Vulnerability Reports

past 12 months20232022202120202019201820172016201520142013201220112010

2024

2024/10/02 JVNVU#92808077:
Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software
2024/10/01 JVN#72148744:
Apache Tomcat improper handling of TLS handshake process data
2024/09/30 JVNVU#95133448:
Insecure initial password configuration issue in SEIKO EPSON Web Config
2024/09/30 JVN#39280069:
RevoWorks Cloud vulnerable to unintended process execution
2024/09/30 JVN#42445661:
Multiple vulnerabilities in Smart-tab
2024/09/27 JVN#21176842:
MF Teacher Performance Management System vulnerable to cross-site scripting
2024/09/27 JVNVU#91077448:
SNMP service is enabled by default in Sharp NEC Display Solutions projectors
2024/09/24 JVN#57749899:
The installer of e-Tax software(common program) vulnerable to privilege escalation
2024/09/24 JVN#78356367:
Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions
2024/09/24 JVN#81966868:
Multiple vulnerabilities in PLANEX COMMUNICATIONS network devices
2024/09/18 JVNVU#90142679:
Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders
2024/09/18 JVN#19766555:
Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce"
2024/09/18 JVN#42386607:
Assimp vulnerable to heap-based buffer overflow
2024/09/09 JVN#05579230:
Multiple Alps System Integration products and the OEM products vulnerable to cross-site request forgery
2024/09/09 JVN#67456481:
Pgpool-II vulnerable to information disclosure
2024/09/09 JVN#65724976:
WordPress Plugin "Forminator" vulnerable to cross-site scripting
2024/09/09 JVN#81570776:
"@cosme" App fails to restrict custom URL schemes properly
2024/09/06 JVN#32529796:
Multiple products from KINGSOFT JAPAN vulnerable to path traversal
2024/09/06 JVN#49873988:
Secure Boot bypass Vulnerability in PRIMERGY
2024/09/04 JVN#67963942:
WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting
2024/08/30 JVN#29238389:
IPCOM vulnerable to information disclosure
2024/08/30 JVN#25264194:
Multiple vulnerabilities in WordPress plugin "Carousel Slider"
2024/08/30 JVNVU#96959731:
Multiple vulnerabilities in IDEC PLCs
2024/08/30 JVNVU#99905584:
Panasonic Control FPWIN Pro7 vulnerable to stack-based buffer overflow
2024/08/29 JVNVU#96242582:
Multiple vulnerabilities in IDEC Operator Interfaces products
2024/08/29 JVN#08342147:
WindLDR and WindO/I-NV4 store sensitive information in cleartext
2024/08/28 JVNVU#96498690:
xfpt vulnerable to stack-based buffer overflow
2024/08/27 JVN#24885537:
Multiple vulnerabilities in ELECOM wireless LAN routers and access points
2024/08/23 JVN#12824024:
BUFFALO wireless LAN routers and wireless LAN repeaters vulnerable to OS command injection
2024/08/22 JVN#83440451:
Multiple Safie products vulnerable to improper server certificate verification
2024/08/20 JVN#56648919:
"Rakuten Ichiba App" fails to restrict custom URL schemes properly
2024/08/06 JVN#78728294:
Firmware update for RICOH JavaTM Platform resets the TLS configuration
2024/08/06 JVN#29845579:
Cybozu Office vulnerable to bypass browsing restrictions in Custom App
2024/08/05 JVN#70666401:
Multiple vulnerabilities in ZEXELON ZWX-2000CSW2-HN
2024/08/05 JVN#50850706:
Pimax Play and PiTool accept WebSocket connections from unintended endpoints
2024/07/30 JVN#26734798:
FFRI AMC vulnerable to OS command injection
2024/07/30 JVN#26225832:
EC-CUBE plugin (for EC-CUBE 4 series) "EC-CUBE Web API Plugin" vulnerable to stored cross-site scripting
2024/07/30 JVN#48324254:
EC-CUBE 4 Series improper input validation when installing plugins
2024/07/30 JVN#06672778:
Multiple vulnerabilities in ELECOM wireless LAN routers
2024/07/29 JVN#84326763:
Multiple vulnerabilities in SKYSEA Client View
2024/07/29 JVN#16420523:
SDoP vulnerable to stack-based buffer overflow
2024/07/26 JVN#02030803:
ORC vulnerable to stack-based buffer overflow
2024/07/23 JVNVU#98330908:
Multiple products from Check Point Software Technologies vulnerable to information disclosure
2024/07/18 JVN#87710540:
Assimp vulnerable to heap-based buffer overflow
2024/07/16 JVNVU#96424864:
Multiple vulnerabilities in FutureNet NXR series, VXR series and WXR series
2024/07/16 JVN#74825766:
Cybozu Garoon vulnerable to cross-site scripting
2024/07/16 JVN#25583987:
FUJITSU Network Edgiot GW1500 vulnerable to path traversal
2024/07/10 JVN#14294633:
Out-of-bounds write vulnerability in Ricoh MFPs and printers
2024/07/09 JVN#81442045:
Multiple vulnerabilities in multiple Webmin products
2024/07/08 JVN#28515217:
Cleartext transmission issue in TONE store App to TONE store
2024/07/03 JVN#94347255:
JP1/Extensible SNMP Agent fails to restrict access permissions
2024/06/28 JVN#01073312:
"Piccoma" App uses a hard-coded API key for an external service
2024/06/27 JVNVU#99784493:
Multiple TP-Link products vulnerable to OS command injection
2024/06/26 JVN#34977158:
WordPress plugins "WP Tweet Walls" and "Sola Testimonials" vulnerable to cross-site request forgery
2024/06/21 JVNVU#91384468:
LINE client for iOS vulnerable to universal cross-site scripting
2024/06/19 JVNVU#99027428:
Multiple vulnerabilities in multiple Trend Micro products
2024/06/19 JVN#37818611:
"ZOZOTOWN" App for Android fails to restrict custom URL schemes properly
2024/06/19 JVN#60331535:
WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page
2024/06/18 JVN#00442488:
Multiple vulnerabilities in Ricoh Streamline NX PC Client
2024/06/18 JVN#65171386:
Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR
2024/06/14 JVNVU#97136265:
Multiple vulnerabilities in Toshiba Tec and Oki Electric Industry MFPs
2024/06/12 JVN#25594256:
Denial-of-service (DoS) vulnerability in IPCOM WAF function
2024/06/07 JVN#79213252:
WordPress Plugin "Music Store - WordPress eCommerce" vulnerable to SQL injection
2024/06/07 JVN#55045256:
Multiple vulnerabilities in "FreeFrom - the nostr client" App
2024/06/03 JVN#43215077:
Multiple vulnerabilities in UNIVERSAL PASSPORT RX
2024/05/31 JVNVU#93051062:
Multiple vulnerabilities in Sharp and Toshiba Tec MFPs
2024/05/31 JVNVU#94872523:
Seiko Solutions SkyBridge MB-A100/MB-A110 and SkyBridge BASIC MB-A130 vulnerable to OS command injection
2024/05/30 JVN#80506242:
awkblog vulnerable to OS command injection
2024/05/29 JVN#22182715:
Redmine DMSF Plugin vulnerable to path traversal
2024/05/29 JVN#15637138:
EC-Orange vulnerable to authorization bypass
2024/05/28 JVNVU#97214223:
ELECOM wireless LAN routers vulnerable to OS command injection
2024/05/28 JVN#17680667:
Multiple vulnerabilities in Unifier and Unifier Cast
2024/05/28 JVN#71404925:
Multiple vulnerabilities in UTAU
2024/05/27 JVNVU#92504444:
OMRON NJ/NX series vulnerable to insufficient verification of data authenticity
2024/05/24 JVN#56781258:
Splunk Config Explorer vulnerable to cross-site scripting
2024/05/24 JVN#35838128:
WordPress Plugin "WP Booking" vulnerable to cross-site scripting
2024/05/21 JVN#29471697:
Android App "TP-Link Tether" and "TP-Link Tapo" vulnerable to improper server certificate verification
2024/05/17 JVN#85380030:
WordPress Plugin "Download Plugins and Themes from Dashboard" vulnerable to path traversal
2024/05/16 JVNVU#95120091:
Panasonic KW Watcher vulnerable to memory buffer error
2024/05/15 JVNVU#92249385:
Ruijie BCR810W/BCR860 vulnerable to OS command injection
2024/05/15 JVNVU#95350607:
Multiple vulnerabilities in Field Logic DataCube
2024/05/13 JVN#28869536:
Multiple vulnerabilities in Cybozu Garoon
2024/05/10 JVNVU#99669446:
Central Dogma vulnerable to cross-site scripting
2024/05/10 JVN#83405304:
"OfferBox" App uses a hard-coded secret key
2024/05/10 JVN#61054671:
Phormer vulnerable to cross-site scripting
2024/05/09 JVN#97751842:
Multiple vulnerabilities in MosP kintai kanri
2024/05/08 JVN#87694318:
WordPress Plugin "Heateor Social Login WordPress" vulnerable to cross-site scripting
2024/05/07 JVNVU#97614828:
Trend Micro Maximum Security vulnerable to improper link resolution (CVE-2024-32849)
2024/04/24 JVNVU#91883072:
NETGEAR routers vulnerable to buffer overflow
2024/04/24 JVN#62737544:
Multiple vulnerabilities in RoamWiFi R10
2024/04/23 JVNTA#90371415:
Multiple third-party kernel drivers for Windows vulnerable to improper access control on IOCTL
2024/04/23 JVN#40079147:[Unreachable]
TvRock vulnerable to denial-of-service (DoS)
2024/04/23 JVN#24683352:[Unreachable]
TvRock vulnerable to cross-site request forgery
2024/04/22 JVNVU#98274902:
Multiple vulnerabilities in OMRON Sysmac Studio/CX-One and CX-Programmer
2024/04/19 JVNVU#91216202:
Armeria-saml improperly handles SAML messages
2024/04/19 JVNVU#91696361:
LINE client for iOS vulnerable to improper server certificate verification
2024/04/18 JVN#50132400:
Multiple vulnerabilities in WordPress Plugin "Forminator"
2024/04/16 JVN#23835228:
Proscend Communications M330-W and M330-W5 vulnerable to OS command injection
2024/04/15 JVN#58236836:
Multiple vulnerabilities in BUFFALO wireless LAN routers
2024/04/10 JVN#70977403:
Multiple vulnerabilities in a-blog cms
2024/04/08 JVN#50361500:
Multiple vulnerabilities in WordPress Plugin "Ninja Forms"
2024/04/05 JVN#82074338:
Multiple vulnerabilities in NEC Aterm series
2024/04/04 JVNVU#94016877:
Multiple vulnerabilities in Cente middleware
2024/04/04 JVNVU#91975826:
Multiple vulnerabilities in PLANEX COMMUNICATIONS wireless LAN router MZK-MF300N
2024/04/01 JVNVU#99285099:
FURUNO SYSTEMS Managed Switch ACERA 9010 running in non MS mode with the initial configuration has no password
2024/03/29 JVNVU#92825069:
KEYENCE VT STUDIO may insecurely load Dynamic Link Libraries
2024/03/29 JVNVU#95439120:
Multiple vulnerabilities in KEYENCE KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12
2024/03/29 JVN#23528780:
"Yahoo! JAPAN" App vulnerable to cross-site scripting
2024/03/27 JVNVU#93932313:
SEEnergy SVR-116 vulnerable to OS command injection
2024/03/27 JVN#40367518:
SonicDICOM Media Viewer may insecurely load Dynamic Link Libraries
2024/03/27 JVN#51098626:
Multiple vulnerabilities in WordPress Plugin "Survey Maker"
2024/03/26 JVNVU#95381465:
Multiple vulnerabilities in ELECOM wireless LAN routers
2024/03/25 JVN#46874970:[Unreachable]
0ch BBS Script (0ch) vulnerable to cross-site scripting
2024/03/25 JVN#17176449:[Unreachable]
ffBull vulnerable to OS command injection
2024/03/25 JVN#40523785:[Unreachable]
Mini Thread vulnerable to cross-site scripting
2024/03/25 JVN#22376992:[Unreachable]
WebProxy vulnerable to OS command injection
2024/03/25 JVN#69107517:[Unreachable]
TvRock vulnerable to cross-site scripting
2024/03/25 JVN#13113728:[Unreachable]
"EasyRange" may insecurely load executable files
2024/03/25 JVN#86206017:
WordPress Plugin "easy-popup-show" vulnerable to cross-site request forgery
2024/03/22 JVNVU#93546510:
Multiple vulnerabilities in home gateway HGW BL1500HM
2024/03/22 JVNVU#90953541:
BUFFALO LinkStation 200 series vulnerable to arbitrary code execution
2024/03/21 JVNVU#90671953:
Sangoma Technologies CG/MG family driver cg6kwin2k.sys vulnerable to insufficient access control on its IOCTL
2024/03/18 JVN#94521208:
Multiple vulnerabilities in FitNesse
2024/03/15 JVN#70640802:
"ABEMA" App for Android fails to restrict access permissions
2024/03/08 JVN#48443978:
a-blog cms vulnerable to directory traversal
2024/03/07 JVN#54451757:
Multiple vulnerabilities in SKYSEA Client View
2024/03/07 JVNVU#95852116:
OMRON NJ/NX series vulnerable to path traversal
2024/03/06 JVN#34328023:
FUJIFILM Business Innovation Corp. printers vulnerable to cross-site request forgery
2024/03/06 JVN#82749078:
Multiple vulnerabilities in printers and scanners which implement BROTHER Web Based Management
2024/03/06 JVN#52919306:
Toyoko Inn official App vulnerable to improper server certificate verification
2024/02/29 JVN#35928117:
Protection mechanism failure in RevoWorks
2024/02/29 JVN#77203800:
OET-213H-BTS1 missing authorization check in the initial configuration
2024/02/29 JVN#78084105:
OpenPNE plugin "opTimelinePlugin" vulnerable to cross-site scripting
2024/02/27 JVN#73283159:
Multiple vulnerabilities in baserCMS
2024/02/21 JVNVU#93534773:
Multiple vulnerabilities in multiple Trend Micro products
2024/02/21 JVNVU#96033712:
Multiple vulnerabilities in Trend Micro Apex Central
2024/02/20 JVNVU#99444194:
ELECOM wireless LAN routers vulnerable to OS command injection
2024/02/20 JVN#44166658:
Multiple vulnerabilities in ELECOM wireless LAN routers and wireless LAN repeater
2024/02/15 JVN#48966481:
a-blog cms vulnerable to URL spoofing
2024/02/14 JVNVU#93381734:
Android App "Mopria Print Service" vulnerable to improper intent handling
2024/02/07 JVN#44033918:
Zeroshell vulnerable to OS command injection
2024/02/06 JVN#18743512:
Cybozu KUNAI for Android vulnerable to denial-of-service (DoS)
2024/02/06 JVNVU#90033405:
Multiple out-of-bounds write vulnerabilities in Canon Office/Small Office Multifunction Printers and Laser Printers
2024/02/05 JVNVU#97836276:
Sharp NEC Display Solutions' public displays vulnerable to local file inclusion
2024/02/02 JVNVU#93740658:
Multiple buffer overflow vulnerabilities in HOME SPOT CUBE2
2024/02/02 JVNVU#99844997:
Incorrect permission assignment vulnerability in Trend Micro uiAirSupport
2024/02/01 JVN#63567545:
Group Office vulnerable to cross-site scripting
2024/02/01 JVN#41129639:
Payment EX vulnerable to information disclosure
2024/01/30 JVNVU#94591337:
Multiple vulnerabilities in SHARP Energy Management Controller with Cloud Services
2024/01/24 JVN#70818619:
"Mercari" App for Android fails to restrict custom URL schemes properly
2024/01/24 JVN#93541851:
Oracle WebLogic Server vulnerable to HTTP header injection
2024/01/23 JVN#96154238:
Android App "Spoon" uses a hard-coded API key for an external service
2024/01/23 JVN#77736613:
Improper restriction of XML external entity references (XXE) in MLIT "Electronic Delivery Check System" and "Electronic delivery item Inspection Support System"
2024/01/23 JVN#01434915:
Improper restriction of XML external entity references (XXE) in "Electronic Delivery Check System (Ministry of Agriculture, Forestry and Fisheries The Agriculture and Rural Development Project Version)"
2024/01/23 JVN#40049211:
Improper restriction of XML external entity references (XXE) in Electronic Deliverables Creation Support Tool provided by Ministry of Defense
2024/01/23 JVNVU#90908488:
ELECOM wireless LAN routers vulnerable to OS command injection
2024/01/23 JVNVU#99896362:
Yamaha wireless LAN access point devices vulnerable to active debug code
2024/01/22 JVN#73587943:
Access analysis CGI An-Analyzer vulnerable to open redirect
2024/01/22 JVN#34565930:
Multiple vulnerabilities in a-blog cms
2024/01/19 JVN#67215338:
FusionPBX vulnerable to cross-site scripting
2024/01/18 JVN#83655695:
Multiple Dahua Technology products vulnerable to authentication bypass
2024/01/16 JVN#63383723:
Drupal vulnerable to improper handling of structural elements
2024/01/15 JVN#51135247:
Pleasanter vulnerable to cross-site scripting
2024/01/15 JVN#96240417:
Thermal camera TMC series vulnerable to insufficient technical documentation
2024/01/12 JVN#37326856:
Improper input validation vulnerability in WordPress Plugin "WordPress Quiz Maker Plugin"
2024/01/09 JVNVU#92102247:
Multiple vulnerabilities in Panasonic Control FPWIN Pro7
2024/01/09 JVNVU#91401812:
Multiple TP-Link products vulnerable to OS command injection

