN#30451602:
HTTPD-User-Manage cross-site scripting vulnerability
2005/11/11 JVN#25106961:
Kent Web PostMail vulnerable to third party mail relay
2005/10/28 JVN#18282718:
Hyper Estraier directory traversal/denial of service vulnerability
2005/10/24 JVN#77105349:
XOOPS cross-site scripting vulnerability
2005/10/21 JVN#59130192:
eBASEweb SQL injection vulnerability
2005/10/11 JVN#23632449:
OpenSSL version rollback vulnerability
2005/09/30 JVN#76659792:
WirelessIP5000 has multiple vulnerabilities
2005/09/30 JVN#79314822:
Tomcat vulnerable in request processing
2005/09/29 JVN#31226748:
Vulnerability in multiple web browsers allowing request spoofing attacks
2005/09/22 JVN#79925E6F:
Cross-site scripting vulnerability in the Unicode version of msearch
2005/09/21 JVN#62914675:
Ruby vulnerability allowing to bypass safe level 4 as a sandbox
2005/09/20 JVN#40940493:
Webmin and Usermin authentication bypass vulnerability
2005/09/01 JVN#97422426:
Hyper NIKKI System cross-site request forgery vulnerability
2005/08/29 JVN#42435855:
FreeStyleWiki command injection vulnerability
2005/08/25 JVN#23727054:
Pochy denial-of-service (DoS) vulnerability
2005/08/24 JVN#8778A308:
Common Management Agent 3.x vulnerable to information leakage
2005/08/04 JVN#38138980:
Hiki cross-site scripting vulnerability
2005/07/28 JVN#29273468:
QRcode Perl CGI & PHP script vulnerable to denial of service attack
2005/07/20 JVN#60776919:
tDiary cross-site request forgery vulnerability
2005/07/13 JVN#93926203:
Java Cryptography Extension 1.2.1 (JCE 1.2.1) will no longer function properly after July 28, 2005 due to the expiration of its digital certificate
2005/07/12 JVN#257C6F28:
Vulnerability involving security zone handling in applications using Internet Explorer components
2005/06/10 JVN#7B700088:
SFS cross-site scripting vulnerability
2005/06/06 JVN#0DC004F6:
desknet's cross-site scripting vulnerability
2005/05/26 JVN#FCAD9BD8:
Inappropriate interpretation of mailto URL scheme by mail client software
2005/05/19 JVN#465742E4:
Wiki clone cross-site scripting vulnerability
2005/05/12 JVN#8EDB8A96:
Virus Security heap overflow vulnerability
2005/05/12 JVN#A45697B1:
Virus Security memory leak vulnerability
2005/05/12 JVN#74012178:
Movable Type session management vulnerability
2005/04/25 JVN#AF02FB4B:
nProtect Netizen has multiple vulnerabilities
2005/04/22 JVN#A7DA6818:
WebUD arbitrary program execution vulnerability
2005/04/19 JVN#97757029:
w3ml cross-site scripting vulnerability
2005/04/15 JVN#55023557:
Buffalo router configuration management interface vulnerable to remote access and password leakage
2005/04/14 JVN#9ADCBB12:
Website connection problem when a mobile phone terminal uses specific QR code
2005/04/11 JVN#55F159B6:
ppBlog cross-site scripting vulnerability
2005/03/29 JVN#C45D8EAD:
Norton AntiVirus causes abnormal OS termination when scanning illegal files
2005/03/29 JVN#23D7E89F:
Norton AntiVirus causes abnormal OS termination when a user edits a shared network file
2005/03/18 JVN#1F649902:
McAfee VirusScan Engine buffer overflow vulnerability
2005/03/14 JVN#DD18AD07:
Apache Tomcat denial of service vulnerability
2005/03/08 JVN#8BAAAB4E:
msearch directory traversal vulnerability
2005/02/07 JVN#8F8B1C85:
Cybozu Office browser script execution vulnerability
2005/01/11 JVN#1BF8D7AA:
LDAP server update function vulnerable to buffer overflow