2023

2023/12/26 JVN#32646742:
Multiple vulnerabilities in PowerCMS
2023/12/26 JVN#23771490:
Multiple vulnerabilities in BUFFALO VR-S1000
2023/12/22 JVNVU#97943829:
Brother iPrint&Scan Desktop for Windows vulnerable to improper link resolution before file access
2023/12/14 JVNVU#97876221:
WordPress plugin "MW WP Form" vulnerable to arbitrary file upload
2023/12/13 JVN#18715935:
Multiple vulnerabilities in GROWI
2023/12/12 JVNVU#97499577:
ELECOM wireless LAN routers vulnerable to OS command injection
2023/12/11 JVN#34145838:
Multiple denial-of-service (DoS) vulnerabilities in JTEKT ELECTRONICS HMI GC-A2 series
2023/12/08 JVNVU#98954443:
Multiple vulnerabilities in Edgecross Basic Software for Windows
2023/12/06 JVNVU#92152057:[Critical]
FXC wireless LAN routers "AE1021PE" and "AE1021" vulnerable to OS command injection
2023/12/04 JVN#46895889:
RakRak Document Plus vulnerable to path traversal
2023/12/01 JVN#45891816:
Ruckus Access Point vulnerable to cross-site scripting
2023/11/20 JVN#15005948:
Multiple vulnerabilities in LuxCal Web Calendar
2023/11/17 JVNVU#98954968:
Multiple vulnerabilities in EXPRESSCLUSTER X
2023/11/17 JVN#22220399:
Multiple vulnerabilities in CubeCart
2023/11/17 JVN#13618065:
Redmine vulnerable to cross-site scripting
2023/11/16 JVNVU#99077347:
Multiple vulnerabilities in First Corporation's DVRs
2023/11/15 JVNVU#96079387:
ASUSTeK COMPUTER RT-AC87U vulnerable to improper access control
2023/11/14 JVNVU#94119876:
Multiple vulnerabilities in ELECOM and LOGITEC routers
2023/11/14 JVN#67822421:
OSS Calendar vulnerable to SQL injection
2023/11/13 JVN#96209256:
Multiple vulnerabilities in Pleasanter
2023/11/13 JVN#17806703:
Multiple vulnerabilities in Cisco Firepower Management Center Software
2023/11/10 JVNVU#98040889:
Multiple security updates for Trend Micro Apex One and Apex One as a Service (November 2023)
2023/11/10 JVNVU#93840158:
Multiple vulnerabilities in FUJI ELECTRIC products
2023/11/10 JVN#99177549:
HOTELDRUID vulnerable to cross-site scripting
2023/11/10 JVN#86156389:
Remarshal unlimitedly expanding YAML alias nodes
2023/11/07 JVN#29195731:
EC-CUBE 3 series and 4 series vulnerable to arbitrary code execution
2023/11/02 JVN#14762986:
Improper restriction of XML external entity references (XXE) in e-Tax software
2023/11/01 JVNVU#96482726:
FUJIFILM Business Innovation Corp. and Xerox Corporation MFPs export Address Books with insufficient encryption strength
2023/10/31 JVN#94132951:
Cybozu Remote Service vulnerable to uncontrolled resource consumption
2023/10/31 JVNVU#99565391:
MCL Technologies MCL-Net vulnerable to directory traversal
2023/10/30 JVN#48057522:
Inkdrop vulnerable to code injection
2023/10/27 JVN#45547161:
Multiple vulnerabilities in baserCMS
2023/10/26 JVNVU#97149791:
Advanced Micro Devices Windows kernel drivers vulnerable to insufficient access control on its IOCTL
2023/10/25 JVN#39139884:
Movable Type vulnerable to cross-site scripting
2023/10/23 JVNVU#98683567:
Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Designer
2023/10/23 JVN#02058996:
HP ThinUpdate vulnerable to improper server certificate verification
2023/10/19 JVN#28846531:
Multiple vulnerabilities in JustSystems products
2023/10/18 JVN#95981460:[Critical]
Improper restriction of XML external entity references (XXE) in Proself
2023/10/17 JVNVU#98392064:
Multiple vulnerabilities in JTEKT ELECTRONICS OnSinView2
2023/10/16 JVN#80476432:
web2py vulnerable to OS command injection
2023/10/16 JVN#58574030:
Scanning evasion issue in Cisco Secure Email Gateway
2023/10/10 JVNVU#94752076:
Out-of-bounds read vulnerability in Keyence KV STUDIO and KV REPLAY VIEWER
2023/10/10 JVNVU#99039725:
Multiple vulnerabilities in Micro Research MR-GM series
2023/10/06 JVN#15808274:
e-Gov Client Application fails to restrict custom URL schemes properly
2023/10/04 JVN#08237727:
Citadel WebCit vulnerable to cross-site scripting on Instant Messaging facility
2023/10/02 JVNVU#94497038:
Multiple vulnerabilities in multiple FURUNO SYSTEMS wireless LAN access point devices in ST(Standalone) mode
2023/10/02 JVN#39596244:
Improper restriction of XML external entity references (XXE) in FD Application
2023/09/27 JVN#17434995:
Shihonkanri Plus vulnerable to relative path traversal
2023/09/26 JVNVU#95549489:
Multiple vulnerabilities in Panasonic KW Watcher
2023/09/25 JVNVU#95732401:
Trend Micro Mobile Security vulnerable to cross-site scripting
2023/09/22 JVN#97197972:
Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce"
2023/09/19 JVNVU#90967486:[Critical]
Trend Micro Endpoint security products for enterprises vulnerable to arbitrary code execution
2023/09/12 JVNVU#95282683:
Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software
2023/09/11 JVN#41113329:
Pyramid vulnerable to directory traversal
2023/09/06 JVN#42691027:
"direct" Desktop App for macOS fails to restrict access permissions
2023/09/05 JVN#78113802:
Multiple vulnerabilities in F-RevoCRM
2023/09/05 JVN#92720882:
Multiple vulnerabilities in CGIs of PMailServer and PMailServer2
2023/09/04 JVN#82758000:
Multiple vulnerabilities in SHIRASAGI
2023/08/31 JVN#60140221:
Multiple vulnerabilities in i-PRO VI Web Client
2023/08/28 JVNVU#93886750:
Phoenix Technologies Windows kernel driver vulnerable to insufficient access control on its IOCTL
2023/08/24 JVN#86484824:
SYNCK GRAPHICA Mailform Pro CGI vulnerable to Regular expression Denial-of-Service (ReDoS)
2023/08/24 JVN#03447226:
"Skylark" App fails to restrict custom URL schemes properly
2023/08/23 JVN#55217369:
Rakuten WiFi Pocket vulnerable to improper authentication
2023/08/21 JVNVU#96622721:
Multiple vulnerabilities in Panasonic Control FPWIN Pro7
2023/08/21 JVN#98946408:
WordPress Plugin "Advanced Custom Fields" vulnerable to cross-site scripting
2023/08/21 JVN#04876736:
Multiple vulnerabilities in LuxCal Web Calendar
2023/08/21 JVNVU#99392903:
Multiple vulnerabilities in TP-Link products
2023/08/21 JVNVU#92545432:
Multiple vulnerabilities in CBC digital video recorders
2023/08/18 JVN#19661362:[Critical]
Multiple vulnerabilities in Proself
2023/08/17 JVN#46993816:
EC-CUBE 2 series vulnerable to cross-site scripting
2023/08/10 JVNVU#91630351:
Multiple vulnerabilities in ELECOM and LOGITEC network devices
2023/08/09 JVNVU#98367862:
Multiple server-side request forgery vulnerabilities in Trend Micro Apex Central (July 2023)
2023/08/09 JVN#84820712:
"Rikunabi NEXT" App for Android fails to restrict custom URL schemes properly
2023/08/07 JVN#42527152:
"FFRI yarai" and "FFRI yarai Home and Business Edition" handle exceptional conditions improperly
2023/08/07 JVN#83334799:
Multiple vulnerabilities in Special Interest Group Network for Analysis and Liaison's API
2023/08/04 JVN#38847224:
Fujitsu Software Infrastructure Manager (ISM) stores sensitive information in cleartext
2023/08/02 JVN#61337171:
SEIKO EPSON printer Web Config vulnerable to denial-of-service (DoS)
2023/08/01 JVNVU#92193064:
OMRON CJ series and CS/CJ Series EtherNet/IT unit vulnerable to Denial-of-Service (DoS)
2023/08/01 JVNVU#93286117:
Multiple vulnerabilities in OMRON CX-Programmer
2023/07/27 JVNVU#98785541:
Multiple vulnerabilities in Command Center RX (CCRX) of Kyocera Document Solutions MFPs and printers
2023/07/26 JVN#95727578:
Fujitsu Real-time Video Transmission Gear "IP series" uses a hard-coded credentials
2023/07/26 JVNVU#96643580:
Fujitsu network devices Si-R series and SR-M series vulnerable to authentication bypass
2023/07/24 JVN#37857022:
Improper restriction of XML external entity references (XXE) in Applicant Programme
2023/07/24 JVNVU#93384719:
Trend Micro Maximum Security vulnerable to privilege escalation
2023/07/21 JVN#35897618:[Critical]
GBrowse vulnerable to unrestricted upload of files with dangerous types
2023/07/20 JVN#90560760:
Multiple vulnerabilities in WordPress Plugin "TS Webfonts for SAKURA"
2023/07/18 JVN#44726469:
Improper restriction of XML external entity references (XXE) in XBRL data create application
2023/07/11 JVNVU#91850798:
Multiple vulnerabilities in ELECOM and LOGITEC wireless LAN routers
2023/07/11 JVN#05223215:
Multiple vulnerabilities in multiple ELECOM wireless LAN routers and wireless LAN repeaters
2023/07/03 JVN#64316789:
Multiple vulnerabilities in SoftEther VPN and PacketiX VPN
2023/06/30 JVN#32739265:
"NewsPicks" App uses a hard-coded API key for an external service
2023/06/29 JVNVU#93767756:
Null pointer dereference vulnerability in multiple printers and MFPs which implement BROTHER debut web server
2023/06/27 JVN#97127032:
WordPress Plugin "Snow Monkey Forms" vulnerable to directory traversal
2023/06/27 JVN#78634340:
Multiple vulnerabilities in WAVLINK WL-WN531AX2
2023/06/27 JVN#38343415:
Multiple vulnerabilities in Aterm series
2023/06/22 JVN#97818024:
Multiple vulnerabilities in Pleasanter
2023/06/20 JVN#70502982:
SYNCK GRAPHICA Mailform Pro CGI vulnerable to Regular expression Denial-of-Service (ReDoS)
2023/06/16 JVN#19748237:
Multiple vulnerabilities in Panasonic AiSEG2
2023/06/14 JVNVU#92207133:
Printer Driver Packager NX creates driver installation packages without modification detection
2023/06/13 JVNVU#91852506:
Security updates for multiple Trend Micro products for enterprises (June 2023)
2023/06/13 JVN#96828492:
Chatwork Desktop Application (Mac) vulnerable to code injection
2023/06/12 JVN#36060509:
"WPS Office" vulnerable to OS command injection
2023/06/09 JVN#34232595:
ASUS Router RT-AX3000 vulnerable to using sensitive cookies without 'Secure' attribute
2023/06/09 JVN#28412757:
Multiple vulnerabilities in Inaba Denki Sangyo Wi-Fi AP UNIT
2023/06/08 JVNVU#98818508:
Multiple vulnerabilities in Fuji Electric products
2023/06/06 JVNVU#90812349:
Multiple vulnerabilities in KbDevice digital video recorders
2023/06/02 JVNVU#97809354:
Multiple vulnerabilities in FUJI ELECTRIC FRENIC RHC Loader
2023/06/01 JVN#33836375:
"Jiyu Kukan Toku-Toku coupon" App vulnerable to improper server certificate verification
2023/05/31 JVNVU#93372935:
Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS)
2023/05/31 JVN#62111727:
Pleasanter vulnerable to cross-site scripting
2023/05/31 JVN#38222042:
DataSpider Servista uses a hard-coded cryptographic key
2023/05/30 JVN#95981715:
Starlette vulnerable to directory traversal
2023/05/26 JVN#19243534:
ESS REC Agent Server Edition for Linux etc. vulnerable to directory traversal
2023/05/25 JVN#90278893:
Wacom Tablet Driver installer for macOS vulnerable to improper link resolution before file access
2023/05/24 JVNVU#94777298:
Multiple vulnerabilities in Canon Office/Small Office Multifunction Printers, Laser Printers and Inkjet Printers
2023/05/22 JVN#45127776:
Tornado vulnerable to open redirect
2023/05/19 JVN#14778242:
Multiple vulnerabilities in T&D and ESPEC MIC data logger products
2023/05/18 JVNVU#97891206:
Android App "Brother iPrint&Scan" vulnerable to improper access control
2023/05/18 JVN#48687031:
Qrio Smart Lock Q-SL2 vulnerable to authentication bypass by capture-replay
2023/05/16 JVNVU#98968780:
OS command injection vulnerability in Inaba Denki Sangyo Wi-Fi AP UNIT
2023/05/15 JVN#41694426:
Multiple vulnerabilities in Cybozu Garoon
2023/05/15 JVN#01093915:
Multiple vulnerabilities in WordPress Plugin "MW WP Form" and "Snow Monkey Forms"
2023/05/12 JVN#11705010:
Beekeeper Studio vulnerable to code injection
2023/05/10 JVN#31701509:
Multiple vulnerabilities in MicroEngine Mailform
2023/05/09 JVN#59341308:
WordPress Plugin "Newsletter" vulnerable to cross-site scripting
2023/05/09 JVN#95792402:
WordPress Plugin "VK Blocks" and "VK All in One Expansion Unit" vulnerable to cross-site scripting
2023/05/09 JVN#80476232:
SR-7100VN vulnerable to privilege escalation
2023/05/08 JVN#13306058:
JINS MEME CORE uses a hard-coded cryptographic key
2023/05/08 JVN#01937209:
LINE WORKS Drive Explorer vulnerable to code injection
2023/05/08 JVNVU#92106300:
Multiple vulnerabilities in SolarView Compact
2023/04/24 JVNVU#97372625:
Heap-based buffer overflow vulnerability in OMRON CX-Drive
2023/04/24 JVN#00971105:
WordPress Plugin "Appointment and Event Booking Calendar for WordPress - Amelia" vulnerable to cross-site scripting
2023/04/19 JVN#73178249:
Improper restriction of XML external entity references (XXE) in Shinseiyo Sogo Soft
2023/04/19 JVN#99657911:
WordPress plugin "LIQUID SPEECH BALLOON” vulnerable to cross-site request forgery
2023/04/19 JVN#50862842:
EC-CUBE plugin "NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series)" vulnerable to authentication bypass
2023/04/17 JVNTA#91513661:
Security Issues in FINS protocol
2023/04/17 JVN#14492006:
API server of TONE Family vulnerable to authentication bypass using an alternate path
2023/04/17 JVN#87559956:
Joruri Gw vulnerable to cross-site scripting
2023/04/14 JVN#36340790:
JB Inquiry form vulnerable to exposure of private personal information to an unauthorized actor
2023/04/14 JVN#76257155:
Trend Micro Security may insecurely load Dynamic Link Libraries
2023/04/11 JVNVU#98434809:
Multiple mobile printing apps for Android vulnerable to improper intent handling
2023/04/05 JVNVU#98775218:
Yokogawa Electric CENTUM series vulnerable to cleartext storage of sensitive information
2023/04/04 JVN#79149117:
Multiple vulnerabilities in JustSystems products
2023/04/04 JVN#75742861:
Improper restriction of XML external entity references (XXE) in National land numerical information data conversion tool
2023/03/31 JVNVU#92145493:
CONPROSYS HMI System(CHS) vulnerable to SQL injection
2023/03/31 JVNVU#99710864:
JTEKT ELECTRONIC Screen Creator Advance 2 vulnerable to improper restriction of operations within the bounds of a memory buffer
2023/03/31 JVN#38170084:
HAProxy vulnerable to HTTP request/response smuggling
2023/03/31 JVN#40604023:[Critical]
Multiple vulnerabilities in Seiko Solutions SkyBridge MB-A100/A110/A200/A130 SkySpider MB-R210
2023/03/27 JVN#61105618:
baserCMS vulnerable to arbitrary file uploads
2023/03/24 JVN#35246979:
ELECOM WAB-MAT registers its windows service executable with an unquoted file path
2023/03/17 JVN#62420378:
TP-Link T2600G-28SQ uses vulnerable SSH host keys
2023/03/17 JVNVU#96198617:
Multiple vulnerabilities in Contec CONPROSYS IoT Gateway products
2023/03/13 JVN#64453490:
Android App "Wolt Delivery: Food and more" uses a hard-coded API key for an external service
2023/03/08 JVN#82424996:
Multiple vulnerabilities in SEIKO EPSON printers/network interface Web Config
2023/03/07 JVNVU#96824262:
Multiple vulnerabilities in Buffalo network devices
2023/03/06 JVN#19872280:
Multiple vulnerabilities in PostgreSQL extension module pg_ivm
2023/03/03 JVNVU#94966432:
Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software
2023/03/02 JVNVU#96890975:
Multiple vulnerabilities in Edgecross Basic Software for Windows
2023/03/01 JVNVU#96882769:
Multiple vulnerabilities in Trend Micro Maximum Security
2023/03/01 JVNVU#96221942:
Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service
2023/03/01 JVN#57224029:
Multiple vulnerabilities in SS1 and Rakuraku PC Cloud
2023/02/28 JVN#04785663:
Multiple cross-site scripting vulnerabilities in EC-CUBE
2023/02/28 JVN#78253670:
web2py development tool vulnerable to open redirect
2023/02/27 JVNTA#96606604:
Security Problem in Web Browser Permission Mechanism
2023/02/22 JVN#18765463:
Multiple cross-site scripting vulnerabilities in SHIRASAGI
2023/02/17 JVNVU#91848962:
Multiple vulnerabilities in Trend Micro Worry-Free Business Security and Worry-Free Business Security Services
2023/02/14 JVN#00712821:
Improper restriction of XML external entity reference (XXE) vulnerability in tsClinical Define.xml Generator and tsClinical Metadata Desktop Tools
2023/02/14 JVN#60263237:
The installers of ELECOM Camera Assistant and QuickFileDealer may insecurely load Dynamic Link Libraries
2023/02/13 JVN#98612206:
Multiple vulnerabilities in PLANEX COMMUNICATIONS Network Camera CS-WMV02G
2023/02/10 JVN#60320736:
NEC PC Settings Tool vulnerable to missing authentication for critical function
2023/02/10 JVNVU#99551468:
Zuken Elmic KASAGO uses insufficient random values for TCP Initial Sequence Numbers
2023/02/06 JVN#11257333:
Ichiran App vulnerable to improper server certificate verification
2023/02/03 JVNVU#98917488:
Multiple vulnerabilities in JTEKT ELECTRONICS Screen Creator Advance 2
2023/01/31 JVN#22830348:
Vulnerability in Driver Distributor where passwords are stored in a recoverable format
2023/01/31 JVN#84642320:
SUSHIRO App for Android outputs sensitive information to the log file
2023/01/24 JVNVU#94200979:
Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Motion Pro
2023/01/24 JVN#01398015:
pgAdmin 4 vulnerable to directory traversal
2023/01/24 JVN#05288621:
EasyMail vulnerable to cross-site scripting
2023/01/23 JVN#72418815:
Pgpool-II vulnerable to information disclosure
2023/01/23 JVNVU#97195023:
Contec CONPROSYS HMI System (CHS) vulnerable to multiple SQL injections
2023/01/17 JVN#31073333:
WordPress plugin "Welcart e-Commerce" vulnerable to directory traversal
2023/01/12 JVN#57296685:
Multiple vulnerabilities in PIXELA PIX-RT100
2023/01/11 JVN#99957889:
Multiple vulnerabilities in MAHO-PBX NetDevancer series
2023/01/11 JVNVU#93704047:
Multiple vulnerabilities in EXPRESSCLUSTER X
2023/01/11 JVNVU#91744508:
Access of uninitialized pointer vulnerability in OMRON CX-Motion-MCH
2023/01/11 JVNVU#97575890:
Active debug code vulnerability in OMRON CP1L-EL20DR-D
2023/01/11 JVN#03832974:
pgAdmin 4 vulnerable to open redirect
2023/01/11 JVN#78481846:
TP-Link SG105PE vulnerable to authentication bypass
2023/01/10 JVNVU#91740661:
OpenAM Web Policy Agent (OpenAM Consortium Edition) vulnerable to path traversal
2023/01/06 JVN#55675303:
Digital Arts m-FILTER vulnerable to improper authentication
2023/01/05 JVN#16765254:
Multiple code injection vulnerabilities in ruby-git

2022

2022/12/28 JVNVU#90679513:
Multiple vulnerabilities in Fuji Electric V-SFT and TELLUS
2022/12/28 JVNVU#92811888:
Multiple vulnerabilities in Fuji Electric V-Server
2022/12/23 JVNVU#96679793:
Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service
2022/12/21 JVN#29902403:
Installers generated by Squirrel.Windows may insecurely load Dynamic Link Libraries
2022/12/21 JVN#43561812:
+Message App improper handling of Unicode control characters
2022/12/19 JVNVU#92689335:
Use-after-free vulnerability in Omron CX-Drive
2022/12/19 JVN#06093462:
Zenphoto vulnerable to cross-site scripting
2022/12/19 JVN#13075438:
Corel Roxio Creator LJB starts a program with an unquoted file path
2022/12/15 JVNVU#96195138:
Command injection vulnerability in SHARP Multifunctional Products (MFP)
2022/12/15 JVN#96321933:
Multiple vulnerabilities in DENSHI NYUSATSU CORE SYSTEM
2022/12/14 JVNVU#96873821:
Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS)
2022/12/13 JVN#60211811:
Redmine vulnerable to cross-site scripting
2022/12/09 JVNVU#97099584:
Multiple vulnerabilities in Buffalo network devices
2022/12/05 JVNVU#93526386:
Contec SolarView Compact vulnerable to cross-site scripting
2022/12/01 JVNVU#94514762:
Multiple vulnerabilities in UNIMO Technology digital video recorders
2022/11/25 JVNVU#92877622:
Multiple vulnerabilities in OMRON CX-Programmer
2022/11/25 JVN#87895771:
Cybozu Remote Service vulnerable to Uncontrolled Resource Consumption
2022/11/25 JVN#53682526:
Multiple cross-site scripting vulnerabilities in baserCMS
2022/11/24 JVN#29657972:
TP-Link RE300 V1 tdpServer vulnerable to improper processing of its input
2022/11/21 JVN#26044739:
Typora fails to properly neutralize JavaScript code
2022/11/18 JVN#13927745:
WordPress Plugin "WordPress Popular Posts" accepts untrusted external inputs to update certain internal variables
2022/11/18 JVNVU#90082799:
Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service
2022/11/16 JVN#24659622:
RICOH Aficio SP 4210N vulnerable to cross-site scripting
2022/11/16 JVN#37014768:
Multiple vulnerabilities in Movable Type
2022/11/15 JVNVU#98082029:
Realtek chip deadlock vulnerability (CVE-2022-34326) in Mitsubishi Electric consumer electronics products
2022/11/14 JVN#54728399:
TERASOLUNA Global Framework and TERASOLUNA Server Framework for Java (Rich) vulnerable to ClassLoader manipulation
2022/11/14 JVNVU#97968855:
Multiple vulnerabilities in Hitachi Kokusai Network products for monitoring system(Camera, Encoder, Decoder)
2022/11/10 JVN#75437943:
Aiphone Video Multi-Tenant System Entrance Stations vulnerable to information disclosure
2022/11/08 JVN#59663854:
WordPress Plugin "Salon booking system" vulnerable to cross-site scripting
2022/11/08 JVN#09409909:
Multiple vulnerabilities in WordPress
2022/11/01 JVN#46345126:
Multiple vulnerabilities in the web interfaces of Kyocera Document Solutions MFPs and printers
2022/10/28 JVN#74285622:
Multiple vulnerabilities in FUJI SOFT network devices
2022/10/25 JVN#86350682:
Multiple vulnerabilities in SHIRASAGI
2022/10/20 JVN#56968681:
Multiple vulnerabilities in nadesiko3
2022/10/19 JVNVU#97131578:
Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service
2022/10/19 JVN#10921428:
Lemon8 App fails to restrict access permissions
2022/10/18 JVNVU#99955870:
Stack-based buffer overflow vulnerability in Yokogawa Test & Measurement WTViewerE
2022/10/14 JVN#74534998:
Android App "IIJ SmartKey" vulnerable to information disclosure
2022/10/12 JVNVU#93424017:
Multiple vulnerabilities in SVMPC1 and SVMPC2
2022/10/11 JVN#74592196:[Critical]
bingo!CMS vulnerable to authentication bypass
2022/10/11 JVN#40620121:
The installer of Sony Content Transfer may insecurely load Dynamic Link Libraries
2022/10/07 JVNVU#99960963:
Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security agents for Windows
2022/10/07 JVN#00845253:
Growi vulnerable to improper access control
2022/10/06 JVN#15411362:
IPFire WebUI vulnerable to cross-site scripting
2022/10/04 JVNVU#92805279:
Multiple vulnerabilities in Buffalo network devices
2022/09/30 JVN#78862034:
BookStack vulnerable to cross-site scripting
2022/09/15 JVN#21213852:
Multiple vulnerabilities in EC-CUBE
2022/09/15 JVN#30900552:
EC-CUBE plugin "Product Image Bulk Upload Plugin" vulnerable to insufficient verification in uploading files
2022/09/15 JVNVU#99326969:
OpenAM (OpenAM Consortium Edition) vulnerable to open redirect
2022/09/14 JVN#36454862:[Critical]
Multiple vulnerabilities in Trend Micro Apex One and Trend Micro Apex One as a Service
2022/09/09 JVN#48120704:
Movable Type plugin A-Form vulnerable to cross-site scripting
2022/09/05 JVN#34205166:
SYNCK GRAPHICA Mailform Pro CGI vulnerable to information disclosure
2022/09/02 JVN#76024879:
PowerCMS XMLRPC API vulnerable to command injection
2022/09/01 JVNVU#98305100:
Multiple vulnerabilities in Contec FLEXLAN FX3000 and FX2000 series
2022/08/31 JVNVU#90766406:
Multiple vulnerabilities in PLANEX Network camera products
2022/08/29 JVN#44721267:
Installer of Ricoh Device Software Manager may insecurely load Dynamic Link Libraries
2022/08/29 JVN#45473612:
Multiple vulnerabilities in CentreCOM AR260S V2
2022/08/24 JVN#57728859:
Movable Type XMLRPC API vulnerable to command injection
2022/08/24 JVN#46239102:
Multiple vulnerabilities in Exment
2022/08/23 JVNVU#96002401:
Multiple vulnerabilities in PukiWiki
2022/08/23 JVN#43979089:
PukiWiki vulnerable to cross-site scripting
2022/08/22 JVNVU#90821877:
UNIMO Technology digital video recorders vulnerable to missing authentication for critical functions
2022/08/22 JVNVU#98291763:
PLANEX MZK-DP150N contains hidden administrative functionality
2022/08/17 JVNVU#93109244:
Multiple vulnerabilities in Trend Micro Security
2022/08/17 JVNVU#96643038:
Trend Micro Endpoint security products for enterprises vulnerable to Link Following Local Privilege Escalation
2022/08/04 JVN#42883072:
Kaitai Struct: compiler vulnerable to denial-of-service (DoS)
2022/07/29 JVN#17625382:
Multiple vulnerabilities in Nintendo Wi-Fi Network Adaptor WAP-001
2022/07/28 JVN#57073973:
"JustSystems JUST Online Update for J-License" starts a program with an unquoted file path
2022/07/27 JVNVU#93696585:
CONTEC SolarView Compact vulnerable to insufficient verification in uploading files
2022/07/27 JVN#81563390:
"Hulu / フールー" App for iOS vulnerable to improper server certificate verification
2022/07/27 JVN#40907489:
"Hulu / フールー" App for Android uses a hard-coded API key for an external service
2022/07/25 JVN#77850327:
WordPress Plugin "Newsletter" vulnerable to cross-site scripting
2022/07/25 JVN#30454777:
Multiple vulnerabilities in untangle
2022/07/22 JVN#75063798:
Booked vulnerable to open redirect
2022/07/20 JVN#20573662:
Multiple vulnerabilities in Cybozu Office
2022/07/12 JVN#12610194:
Django Extract and Trunc functions vulnerable to SQL injection
2022/07/12 JVNVU#97846460:
U-Boot squashfs filesystem implementation vulnerable to heap-based buffer overflow
2022/07/08 JVN#23766146:
Passage Drive vulnerable to insufficient data verification
2022/07/04 JVN#14077132:
Multiple vulnerabilities in Cybozu Garoon
2022/07/04 JVN#32625020:
LiteCart vulnerable to cross-site scripting
2022/07/01 JVNVU#97050784:
Multiple vulnerabilities in OMRON products
2022/06/29 JVN#41017328:
HOME SPOT CUBE2 vulnerable to OS command injection
2022/06/24 JVN#51464799:
L2Blocker Sensor setup screen vulnerable to authentication bypass
2022/06/23 JVN#02158640:
web2py vulnerable to open redirect
2022/06/17 JVN#93667442:
Gitlab vulnerable to server-side request forgery
2022/06/15 JVN#20930118:
FreeBSD vulnerable to denial-of-service (DoS)
2022/06/14 JVN#94363766:
Cisco Catalyst 2940 Series Switches vulnerable to cross-site scripting
2022/06/14 JVNVU#96438711:
Growi vulnerable to weak password requirements
2022/06/09 JVN#32962443:
SHIRASAGI vulnerable to cross-site scripting
2022/06/02 JVNVU#90675050:
Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service
2022/06/01 JVN#28659051:
T&D Data Server and THERMO RECORDER DATA SERVER vulnerable to directory traversal
2022/06/01 JVN#04155116:
WordPress Plugin "Modern Events Calendar Lite" vulnerable to cross-site scripting
2022/05/27 JVN#27256219:
RevoWorks incomplete filtering of MS Office v4 macros
2022/05/27 JVN#13878856:
Mobaoku-Auction & Flea Market App for iOS vulnerable to improper server certificate verification
2022/05/26 JVNVU#93134398:
Multiple vulnerabilities in Fuji Electric V-SFT, V-Server and V-Server Lite
2022/05/26 JVNVU#99188133:
Multiple vulnerabilities in Fuji Electric V-SFT
2022/05/26 JVNVU#92327282:
Multiple vulnerabilities in CONTEC SolarView Compact
2022/05/24 JVN#15241647:
WordPress plugin "WP Statistics" vulnerable to cross-site scripting
2022/05/23 JVNVU#92641706:
Trend Micro Password Manager vulnerable to privilege escalation
2022/05/20 JVN#15317878:
Spring Security OAuth (spring-security-oauth2) vulnerable to denial-of-service (DoS)
2022/05/19 JVN#46892984:
Multiple vulnerabilities in Rakuten Casa
2022/05/16 JVN#73897863:
Multiple vulnerabilities in Cybozu Garoon
2022/05/13 JVN#44550983:
Strapi vulnerable to cross-site scripting
2022/05/13 JVN#46241173:
EC-CUBE plugin "Easy Blog for EC-CUBE4" vulnerable to cross-site request forgery
2022/05/12 JVNVU#93434935:
Installer of Trend Micro HouseCall for Home Networks may insecurely load Dynamic Link Libraries
2022/05/11 JVN#60037444:
Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries
2022/05/11 JVNVU#95992089:
Command injection vulnerability in QNAP VioStar series NVR
2022/05/10 JVN#60801132:
GENEREX RCCMD vulnerable to directory traversal
2022/05/09 JVN#96561229:[Critical]
Multiple vulnerabilities in Operation management interface of FUJITSU Network IPCOM
2022/05/09 JVN#50337155:
KOYO Electronics Screen Creator Advance2 vulnerable to authentication bypass
2022/05/09 JVN#58266015:
Multiple vulnerabilities in multiple MEIKYO ELECTRIC products
2022/04/22 JVN#54857505:
Hammock AssetView missing authentication for critical functions
2022/04/15 JVN#31606885:
WordPress Plugin "MicroPayments - Paid Author Subscriptions, Content, Downloads, Membership" vulnerable to cross-site request forgery
2022/04/06 JVNVU#97833256:
Trend Micro Antivirus for Mac vulnerable to privilege escalation
2022/03/30 JVN#59576930:
Zero-channel BBS Plus vulnerable to cross-site scripting
2022/03/30 JVN#42543427:
WordPress Plugin "Advanced Custom Fields" vulnerable to missing authorization
2022/03/30 JVN#10140834:
AttacheCase may insecurely load Dynamic Link Libraries
2022/03/30 JVNVU#99107357:[Critical]
Trend Micro Apex Central and Trend Micro Apex Central as a Service vulnerable to improper check for file contents
2022/03/22 JVNVU#94900322:
Netcommunity OG410X and OG810X VoIP gateway/Hikari VoIP adapter for business offices vulnerable to OS command injection
2022/03/16 JVN#21234459:
Multiple vulnerabilities in KINGSOFT "WPS Office" and "KINGSOFT Internet Security"
2022/03/15 JVN#87751554:
Multiple vulnerabilities in pfSense
2022/03/11 JVNVU#99391968:
Installer of Trend Micro Portable Security may insecurely load Dynamic Link Libraries
2022/03/10 JVNVU#96777901:
Installer of Trend Micro Password Manager may insecurely load Dynamic Link Libraries
2022/03/10 JVN#72801744:
UNIVERGE WA Series vulnerable to OS command injection
2022/03/08 JVNVU#90673830:
Installer of WPS Office for Windows misconfigures the ACL for the installation directory
2022/03/04 JVN#33214411:
i-FILTER vulnerable to improper check for certificate revocation
2022/03/04 JVNVU#90121984:
Multiple vulnerabilities in OMRON CX-Programmer
2022/03/03 JVN#85572374:
pfSense-pkg-WireGuard vulnerable to directory traversal
2022/03/03 JVN#89524240:
MarkText vulnerable to cross-site scripting
2022/03/03 JVN#87683137:
Norton Security for Mac improperly processes ICMP packets
2022/03/02 JVNVU#92972528:
Multiple vulnerabilities in Trend Micro ServerProtect
2022/03/01 JVNVU#96994445:
Multiples security updates for Trend Micro Endpoint security products for enterprises (March 2022)
2022/02/22 JVN#67108459:
EC-CUBE plugin "Mail Magazine Management Plugin" vulnerable to cross-site request forgery
2022/02/22 JVN#53871926:
EC-CUBE improperly handles HTTP Host header values
2022/02/18 JVN#14706307:
Multiple vulnerabilities in a-blog cms
2022/02/17 JVNVU#95075478:
Trend Micro Antivirus for MAC vulnerable to privilege escalation
2022/02/17 JVN#00095004:
Multiple vulnerabilities in phpUploader
2022/02/09 JVN#12969207:
HPE Agentless Management registers unquoted service paths
2022/02/08 JVN#17482543:
Multiple vulnerabilities in multiple ELECOM LAN routers
2022/02/07 JVN#95898697:
Multiple ESET products for macOS vulnerable to improper server certificate verification
2022/02/04 JVN#67396225:
CSV+ vulnerable to cross-site scripting
2022/01/25 JVN#70100915:
Multiple vulnerabilities in TransmitMail
2022/01/24 JVNVU#95024141:
Multiple vulnerabilities in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux
2022/01/21 JVNVU#94151526:
GROWI vulnerable to authorization bypass through user-controlled key
2022/01/20 JVN#16690037:
Multiple cross-site scripting vulnerabilities in php_mailform
2022/01/19 JVN#64806328:
Canon laser printers and small office multifunctional printers vulnerable to cross-site scripting
2022/01/13 JVN#19826500:
PASSWORD MANAGER "MIRUPASS" PW10 / PW20 missing encryption
2022/01/13 JVN#81479705:
Label printers "TEPRA" PRO SR5900P / SR-R7900P vulnerable to insufficiently protected credentials
2022/01/12 JVN#49047921:
Jimoty App for Android uses a hard-coded API key for an external service
2022/01/12 JVN#72788165:
Multiple vulnerabilities in WordPress Plugin "Quiz And Survey Master"

2021

2021/12/24 JVNVU#95192472:
Multiple vulnerabilities in KONICA MINOLTA MFPs and printing systems
2021/12/24 JVNVU#92279973:
Multiple vulnerabilities in IDEC PLCs
2021/12/23 JVNVU#94883311:
TP-Link TL-WR802N V4(JP) vulnerable to OS command injection
2021/12/22 JVN#66422035:
Android Apps developed using Yappli fails to restrict custom URL schemes properly
2021/12/22 JVNVU#95429813:
Multiple vulnerabilities in QNAP VioStar NVR
2021/12/20 JVN#79798166:
Multiple vulnerabilities in GroupSession
2021/12/17 JVN#13464252:
UNIVERGE DT Series vulnerable to missing encryption of sensitive data
2021/12/08 JVNVU#98117192:
Multiple vulnerabilities in Trend Micro Security 2021 family (Consumer)
2021/12/02 JVN#09136401:
Multiple missing authorization vulnerabilities in WordPress Plugin "Advanced Custom Fields"
2021/11/30 JVNVU#94527926:
Multiple vulnerabilities in multiple ELECOM routers
2021/11/30 JVN#88993473:
Multiple vulnerabilities in multiple ELECOM LAN routers
2021/11/30 JVN#19482703:
Wi-Fi STATION SH-52A vulnerable to cross-site scripting
2021/11/26 JVNVU#95400836:
Trend Micro Antivirus for MAC vulnerable to improper access controls
2021/11/26 JVN#81376414:
Multiple vulnerabilities in baserCMS
2021/11/25 JVN#93562098:
WordPress Plugin "Browser and Operating System Finder" vulnerable to cross-site request forgery
2021/11/24 JVN#17645965:
PowerCMS XMLRPC API vulnerable to OS command injection
2021/11/16 JVN#85492429:
WordPress Plugin "Push Notifications for WordPress (Lite)" vulnerable to cross-site request forgery
2021/11/16 JVN#22515597:
rwtxt vulnerable to cross-site scripting
2021/11/12 JVN#58407606:
Unlimited Sitemap Generator vulnerable to cross-site request forgery
2021/11/11 JVN#75444925:
Multiple vulnerabilities in EC-CUBE 2 series
2021/11/10 JVN#68066589:
WordPress Plugin "Booking Package - Appointment Booking Calendar System" vulnerable to cross-site scripting
2021/11/09 JVNVU#91161784:
Multiple vulnerabilities in multiple Yamaha routers
2021/10/29 JVN#69304877:
Multiple vulnerabilities in CLUSTERPRO X and EXPRESSCLUSTER X
2021/10/29 JVN#49465877:
Android App "Mercari (Merpay) - Marketplace and Mobile Payments App" (Japan version) vulnerable to improper handling of Intent
2021/10/29 JVN#60553023:
ESET Cyber Security and ESET Endpoint series vulnerable to denial-of-service (DoS)
2021/10/28 JVN#33453839:
Multiple improper restriction of XML external entity reference (XXE) vulnerabilities in Office Server Document Converter
2021/10/25 JVNVU#92842857:
Trend Micro Endpoint security products for enterprises vulnerable to privilege escalation
2021/10/20 JVN#41119755:[Critical]
Movable Type XMLRPC API vulnerable to OS command injection
2021/10/18 JVN#85073657:
128 Technology Session Smart Router vulnerable to authentication bypass
2021/10/15 JVNVU#90041391:
OMRON CX-Supervisor vulnerable to out-of-bounds read
2021/10/08 JVN#51106450:
Apache HTTP Server vulnerable to directory traversal
2021/10/08 JVN#89126639:
Nike App fails to restrict custom URL schemes properly
2021/09/30 JVNVU#99520559:
Trend Micro ServerProtect family vulnerable to authentication bypass
2021/09/30 JVN#52694228:
Multiple vulnerabilities in Cybozu Remote Service
2021/09/29 JVNVU#99718667:
Trend Micro HouseCall for Home Networks vulnerable to privilege escalation
2021/09/28 JVN#29428319:
WordPress Plugin "OG Tags" vulnerable to cross-site request forgery
2021/09/28 JVN#63023305:
InBody App vulnerable to information disclosure
2021/09/28 JVN#10168753:
SNKRDUNK Market Place App for iOS vulnerable to improper server certificate verification
2021/09/17 JVN#42866574:
Multiple vulnerabilities in Sharp NEC Display Solutions' public displays
2021/09/16 JVN#23406150:
EC-CUBE plugin "Order Status Batch Change Plug-in" vulnerable to cross-site scripting
2021/09/13 JVN#46313661:
EC-CUBE plugin "List (order management) item change plug-in" vulnerable to cross-site scripting
2021/09/10 JVN#81658818:
Multiple vulnerabilities in RevoWorks Browser
2021/09/02 JVNVU#94699053:
Trend Micro Security family vulnerable to improper handling of Directory Junction
2021/08/27 JVN#14134801:
baserCMS vulnerable to cross-site scripting
2021/08/25 JVN#97545738:
Multiple cross-site scripting vulnerabilities in Movable Type
2021/08/24 JVN#80288258:
The installers of multiple Sony products may insecurely load Dynamic Link Libraries
2021/08/19 JVNVU#95261759:
Multiple vulnerabilities in Navigate CMS
2021/08/18 JVNVU#90091573:
Incorrect permission assignment vulnerability in multiple Trend Micro Endpoint security products for enterprises
2021/08/17 JVN#41646618:
Huawei EchoLife HG8045Q vulnerable to OS command injection
2021/08/16 JVNVU#92088210:
Multiple vulnerabilities in D-Link router DSL-2750U
2021/08/12 JVN#50804280:
Plone vulnerable to open redirect
2021/08/10 JVN#65388002:
WordPress Plugin "Quiz And Survey Master" vulnerable to cross-site scripting
2021/08/02 JVN#54794245:
Multiple vulnerabilities in Cybozu Garoon
2021/07/29 JVNVU#93876919:[Critical]
Multiple vulnerabilities in multiple Trend Micro Endpoint security products for enterprises
2021/07/21 JVN#53278122:
Minecraft Java Edition vulnerable to directory traversal
2021/07/19 JVN#86026700:
Multiple vulnerabilities in GroupSession
2021/07/16 JVNVU#94115268:
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) vulnerable to cross-site scripting
2021/07/14 JVN#34364599:
Optical BB unit E-WMTA2.3 vulnerable to cross-site request forgery
2021/07/13 JVN#26891339:
Multiple vulnerabilities in Retty App
2021/07/09 JVN#68971465:
voidtools "Everything" vulnerable to HTTP header injection
2021/07/08 JVN#89054582:
WordPress Plugin "Software License Manager" vulnerable to cross-site request forgery
2021/07/08 JVN#48413554:
WordPress Plugin "WordPress Meta Data Filter & Taxonomies Filter" vulnerable to cross-site request forgery
2021/07/07 JVN#25850723:
GU App for Android fails to restrict access permissions
2021/07/06 JVN#42880365:
WordPress Plugin "WordPress Email Template Designer - WP HTML Mail" vulnerable to cross-site request forgery
2021/07/06 JVN#91372527:
WordPress Plugin "WPCS - WordPress Currency Switcher" vulnerable to cross-site request forgery
2021/07/06 JVNVU#94260088:
Multiple vulnerabilities in Elecom routers
2021/07/05 JVNVU#93149000:
Multiple vulnerabilities in Trend Micro Password Manager
2021/07/05 JVN#21636825:
A-Stage SCT-40CM01SR and AT-40CM01SR vulnerable to authentication bypass
2021/07/01 JVN#57942445:
EC-CUBE fails to restrict access permissions
2021/06/30 JVN#15185184:
IkaIka RSS Reader vulnerable to cross-site scripting
2021/06/30 JVN#65660590:
boastMachine vulnerable to cross-site scripting
2021/06/23 JVN#95292458:
Multiple cross-site scripting vulnerabilities in EC-CUBE
2021/06/23 JVN#63066062:
WordPress Plugin "WordPress Popular Posts" vulnerable to cross-site scripting
2021/06/22 JVN#93799513:
WordPress plugin "Fudousan plugin" series vulnerable to cross-site scripting
2021/06/22 JVN#29949691:
Inkdrop vulnerable to OS command injection
2021/06/18 JVN#21298724:
Hitachi Virtual File Platform vulnerable to OS command injection
2021/06/17 JVN#03776901:
Hitachi Application Server Help vulnerable cross-site scripting
2021/06/15 JVN#57524494:
Multiple cross-site scripting vulnerabilities in multiple EC-CUBE plugins provided by EC-CUBE
2021/06/15 JVN#79254445:[Critical]
Multiple ETUNA EC-CUBE plugins vulnerable to cross-site scripting
2021/06/14 JVN#95457785:
Multiple vulnerabilities in GROWI
2021/06/14 JVN#38034268:
あすけん App for Android fails to restrict custom URL schemes properly
2021/06/11 JVN#70566757:
WordPress plugin "Welcart e-Commerce" vulnerable to cross-site scripting
2021/06/09 JVNVU#92417259:
Multiple vulnerabilities in Trend Micro Home Network Security
2021/06/07 JVNVU#92413403:
urllib3 vulnerable to Regular expression Denial-of-Service (ReDoS)
2021/06/03 JVN#64064138:
ATOM - Smart life App vulnerable to improper server certificate verification
2021/06/02 JVN#91691168:
goo blog App fails to restrict custom URL schemes properly
2021/05/31 JVNVU#92862829:
Multiple vulnerabilities in Buffalo WSR-1166DHP3 and WSR-1166DHP4 routers
2021/05/31 JVNVU#93332929:
Multiple security updates for multiple Trend Micro products (May 2021)
2021/05/26 JVN#98239374:
Zettlr vulnerable to cross-site scripting
2021/05/21 JVN#53910556:
Multiple cross-site scripting vulnerabilities in multiple PHP Factory products
2021/05/21 JVN#78254777:
Installer of Overwolf may insecurely load Dynamic Link Libraries
2021/05/21 JVN#74686032:
QND vulnerable to privilege escalation
2021/05/21 JVN#65733194:
The installers of ScanSnap Manager may insecurely load Dynamic Link Libraries
2021/05/14 JVN#49704918:
mod_auth_openidc vulnerable to denial-of-service (DoS)
2021/05/14 JVN#71263107:
Multiple vulnerabilities in Cisco Small Business Series Wireless Access Points
2021/05/13 JVN#34232719:
Multiple vulnerabilities in KonaWiki2
2021/05/13 JVN#13076220:
RFNTPS vulnerable to OS command injection
2021/05/10 JVN#97554111:[Critical]
EC-CUBE vulnerable to cross-site scripting
2021/05/10 JVNVU#97581596:
Multiple vulnerabilities in Trend Micro Apex One, OfficeScan, and Worry-Free Business Security series
2021/04/27 JVNVU#99235714:
Multiple vulnerabilities in Buffalo broadband routers
2021/04/27 JVNVU#90274525:
Multiple Buffalo network devices contain hidden functionality
2021/04/27 JVN#35240327:
WordPress plugin "WP Fastest Cache" vulnerable to directory traversal
2021/04/27 JVN#97434260:
Hot Pepper Gourmet App fails to restrict access permissions
2021/04/22 JVN#55833077:[Unreachable]
yappa-ng vulnerable to cross-site scripting
2021/04/21 JVNVU#93491927:[Critical]
Multiple vulnerabilities in Apex One, Apex One as a Service and OfficeScan
2021/04/20 JVNVU#93009588:
Memory Exhaustion Denial-of-Service (DoS) vulnerability in Trend Micro Scan Engine
2021/04/20 JVNVU#92208501:
Multiple vulnerabilities in Worry-Free Business Security
2021/04/20 JVNVU#97680506:
Multiple vulnerabilities in Worry-Free Business Security Services
2021/04/19 JVNVU#98074915:
Trend Micro Password Manager may insecurely load Dynamic Link Libraries
2021/04/14 JVN#54025691:
Gurunavi Apps fail to restrict access permissions
2021/04/09 JVN#29739718:
Multiple vulnerabilities in Aterm WF1200CR, Aterm WG1200CR, Aterm WG2600HS, and Aterm WX3000HP
2021/04/09 JVN#67456944:
Multiple vulnerabilities in multiple Aterm products
2021/04/09 JVNVU#92898656:
D-Link DAP-1880AC contains multiple vulnerabilities
2021/04/01 JVN#73236007:
Archive collectively operation utility vulnerable to directory traversal
2021/03/26 JVN#64869876:
Multiple vulnerabilities in baserCMS
2021/03/25 JVN#68244135:[Unreachable]
rNote vulnerable to cross-site scripting
2021/03/25 JVN#94705238:[Unreachable]
Yomi-Search vulnerable to cross-site scripting
2021/03/25 JVN#83042295:[Unreachable]
Yomi-Search vulnerable to cross-site scripting
2021/03/25 JVN#37179202:[Unreachable]
Yomi-Search vulnerable to cross-site scripting
2021/03/25 JVN#93207949:[Unreachable]
Click Ranker vulnerable to cross-site scripting
2021/03/25 JVN#11438679:[Unreachable]
Kagemai vulnerable to cross-site request forgery
2021/03/25 JVN#42220311:[Unreachable]
Kagemai vulnerable to cross-site scripting
2021/03/25 JVN#12559271:[Unreachable]
Kagemai vulnerable to cross-site scripting
2021/03/25 JVN#97370614:[Unreachable]
MagazinegerZ vulnerable to cross-site scripting
2021/03/22 JVN#12737530:
UNIVERGE Aspire series PBX vulnerable to denial-of-service (DoS)
2021/03/19 JVN#37607293:
Fuji Xerox multifunction devices and printers vulnerable to denial-of-service (DoS)
2021/03/17 JVN#08191557:
WordPress plugin "Paid Memberships Pro" vulnerable to SQL injection
2021/03/15 JVN#45797538:
Multiple vulnerabilities in Cybozu Office
2021/03/12 JVN#47497535:
M-System DL8 contains multiple vulnerabilities
2021/03/11 JVN#18056666:
Installer of MagicConnect Client program may insecurely load Dynamic Link Libraries
2021/03/10 JVN#86438134:
Multiple cross-site scripting vulnerabilities in GROWI
2021/03/08 JVNVU#94889258:
Multiple vulnerabilities in GROWI
2021/03/05 JVN#68418039:
The installers of E START products may insecurely load Dynamic Link Libraries
2021/03/05 JVNVU#99545969:
Trend Micro Security (Consumer) vulnerable to code injection
2021/02/24 JVN#66542874:
Multiple cross-site scripting vulnerabilities in Movable Type
2021/02/19 JVN#37417423:
Multiple vulnerabilities in SolarView Compact
2021/02/16 JVN#58774946:[Critical]
FileZen vulnerable to OS command injection
2021/02/15 JVN#87164507:
Calsos CSDJ fails to restrict access permissions
2021/02/10 JVN#80785288:
Wekan vulnerable to cross-site scripting
2021/02/05 JVN#50470170:
WordPress Plugin "Name Directory" vulnerable to cross-site request forgery
2021/02/04 JVN#42252698:
Panasonic Video Insight VMS vulnerable to arbitrary code execution
2021/02/03 JVNVU#98209799:
Trend Micro HouseCall for Home Networks (Windows Edition) may insecurely load Dynamic Link Libraries
2021/02/01 JVNVU#99814910:
Multiple vulnerabilities in the installer of Trend Micro Security 2020 (Consumer)
2021/01/27 JVN#41853173:
OS command injection vulnerability in multiple Infoscience Corporation log management tools
2021/01/26 JVN#96783542:
Multiple vulnerabilities in multiple LOGITEC products
2021/01/26 JVN#98115035:
Android App "ELECOM File Manager" vulnerable to directory traversal
2021/01/26 JVN#47580234:
Multiple vulnerabilities in multiple ELECOM products
2021/01/22 JVN#38248512:
Multiple vulnerabilities in Aterm WF800HP, Aterm WG2600HP, and Aterm WG2600HP2
2021/01/22 JVNVU#92444096:
TP-Link TL-WR841N V13 (JP) vulnerable to OS command injection
2021/01/19 JVN#57544707:
GROWI vulnerable to cross-site scripting
2021/01/14 JVNVU#99904867:
Multiple vulnerabilities in Worry-Free Business Security (WFBS)
2021/01/14 JVNVU#92683420:
Multiple vulnerabilities in Trend Micro Apex One and OfficeScan
2021/01/14 JVN#35906450:
Multiple vulnerabilities in acmailer
2021/01/12 JVN#69635538:
The installer of SKYSEA Client View may insecurely load Dynamic Link Libraries
2021/01/05 JVNVU#98351146:
Multiple vulnerabilities in InterScan Web Security Virtual Appliance (IWSVA)
2021/01/04 JVN#38752718:
Multiple NEC Products vulnerable to authentication bypass
2021/01/04 JVN#38784555:
Multiple vulnerabilities in UNIVERGE SV9500/SV8500 series

2020

2020/12/18 JVN#10100024:
Management software for NEC Storage disk array system vulnerable to improper server certificate verification
2020/12/18 JVN#94244575:
Self-Extracting files created by multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries
2020/12/15 JVN#94169589:
Multiple vulnerabilities in GROWI
2020/12/11 JVN#55917325:
Multiple vulnerabilities in Aterm SA3500G
2020/12/11 JVN#43969166:
Apache Struts 2 vulnerable to remote code execution (S2-061)
2020/12/10 JVN#12884935:
FileZen vulnerable to directory traversal
2020/12/07 JVN#59779918:
Apache Cordova Plugin camera vulnerable to information exposure
2020/12/07 JVNVU#97704455:
ServerProtect for Linux vulnerable to heap-based buffer overflow
2020/12/03 JVN#24457594:
Multiple vulnerabilities in EC-CUBE
2020/12/03 JVN#42199826:
desknet's NEO vulnerable to cross-site scripting
2020/11/27 JVNVU#98890246:
Multiple vulnerabilities in Trend Micro InterScan Messaging Virtual Appliance (IMSVA)
2020/11/25 JVNTA#94494000:
Malleability attack against executables encrypted by CBC mode with no integrity check
2020/11/25 JVN#56450373:
Multiple vulnerabilities in GROWI
2020/11/24 JVN#27806339:
NETGEAR GS108Ev3 vulnerable to cross-site request forgery
2020/11/24 JVNVU#94694991:
Multiple vulnerabilities in Trend Micro Antivirus for Mac
2020/11/20 JVN#26835001:
The installers of multiple SEIKO EPSON products may insecurely load Dynamic Link Libraries
2020/11/19 JVN#90729322:
Hibernate ORM vulnerable to SQL injection
2020/11/18 JVNVU#96249940:
Trend Micro Security 2020 (Consumer) is vulnerable to arbitrary file deletion
2020/11/18 JVN#94245475:
Movable Type Premium vulnerable to cross-site scripting
2020/11/17 JVNVU#99880454:
Multiple vulnerabilities in KonaWiki3
2020/11/12 JVN#44764844:
MELSEC iQ-R Series CPU Modules vulnerable to uncontrolled resource consumption
2020/11/06 JVNVU#92053563:
Multiple vulnerabilities in XOOPS module "XooNIps"
2020/11/05 JVN#00414047:
Studyplus App uses a hard-coded API key for an external service
2020/11/04 JVN#57942454:
Cybozu Garoon vulnerable to improper input validation
2020/10/21 JVN#31425618:
Multiple vulnerabilities in WordPress Plugin "Simple Download Monitor"
2020/10/20 JVNVU#99467898:
Local File Inclusion vulnerability in OneThird CMS
2020/10/14 JVN#92404841:
WordPress Plugin "Live Chat – Live support" vulnerable to cross-site request forgery
2020/10/06 JVNVU#95014999:
Trend Micro Antivirus for Mac vulnerable to a privilege escalation
2020/10/05 JVN#82892096:
OS command injection vulnerability in multiple ELECOM LAN routers
2020/09/30 JVN#07426151:
InfoCage SiteShell installs their files with improper access permissions
2020/09/25 JVNVU#93741515:
CMONOS.JP vulnerable to cross-site scripting
2020/09/23 JVNVU#91216654:
ServerProtect for Linux vulnerable to OS command injection
2020/09/23 JVN#60093979:
Multiple vulnerabilities in Active Update function implemented in multiple Trend Micro products
2020/09/17 JVN#31864411:
Multiple access restriction bypass vulnerabilities in UNIQLO App
2020/09/11 JVN#09166495:
Multiple vulnerabilities in Buffalo AirStation WHR-G54S
2020/09/07 JVN#32396594:
Yodobashi App for Android fails to restrict access permissions
2020/08/31 JVNVU#90813748:
Multiple vulnerabilities in Trend Micro Deep Security Manager and Vulnerability Protection
2020/08/31 JVN#06446084:
CLUSTERPRO X and EXPRESSCLUSTER X vulnerable to XML external entity injection (XXE)
2020/08/31 JVN#42665874:
"Shadankun Server Security Type" vulnerable to denial-of-service (DoS)
2020/08/28 JVN#29903998:
Multiple NETGEAR switching hubs vulnerable to cross-site request forgery
2020/08/27 JVN#40725650:
Multiple vulnerabilities in XOOPS module "XooNIps"
2020/08/26 JVN#77402327:
NITORI App fails to restrict access permissions
2020/08/25 JVNVU#98542645:
Multiple vulnerabilities in InterScan Web Security Virtual Appliance (IWSVA)
2020/08/25 JVN#50890770:
Apache Struts 2 vulnerable to denial-of-service (DoS)
2020/08/21 JVN#88315581:
Multiple cross-site scripting vulnerabilities in Exment
2020/08/11 JVN#46258789:
Multiple vulnerabilities in CyberMail
2020/08/06 JVNVU#98423028:
Installer of Trend Micro Security 2020 (Consumer) may insecurely load Dynamic Link Libraries
2020/08/06 JVNVU#94105662:
Trend Micro Security (Consumer) Driver vulnerable to Out-of-bounds Read
2020/08/05 JVNVU#99160193:
Trend Micro anti-rootkit driver improperly validates inputs
2020/08/03 JVN#25422698:[Critical]
SKYSEA Client View vulnerable to privilege escalation
2020/08/03 JVNTA#96129397:
Falsification and eavesdropping of contents across multiple websites via Web Rehosting services
2020/07/31 JVN#73169744:
Multiple vulnerabilities in multiple PHP Factory products
2020/07/31 JVN#84959128:
FANUC i Series CNC vulnerable to denial-of-service (DoS)
2020/07/29 JVN#40400577:
TOYOTA MOTOR's Global TechStream vulnerable to buffer overflow
2020/07/28 JVN#48194211:
Multiple vulnerabilities in KonaWiki2 and KonaWiki3
2020/07/28 JVN#62161191:
JavaFX WebEngine does not properly restrict Java method execution
2020/07/22 JVN#05502028:
WordPress Plugin "Social Sharing Plugin" vulnerable to cross-site request forgery
2020/07/09 JVN#55657988:
SHIRASAGI vulnerable to open redirect
2020/07/08 JVN#93167107:
Android App "Mercari" (Japan version) vulnerable to arbitrary method execution of Java object
2020/07/03 JVNVU#95413676:
Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric GOT2000 series
2020/06/30 JVNVU#90307594:
Multiple vulnerabilities in Mitsubishi Electoric FA Engineering Software
2020/06/29 JVN#55497111:
Multiple vulnerabilities in Cybozu Garoon
2020/06/24 JVN#40039627:
Chrome Extension for e-Tax Reception System vulnerable to arbitrary command execution
2020/06/23 JVNVU#91424496:
Mitsubishi Electric MELSEC iQ-R, iQ-F, Q, L, and FX series vulnerable to cleartext transmission of sensitive information
2020/06/18 JVN#77458946:
EC-CUBE vulnerable to directory traversal
2020/06/11 JVN#32252648:
Multiple vulnerabilities in Zenphoto
2020/06/09 JVN#67447798:
Multiple SONY Wireless Headphones allow improper Bluetooth pairing
2020/06/05 JVN#40208370:
XACK DNS vulnerable to denial-of-service (DoS)
2020/05/29 JVN#78745667:
Multiples security updates for multiple Cybozu products
2020/05/25 JVN#59552136:
Cybozu Desktop for Windows vulenerable to arbitrary code execution
2020/05/19 JVN#20248858:
WordPress Plugin "Paid Memberships Pro" vulnerable to SQL injection
2020/05/19 JVN#96646182:
Panasonic Video Insight VMS vulnerable to arbitrary code execution
2020/05/13 JVN#41035278:
BookStack vulnerable to cross-site scripting
2020/05/13 JVN#28806943:
Multiple vulnerabilities in Movable Type
2020/05/11 JVN#61849442:
PALLET CONTROL vulnerable to arbitrary code execution
2020/04/28 JVN#47668991:
Sales Force Assistant vulnerable to cross-site scripting
2020/04/27 JVN#35649781:
Multiple vulnerabilities in Cybozu Garoon
2020/04/23 JVN#93064451:
Multiple SHARP Android devices vulnerable to information disclosure
2020/04/20 JVN#13467854:
Toshiba Electronic Devices & Storage software registers unquoted service paths
2020/04/10 JVNVU#99911229:
Installers of Multiple Trend Micro Products may insecurely load Dynamic Link Libraries
2020/04/08 JVN#89224521:
Multiple vulnerabilities in EasyBlocks IPv6
2020/04/07 JVN#56890693:
Joomla! plugin "AcyMailing" vulnerable to arbitrary file uploads
2020/04/06 JVNVU#93266623:
Trend Micro Password Manager may insecurely load Dynamic Link Libraries
2020/03/31 JVN#38732359:
Multiple Yamaha network devices vulnerable to denial-of-service (DoS)
2020/03/30 JVNVU#91553662:
Denial-of-service (DoS) vulnerability in Mitsubishi Electric MELSOFT transmission port
2020/03/30 JVNVU#99396686:
A vulnerability in TOYOTA MOTOR's DCU (Display Control Unit)
2020/03/24 JVN#88277644:[Unreachable]
Keijiban Tsumiki vulenrable to OS command injection
2020/03/24 JVN#27951364:[Unreachable]
WL-Enq (WEB Enquete) vulnerable to OS command injection
2020/03/24 JVN#88033799:[Unreachable]
WL-Enq (WEB Enquete) vulnerable to cross-site scripting
2020/03/24 JVN#58176087:[Unreachable]
Cute News vulnerable to PHP code execution
2020/03/24 JVN#29095127:[Unreachable]
CuteNews vulnerable to cross-site scripting
2020/03/24 JVN#63834780:[Unreachable]
Shihonkanri Plus GOOUT vulnerable to OS command injection
2020/03/24 JVN#32415420:[Unreachable]
Multiple vulnerabiliteis in Shihonkanri Plus GOOUT
2020/03/24 JVN#77634892:[Unreachable]
mailform vulnerable to PHP code execution
2020/03/24 JVN#85942151:[Unreachable]
mailform vulnerable to cross-site scripting
2020/03/18 JVNVU#98100897:[Critical]
Multiple vulnerabilities in Trend Micro Worry-Free Business Security
2020/03/18 JVNVU#91632701:[Critical]
Multiple vulnerabilities in Trend Micro Apex One and OfficeScan
2020/03/12 JVNVU#99239584:
Rowhammer attacks for TRR equipped DDR4 memory systems
2020/03/11 JVNVU#92370624:
Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric data collection analyzer MELQIC IU1 series
2020/03/03 JVN#19666251:
Multiple vulnerabilities in OpenBlocks IoT VX2
2020/03/02 JVN#73472345:
GRANDIT vulnerable to session management
2020/02/25 JVN#15697526:
Privilege escalation vulnerability in multiple RICOH printer drivers
2020/02/25 JVN#52962201:
Multiple vulnerabilities in RICOH printers
2020/02/19 JVN#25766797:
Multiple OS command injection vulnerabilities in Aterm WF1200C, Aterm WG1200CR, and Aterm WG2600HS
2020/02/19 JVN#49410695:
Multiple vulnerabilities in Aterm WG2600HS
2020/02/18 JVN#89259622:
WordPress Plugin "Easy Property Listings" vulnerable to cross-site request forgery
2020/02/17 JVNVU#95424547:
Multiple vulnerabilities in TCP/IP function on Mitsubishi Electric MELSEC C Controller Module and MELIPC Series MI5000
2020/02/14 JVN#35496038:
ilbo App vulnerable to authentication bypass
2020/02/14 JVN#02921757:
Multiple Trend Micro products vulnerable to denial-of-service (DoS)
2020/02/10 JVN#34535327:
HtmlUnit vulenerable to arbitrary code execution
2020/02/06 JVN#94435544:
Movable Type vulnerable to cross-site scripting
2020/02/05 JVN#52486659:
Ghostscript access restriction bypass vulnerability
2020/01/31 JVN#00014057:
AWMS Mobile App vulnerable to improper server certificate verification
2020/01/28 JVN#28845872:
Android App "MyPallete" vulnerable to improper server certificate verification
2020/01/21 JVN#66435380:
Multiple Fuji Xerox mobile applications fails to verify SSL server certificates
2020/01/17 JVN#37183636:
Trend Micro Password Manager vulnerable to information disclosure
2020/01/17 JVN#49593434:
Trend Micro Password Manager vulnerable to information disclosure
2020/01/10 JVN#07375820:
Junos OS vulnerable to directory traversal
2020/01/10 JVN#21753370:
Junos OS vulnerable to cross-site scripting
2020/01/08 JVN#97325754:
F-RevoCRM vulnerable to cross-site scripting

2019

2019/12/20 JVN#10377257:
Multiple vulnerabilities in a-blog cms
2019/12/19 JVN#01236065:
Android App "NTV News24" fails to verify SSL server certificates
2019/12/17 JVN#79854355:
Multiple vulnerabilities in Cybozu Office
2019/12/12 JVN#26847507:
Multiple vulnerabilities in "Custom Body Class"
2019/12/12 JVN#57070811:
Athenz vulnerable to open redirect
2019/12/10 JVN#63047298:
Kinza vulnerable to cross-site scripting
2019/12/02 JVN#49068796:
Multiple MOTEX products vulnerable to privilege escalation
2019/11/26 JVNVU#94282488:
Multiple vulnerabilities in multiple Trend Micro products
2019/11/26 JVN#19386781:
STAMP Workbench installer may insecurely load Dynamic Link Libraries
2019/11/26 JVN#26838191:
WordPress Plugin "WP Spell Check" vulnerable to cross-site request forgery
2019/11/13 JVN#65280626:
Movable Type vulnerable to open redirect
2019/11/11 JVNVU#91935870:
Multiple vulnerabilities in Trend Micro Anti-Threat Toolkit (ATTK)
2019/11/08 JVNVU#91743132:
Multiple Trend Micro products vulnerable to directory traversal
2019/11/07 JVN#41566067:
Rakuma App vulnerable to authentication information disclosure
2019/11/05 JVNVU#90577675:
Trend Micro Apex One vulnerable to command injection
2019/10/29 JVNVU#96213168:
Trend Micro OfficeScan vulnerable to directory traversal
2019/10/28 JVN#45633549:
Library Information Management System LIMEDIO vulnerable to open redirect
2019/10/25 JVNVU#99059651:
Multiple Trend Micro products vulnerable to XML external entity injection (XXE)
2019/10/23 JVN#34634458:
PowerCMS vulnerable to open redirect
2019/10/15 JVN#74530672:
NetCommons3 vulnerable to cross-site scripting
2019/10/11 JVN#14776551:
Multiple vulnerabilities in WordPress Plugin "wpDataTables Lite"
2019/10/07 JVN#59436681:
Multiple vulnerabilities in EC-CUBE module "REMISE Payment module (2.11, 2.12 and 2.13)"
2019/10/07 JVN#95875796:
Multiple OS command injection vulnerabilities in DBA-1510P
2019/10/01 JVNVU#94678942:
FON routers may behave as an open resolver
2019/09/19 JVN#97845465:
Multiple integer overflow vulnerabilities in LINE(Android)
2019/09/13 JVN#11708203:
Multiple buffer overflow vulnerabilities in multiple Ricoh printers and Multifunction Printers (MFPs)
2019/09/12 JVN#39383894:
apng-drawable vulnerable to integer overflow
2019/09/10 JVN#74699196:
SHIRASAGI vulnerable to open redirect
2019/09/10 JVNVU#94051551:
Multiple Trend Micro products vulnerable to directory traversal
2019/09/02 JVN#93833849:
Panasonic Video Insight VMS vulnerable to SQL injection
2019/08/26 JVN#71877187:
Cybozu Garoon vulnerable to SQL injection
2019/08/23 JVN#17127920:
Smart TV Box fails to restrict access permissions
2019/08/15 JVN#07679150:
ApeosWare Management Suite and ApeosWare Management Suite 2 contain open redirect vulnerability
2019/08/07 JVN#29343839:
EC-CUBE plugin "Amazon Pay Plugin 2.12,2.13" vulnerable to cross-site scripting
2019/08/07 JVNVU#97511331:
Multiple vulnerabilities in multiple Canon digital cameras
2019/08/07 JVNVU#93628467:
WonderCMS vulnerable to directory traversal
2019/07/31 JVN#94889214:
Central Dogma vulnerable to cross-site scripting
2019/07/18 JVN#92510087:
WordPress Plugin "Category Specific RSS feed Subscription" vulnerable to cross-site request forgery
2019/07/16 JVN#48981892:
WordPress Plugin "WordPress Ultra Simple Paypal Shopping Cart" vulnerable to cross-site request forgery
2019/07/16 JVN#62618482:
Multiple vulnerabilities in Cybozu Garoon
2019/07/10 JVN#75617741:
Intel Dual Band Wireless-AC 8260 vulnerable to denial-of-service (DoS)
2019/07/05 JVN#37230341:
Multiple vulnerabilities in Access analysis CGI An-Analyzer
2019/07/01 JVN#28218613:
The management console of iDoors Reader vulnerable to authentication bypass
2019/06/27 JVN#43172719:
Multiple vulnerabilities in Hikari Denwa router/Home GateWay
2019/06/24 JVN#29933378:
WordPress Plugin "Custom CSS Pro" vulnerable to cross-site request forgery
2019/06/24 JVN#49575131:
WordPress Plugin ”HTML5 Maps” vulnerable to cross-site request forgery
2019/06/21 JVN#13555032:
Multiple vulnerabilities in VAIO Update
2019/06/19 JVN#88804335:
WordPress Plugin "Personalized WooCommerce Cart Page” vulnerable to cross-site request forgery
2019/06/17 JVN#31406910:
WordPress Plugin "Related YouTube Videos" vulnerable to cross-site request forgery
2019/06/13 JVN#89046645:
A map plugin for Minecraft server "Dynmap" fails to restrict access permissions
2019/06/12 JVN#80925867:
WordPress Plugin "Contest Gallery” vulnerable to cross-site request forgery
2019/06/10 JVN#96988995:
Multiple vulnerabilities in WordPress Plugin "Online Lesson Booking"
2019/06/10 JVN#95685939:
Multiple vulnerabilities in WordPress Plugin "Attendance Manager"
2019/06/07 JVN#84876282:
Multiple vulnerabilities in GROWI
2019/06/07 JVN#29188908:
Joruri CMS 2017 vulnerable to cross-site scripting
2019/06/07 JVN#58052567:
Multiple vulnerabilities in Joruri Mail
2019/05/31 JVN#88962935:
Multiple vulnerabilities in WordPress Plugin "Zoho SalesIQ"
2019/05/24 JVN#57806517:
Android App "Tootdon for Mastodon" fails to verify SSL server certificates
2019/05/23 JVN#33652328:
WordPress plugin "WP Open Graph" vulnerable to cross-site request forgery
2019/05/22 JVN#71498764:
Apache Camel vulnerable to XML external entity injection (XXE)
2019/05/10 JVN#69903953:
Electronic reception and examination of application for radio licenses Offline may insecurely load Dynamic Link Libraries
2019/05/10 JVN#91361851:
Installer of Electronic reception and examination of application for radio licenses Online may insecurely load Dynamic Link Libraries
2019/05/10 JVN#87655507:
CREATE SD official App for Android fails to restrict access permissions
2019/04/25 JVN#58849431:
Multiple vulnerabilities in Cybozu Garoon
2019/04/03 JVN#25261088:
GNU Wget vulnerable to buffer overflow
2019/04/01 JVN#01119243:
API server used by JR East Japan train operation information push notification App for Android fails to restrict access permissions
2019/03/27 JVN#63981842:
PowerAct Pro Master Agent for Windows fails to restrict acess permissions
2019/03/19 JVN#60497148:
"an" App for iOS vulnerable to directory traversal
2019/03/15 JVN#06527859:
KinagaCMS vulnerable to cross-site scripting
2019/03/12 JVN#11622218:
iChain Insurance Wallet App for iOS vulnerable to directory traversal
2019/03/05 JVN#40288903:
Dradis Community Edition and Dradis Professional Edition vulnerable to cross-site scripting
2019/03/01 JVNVU#95147316:
Multiple vulnerabilities in Trend Micro ScanMail for Exchange
2019/03/01 JVNVU#97891221:
Multiple vulnerabilities in Trend Micro Mobile Security
2019/03/01 JVNVU#99357827:
Smart Protection Server vulnerable to OS command injection
2019/03/01 JVNVU#91054129:
Multiple vulnerabilities in Trend Micro OfficeScan
2019/02/28 JVN#79543573:
The installer of Microsoft Teams may insecurely load Dynamic Link Libraries
2019/02/28 JVN#97656108:
WordPress plugin "Smart Forms" vulnerable to cross-site request forgery
2019/02/28 JVN#69181574:
Windows 7 may insecurely load Dynamic Link Libraries
2019/02/27 JVN#56542712:
Multiple vulnerabilities in Nablarch
2019/02/26 JVN#83501605:
WordPress plugin "FormCraft" vulnerable to cross-site request forgery
2019/02/20 JVN#05875753:
azure-umqtt-c vulnerable to denial-of-service (DoS)
2019/02/18 JVN#50810870:
Installer of Adobe Creative Cloud Desktop Application may insecurely load Dynamic Link Libraries
2019/02/12 JVN#40439414:
A vulnerability in V20 PRO L-01J that may cause a crash
2019/02/06 JVN#43193964:
OpenAM (Open Source Edition) vulnerable to open redirect
2019/02/05 JVN#63860183:
POWER EGG vulnerability where EL expression may be executed
2019/01/31 JVN#83826673:
The installers of UNLHA32.DLL, UNARJ32.DLL and LHMelting may insecurely load Dynamic Link Libraries
2019/01/31 JVN#52168232:
UNLHA32.DLL, UNARJ32.DLL, LHMelting and LMLzh32.DLL may insecurely load Dynamic Link Libraries
2019/01/24 JVN#98505783:
HOUSE GATE App for iOS vulnerable to directory traversal
2019/01/10 JVN#58010349:
WordPress plugin "spam-byebye" vulnerable to cross-site scripting

2018

2018/12/26 JVN#96493183:
GROWI vulnerable to cross-site scripting
2018/12/25 JVN#33677949:
Installer of Mapping Tool may insecurely load Dynamic Link Libraries
2018/12/25 JVN#27052429:
WordPress plugin "Google XML Sitemaps" vulnerable to cross-site scripting
2018/12/21 JVN#13199224:
PgpoolAdmin fails to restrict access permissions
2018/12/21 JVN#69812763:
cordova-plugin-ionic-webview vulnerable to path traversal
2018/12/19 JVN#99810718:
Multiple vulnerabilities in Toshiba Lighting & Technology Corporation Home gateway
2018/12/14 JVN#87535892:
Multiple vulnerabilities in Aterm WF1200CR and Aterm WG1200CR
2018/12/10 JVN#25385698:
Cybozu Garoon access restriction bypass vulnerability
2018/12/10 JVN#23161885:
Multiple vulnerabilities in Cybozu Remote Service
2018/12/07 JVN#32155106:
Multiple vulnerabilities in i-FILTER
2018/12/06 JVN#89767228:
Multiple vulnerabilities in multiple SEIKO EPSON printers and scanners
2018/11/29 JVN#36895151:
Panasonic applications register unquoted service paths
2018/11/28 JVN#25359688:
EC-CUBE vulnerable to open redirect
2018/11/28 JVN#78422300:
The installer of MARKET SPEED may insecurely load Dynamic Link Libraries
2018/11/27 JVN#55263945:
Multiple vulnerabilities in RICOH Interactive Whiteboard
2018/11/20 JVN#65082538:
Multiple vulnerabilities in Panasonic BN-SDWBP3
2018/11/16 JVNVU#91640357:
みずほ銀行 みずほダイレクトアプリ for Android fails to verify SSL server certificates
2018/11/14 JVN#16697622:
Cybozu Dezie vulnerable to directory traversal
2018/11/14 JVN#15232217:
Multiple directory traversal vulnerabilities in Cybozu Office
2018/11/14 JVN#83739174:
Cybozu Mailwise vulnerable to directory traversal
2018/11/09 JVN#85760090:
Multiple vulnerabilities in WordPress plugin "LearnPress"
2018/11/09 JVN#15709478:
The installer of Windows10 Fall Creators Update Modify module for Security Measures tool may insecurely load Dynamic Link Libraries
2018/11/07 JVNVU#98026636:
Multiple vulnerabilities in LogonTracer
2018/11/02 JVN#75738023:
WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting
2018/11/02 JVN#96551318:
Mail app for iOS vulnerable to denial-of-service (DoS)
2018/10/29 JVN#37943805:
Confluence Server vulnerable to script injection
2018/10/26 JVN#59394343:
Multiple vulnerabilities in OpenDolphin
2018/10/24 JVN#21528670:
SecureCore Standard Edition vulnerable to authentication bypass
2018/10/24 JVN#60702986:
BlueStacks App Player fails to restrict access permissions
2018/10/19 JVN#58005743:
Web Isolation vulnerable to cross-site scripting
2018/10/19 JVN#36343375:
Multiple vulnerabilities in YukiWiki
2018/10/15 JVN#95355683:[Critical]
Multiple vulnerabilities in FileZen
2018/10/12 JVN#49995005:
OpenAM (Open Source Edition) vulnerable to session management
2018/10/11 JVN#14323043:
Metabase vulnerable to cross-site scripting
2018/10/09 JVN#73794686:
User-friendly SVN vulnerable to cross-site scripting
2018/10/09 JVN#36623716:
Music Center for PC improperly verifies software update files
2018/10/04 JVN#00344155:
Multiple vulnerabilities in Denbun
2018/10/03 JVN#77885134:
The installer of Baidu Browser may insecurely load Dynamic Link Libraries
2018/09/27 JVN#37288228:
+Message App fails to verify SSL server certificates
2018/09/13 JVN#68528150:
Multiple FXC network devices vulnerable to cross-site scripting
2018/09/10 JVN#12583112:
Cybozu Garoon vulnerable to directory traversal
2018/09/07 JVN#59624986:
Multiple vulnerabilities in INplc
2018/08/31 JVN#02037158:
AttacheCase vulnerable to arbitrary script execution
2018/08/31 JVN#63556416:
QNAP Photo Station vulnerable to cross-site scripting
2018/08/30 JVN#89550319:
Movable Type vulnerable to cross-site scripting
2018/08/29 JVN#69967692:
Multiple script injection vulnerabilities in multiple Yamaha network devices
2018/08/21 JVN#75700242:
The installer of Digital Paper App may insecurely load Dynamic Link Libraries
2018/08/17 JVN#14451678:
NoMachine App for Android vulnerable to environment variables alteration
2018/08/09 JVN#06372244:
Multiple vulnerabilities in EC-CUBE Payment Module and GMO-PG Payment Module (PG Multi-Payment Service) for EC-CUBE
2018/08/07 JVN#83701666:
Multiple vulnerabilities in multiple I-O DATA network camera products
2018/08/06 JVN#62121133:
Multiple directory traversal vulnerabilities in AttacheCase
2018/08/03 JVN#18716340:
Multiple cross-site scripting vulnerabilities in GROWI
2018/07/26 JVN#16933564:
LINE MUSIC for Android fails to verify SSL server certificates
2018/07/24 JVN#41452671:
The installers of multiple Canon IT Solutions Inc. software programs may insecurely load Dynamic Link Libraries
2018/07/23 JVN#39171169:
Installer of ChatWork Desktop App for Windows may insecurely load Dynamic Link Libraries
2018/07/20 JVN#06813756:
DLL planting vulnerability in multiple Yayoi 17 Series products
2018/07/20 JVN#71329812:
WL-330NUL vulnerable to cross-site request forgery
2018/07/18 JVN#37376131:
Multiple vulnerabilities in ORCA(Online Receipt Computer Advantage)
2018/07/18 JVN#62423700:
Movable Type plugin MTAppjQuery vulnerable to PHP code execution
2018/07/17 JVN#70246549:
WordPress plugin "FV Flowplayer Video Player" vulnerable to cross-site scripting
2018/07/13 JVN#55813866:
Explzh vulnerable to directory traversal
2018/07/12 JVN#84825660:
Multiple vulnerabilities in Aterm HC100RC
2018/07/12 JVN#26629618:
Multiple vulnerabilities in Aterm W300P
2018/07/12 JVN#00401783:
Multiple OS command injection vulnerabilities in Aterm WG1200HP
2018/07/06 JVN#52574492:
The installers of multiple Logicool software programs may insecurely load Dynamic Link Libraries
2018/07/06 JVN#77409513:
DHC Online Shop App for Android fails to verify SSL server certificates
2018/07/03 JVN#84967039:
Installer of Glary Utilities may insecurely load Dynamic Link Libraries
2018/07/02 JVN#13415512:
Cybozu Garoon vulnerable to SQL injection
2018/07/02 JVN#63895206:
Multiple vulnerabilities in Calsos CSDX and CSDJ series products
2018/06/28 JVN#00846677:
Mailman vulnerable to cross-site scripting
2018/06/27 JVN#58362455:
MemoCGI vulnerable to directory traversal
2018/06/15 JVN#71535108:
ANA App for iOS fails to verify SSL server certificates
2018/06/15 JVN#98975951:
Chrome Extension "5000 trillion yen converter" vulnerable to cross-site scripting
2018/06/13 JVN#33124193:
Local File Inclusion vulnerability in Zenphoto
2018/06/12 JVN#92265618:
LINE for Windows may insecurely load Dynamic Link Libraries
2018/06/04 JVN#93226941:
H2O vulnerable to buffer overflow
2018/05/31 JVN#27978559:
Multiple vulnerabilities in Pixelpost
2018/05/29 JVN#20040004:
The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" may insecurely invoke an executable file
2018/05/28 JVN#60978548:
WordPress plugin "Site Reviews" vulnerable to cross-site scripting
2018/05/28 JVN#16471686:
WordPress plugin "Email Subscribers & Newsletters" vulnerable to cross-site scripting
2018/05/24 JVN#13940333:
The installer of PlayMemories Home for Windows may insecurely load Dynamic Link Libraries
2018/05/24 JVN#79301396:
Susie plug-in "axpdfium" may insecurely load Dynamic Link Libraries
2018/05/22 JVN#67881316:
Multiple vulnerabilities in baserCMS
2018/05/22 JVN#52319657:
Multiple cross-site scripting vulnerabilities in Cybozu Mailwise
2018/05/22 JVN#51737843:
Multiple vulnerabilities in Cybozu Office
2018/05/21 JVN#96954395:
Nessus vulnerable to cross-site scripting
2018/05/17 JVN#81196185:
The installer of Visual C++ Redistributable may insecurely load Dynamic Link Libraries
2018/05/17 JVN#72748502:
Self-Extracting Archive files created by IExpress may insecurely load Dynamic Link Libraries
2018/05/17 JVN#91151862:
Multiple Microsoft Windows applications and installers may insecurely load Dynamic Link Libraries
2018/05/11 JVN#83671755:
KINEPASS App fails to verify SSL server certificates
2018/05/11 JVN#27137002:
IIJ SmartKey App for Android vulnerable to authentication bypass
2018/05/10 JVN#28804532:
Multiple vulnerabilities in WordPress plugin "Ultimate Member"
2018/05/09 JVN#34562916:
RT-AC1200HP vulnerable to cross-site scripting
2018/05/09 JVN#73742314:
RT-AC68U vulnerable to cross-site scripting
2018/05/09 JVN#33901663:
RT-AC87U vulnerable to cross-site scripting
2018/04/27 JVN#08386386:
WordPress plugin "Open Graph for Facebook, Google+ and Twitter Card Tags" vulnerable to cross-site scripting
2018/04/27 JVN#61081552:
WordPress plugin "PixelYourSite" vulnerable to cross-site scripting
2018/04/27 JVN#01040170:
WordPress plugin "WP Google Map Plugin" vulnerable to cross-site scripting
2018/04/27 JVN#85531148:
WordPress plugin "Events Manager" vulnerable to cross-site scripting
2018/04/27 JVN#68345747:
The installers of multiple CELSYS,Inc. software may insecurely load Dynamic Link Libraries
2018/04/26 JVN#95589314:
Joruri Gw vulnerable to arbitrary file upload
2018/04/17 JVN#52695336:
EC-CUBE vulnerable to session fixation
2018/04/13 JVN#85056623:
Installer of SoundEngine Free may insecurely load Dynamic Link Libraries
2018/04/12 JVN#92220486:
The installer of PhishWall Client Internet Explorer edition may insecurely load Dynamic Link Libraries
2018/04/12 JVN#71255137:
Tenable Appliance vulnerable to cross-site scripting
2018/04/10 JVN#77753476:
Hatena Bookmark App for iOS contains an address bar spoofing vulnerability
2018/04/09 JVN#65268217:
Multiple vulnerabilities in Cybozu Garoon
2018/03/30 JVN#01161596:
Safari vulnerable to script injection
2018/03/29 JVN#72589538:
LXR vulnerable to OS command injection
2018/03/29 JVN#93397125:
Multiple vulnerabilities in WZR-1750DHP2
2018/03/27 JVN#43382653:
iRemoconWiFi App for Android fails to verify SSL server certificates
2018/03/15 JVN#39896275:
The installer of PhishWall Client Firefox and Chrome edition for Windows may insecurely load Dynamic Link Libraries
2018/03/13 JVN#87226910:[Unreachable]
WebProxy vulnerable to directory traversal
2018/03/13 JVN#22536871:[Unreachable]
QQQ SYSTEMS vulnerable to arbitrary command injection
2018/03/13 JVN#92259864:[Unreachable]
TinyFTP Daemon vulnerable to buffer overflow
2018/03/13 JVN#56764650:[Unreachable]
ViX may insecurely load Dynamic Link Libraries
2018/03/13 JVN#48774168:[Unreachable]
PHP 2chBBS vulnerable to cross-site scripting
2018/03/13 JVN#46471407:[Unreachable]
QQQ SYSTEMS vulnerable to cross-site scripting
2018/03/13 JVN#96655441:[Unreachable]
QQQ SYSTEMS vulnerable to cross-site scripting
2018/03/13 JVN#64990648:[Unreachable]
QQQ SYSTEMS vulnerable to cross-site scripting
2018/03/13 JVN#30864198:[Unreachable]
ArsenoL vulnerable to cross-site scripting
2018/03/09 JVN#15201064:
Multiple vulnerabilities in CG-WGR1200
2018/03/08 JVN#60032768:
WordPress plugin "WP All Import" vulnerable to cross-site scripting
2018/03/08 JVN#33527174:
WordPress plugin "WP All Import" vulnerable to cross-site scripting
2018/03/05 JVN#01837169:
Installer of WinShot may insecurely load Dynamic Link Libraries
2018/03/05 JVN#71816327:
Installer of JTrim may insecurely load Dynamic Link Libraries
2018/03/02 JVN#56132776:
Multiple vulnerabilities in Jubatus
2018/02/26 JVN#97144273:
Multiple vulnerabilities in WXR-1900DHP2
2018/02/20 JVN#75453852:
LINE for iOS fails to verify SSL server certificates
2018/02/20 JVN#83834277:
Multiple vulnerabilities in FS010W
2018/02/15 JVN#28865183:
Insecure DLL Loading issue in multiple Trend Micro products
2018/02/13 JVN#87403477:
Application and self-extracting archive containing the application of "FLET'S v4 / v6 address selection tool" may insecurely load Dynamic Link Libraries
2018/02/13 JVN#04564808:
Installer of ”FLET'S Azukeru Backup Tool” may insecurely load Dynamic Link Libraries
2018/02/08 JVN#15462187:
MP Form Mail CGI eCommerce Edition vulnerable to OS command injection
2018/02/06 JVN#70615027:
The installer of Anshin net security for Windows may insecurely load Dynamic Link Libraries
2018/02/06 JVN#36048131:
Multiple I-O DATA network devices incorporating "MagicalFinder" vulnerable to OS command injection
2018/02/02 JVN#99312352:
WordPress plugin "MTS Simple Booking C" vulnerable to cross-site scripting
2018/02/02 JVN#15643848:
Spring Security and Spring Framework vulnerable to authentication bypass
2018/02/01 JVN#91393903:
Multiple vulnerabilities in epg search result viewer(kkcald)
2018/01/30 JVN#30636823:
WordPress plugin "WP Retina 2x" vulnerable to cross-site scripting
2018/01/30 JVNVU#95587881:
Deep Discovery Email Inspector vulnerable to arbitrary code execution
2018/01/22 JVN#26255241:
The installer of "FLET'S VIRUS CLEAR Easy Setup & Application Tool" and "FLET'S VIRUS CLEAR v6 Easy Setup & Application Tool" may insecurely load Dynamic Link Libraries
2018/01/19 JVN#10103841:
Nootka App for Android vulnerable to OS command injection
2018/01/19 JVN#26200083:
GroupSession vulnerable to open redirect
2018/01/16 JVNVU#95303354:
Multiple vulnerabilities in Deep Discovery Email Inspector
2018/01/16 JVNVU#91290407:
Trend Micro Control Manager vulnerable to SQL injection
2018/01/11 JVN#57842148:
Lhaplus vulnerable to improper verification when expanding ZIP64 archives

2017

2017/12/26 JVNVU#98736894:
Multiple vulnerabilities in InterScan Messaging Security Virtual Appliance
2017/12/25 JVN#45494523:
MQTT.js issue in handling PUBLISH packets
2017/12/22 JVN#60695371:
The installer of Music Center for PC may insecurely load Dynamic Link Libraries
2017/12/22 JVN#95423049:
The installer of Content Manager Assistant for PlayStation may insecurely load Dynamic Link Libraries
2017/12/19 JVN#93333702:
OneThird CMS vulnerable to directory traversal
2017/12/18 JVN#84182676:
Multiple vulnerabilities in H2O
2017/12/11 JVN#27342829:
Qt for Android environment variables alteration
2017/12/11 JVN#67389262:
Qt for Android vulnerable to OS command injection
2017/12/08 JVNVU#95124098:
Fluentd vulenrable to escape sequence injection
2017/12/06 JVN#30352845:
The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries
2017/12/01 JVN#65994435:
Multiple vulnerabilities in multiple Buffalo broadband routers
2017/11/30 JVN#78501037:
Movable Type plugin A-Member and A-Reserve vulnerable to SQL injection
2017/11/30 JVN#98295787:
Multiple vulnerabilities in Wireless mobile storage "Digizo ShAirDisk" PTW-WMS1
2017/11/29 JVN#71291160:
StreamRelay.net.exe and sDNSProxy.exe vulnerable to denial-of-service (DoS)
2017/11/27 JVNVU#94198685:
QND Advance/Standard vulnerable to directory traversal
2017/11/22 JVN#73141967:
PWR-Q200 vulnerable to DNS cache poisoning attacks
2017/11/21 JVN#08517069:
The installer of Media Go and Music Center for PC may insecurely load Dynamic Link Libraries
2017/11/16 JVN#76382932:
Robotic appliance COCOROBO vulnerable to session management
2017/11/14 JVNVU#94371484:
Packetbeat vulnerable to denial-of-service (DoS)
2017/11/14 JVN#05398317:
WordPress plugin "TablePress" vulnerable to improper restriction of XML external entity (XXE) references
2017/11/14 JVN#18420340:
Multiple vulnerabilities in BOOK WALKER for Windows/Mac
2017/11/13 JVN#29602086:
CS-Cart Japanese Edition vulnerable to cross-site scripting
2017/11/09 JVN#71284826:
Installer of HYPER SBI may insecurely load Dynamic Link Libraries
2017/11/06 JVN#23367475:
Wi-Fi STATION L-02F vulnerable to buffer overflow
2017/11/06 JVN#87886530:
I-O DATA LAN DISK Connect vulnerable to denial-of-service (DoS)
2017/11/02 JVN#97243511:
Installer of ”Flets Easy Setup Tool" may insecurely load Dynamic Link Libraries
2017/11/01 JVNVU#94207433:
Multiple vulnerabilities in Trend Micro Control Manager
2017/11/01 JVN#79546124:
OpenAM (Open Source Edition) vulnerable to authentication bypass
2017/10/24 JVNVU#93703434:
Memory corruption vulnerability in Rakuraku Hagaki and Rakuraku Hagaki Select for Ichitaro
2017/10/17 JVN#54795166:
Home unit KX-HJB1000 contains multiple vulnerabilities
2017/10/16 JVNVU#91625548:
AssetView and AssetView PLATINUM contain multiple vulnerabilities
2017/10/11 JVN#94056834:
Installer of HIBUN Confidential File Viewer may insecurely load Dynamic Link Libraries and invoke executable files
2017/10/11 JVN#55516206:
HIBUN Confidential File Decryption program may insecurely load Dynamic Link Libraries
2017/10/11 JVN#58909026:
HIBUN Confidential File Decryption program may insecurely load Dynamic Link Libraries
2017/10/11 JVN#14658424:
Cybozu Office fails to restrict access permissions
2017/09/25 JVNVU#90916766:
jwt-scala fails to verify token signatures
2017/09/20 JVNVU#90447827:
InterScan Web Security Virtual Appliance vulnerable to code injection
2017/09/20 JVNVU#93240386:
Multiple vulnerabilities in ServerProtect for Linux
2017/09/14 JVN#75929834:
Install program and Installer of i-フィルター 6.0 may insecurely load Dynamic Link Libraries and invoke executable files
2017/09/12 JVN#03044183:
Wi-Fi STATION L-02F fails to restrict access permissions
2017/09/12 JVN#68922465:
Backdoor access issue in Wi-Fi STATION L-02F
2017/09/11 JVN#76692689:
SEIL Series routers vulnerable to denial-of-service (DoS)
2017/09/11 JVN#57205588:
Installer of FENCE-Explorer may insecurely load Dynamic Link Libraries and invoke executable files
2017/09/08 JVN#00719891:
Multiple vulnerabilities in CG-WLR300NM
2017/08/31 JVN#09769017:
Multiple Fuji Xerox products may insecurely load Dynamic Link Libraries
2017/08/30 JVN#26115441:
Installer of ”Remote Support Tool (Enkaku Support Tool)” may insecurely load Dynamic Link Libraries
2017/08/25 JVN#22272314:
Installer of "Flets Setsuzoku Tool" may insecurely load Dynamic Link Libraries
2017/08/25 JVN#36303528:
Installer and self-extracting archive containing the installer of "Security Setup Tool" may insecurely load Dynamic Link Libraries
2017/08/25 JVN#14926025:
Installer of ”Flets Install Tool” may insecurely load Dynamic Link Libraries
2017/08/25 JVN#14658714:
Installer of "Flets Azukeru for Windows Auto Backup Tool" may insecurely load Dynamic Link Libraries
2017/08/25 JVN#11601216:
Installer of "Security Kinou Mihariban" may insecurely load Dynamic Link Libraries
2017/08/25 JVN#87540575:
Installer of Optimal Guard may insecurely load Dynamic Link Libraries
2017/08/25 JVN#78151490:
Multiple vulnerabilities in baserCMS
2017/08/24 JVN#58559719:
WordPress plugin "BackupGuard" vulnerable to cross-site scripting
2017/08/24 JVN#39628662:
Multiple vulnerabilities in SEO Panel
2017/08/24 JVN#23340457:
Multiple vulnerabilities in WebCalendar
2017/08/23 JVN#30866130:
The installer of the Ministry of Justice [The electronic authentication system based on the commercial registration system "The CRCA user's Software"] may insecurely load Dynamic Link Libraries
2017/08/23 JVN#87410770:
Multiple vulnerabilities in "Dokodemo eye Smart HD" SCR02HD
2017/08/22 JVN#67954465:
Installer of Photo Collection PC Software provided by NTT DOCOMO, INC. may insecurely load Dynamic Link Libraries and invoke executable files
2017/08/21 JVN#63564682:
Multiple vulnerabilities in Cybozu Garoon
2017/08/18 JVN#18641169:
Installer and self-extracting archive containing the installer of TDB CA TypeA use software may insecurely load Dynamic Link Libraries
2017/08/17 JVN#23546631:
Installer of Shin Kinkyuji Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries
2017/08/17 JVN#71104430:
Installer of Shin Sekiyu Yunyu Chousa Houkoku Data Nyuryoku Program may insecurely load Dynamic Link Libraries
2017/08/17 JVN#73559859:
Installer of Shin Kikan Toukei Houkoku Data Nyuryokuyou Program may insecurely load Dynamic Link Libraries
2017/08/17 JVN#53292345:
Teikihoukokusho Sakuseishien Tool may insecurely load Dynamic Link Libraries
2017/08/08 JVN#81659403:
Installer of Qua station connection tool for Windows may insecurely load Dynamic Link Libraries
2017/08/08 JVN#74871939:
WSR-300HP vulnerable to arbitrary code execution
2017/08/08 JVN#05340005:
WCR-1166DS vulnerable to OS command injection
2017/08/03 JVN#86724730:
Installer of IP Messenger may insecurely load Dynamic Link Libraries
2017/08/03 JVN#17788774:
Installer of Baidu IME may insecurely load Dynamic Link Libraries
2017/08/01 JVNVU#91587298:
Multiple vulnerabilities in MaLion
2017/07/27 JVN#74554973:
Installer of LhaForge may insecurely load Dynamic Link Libraries
2017/07/27 JVN#33797604:
NFC Port Software remover may insecurely load Dynamic Link Libraries
2017/07/27 JVN#16136413:
Installers of Sony PaSoRi related software may insecurely load Dynamic Link Libraries
2017/07/27 JVN#51410509:
I-O DATA WN-G300R31 uses hard-coded credentials
2017/07/27 JVN#01312667:
Multiple vulnerabilities in I-O DATA WN-AX1167GR
2017/07/24 JVN#17523256:
Installer of Tween may insecurely load Dynamic Link Libraries
2017/07/24 JVN#24238648:
RBB SPEED TEST App fails to verify SSL server certificates
2017/07/24 JVN#31459091:
WordPress plugin "Simple Custom CSS and JS" vulnerable to cross-site scripting
2017/07/24 JVN#92921024:
WordPress plugin "Popup Maker" vulnerable to cross-site scripting
2017/07/24 JVN#74247807:
Multiple cross-site scripting vulnerabilities in ScreenOS
2017/07/20 JVNVU#98807587:
gSOAP vulnerable to stack-based buffer overflow
2017/07/20 JVN#48413726:
Multiple vulnerabilities in multiple Buffalo wireless LAN routers
2017/07/20 JVN#48823557:
Multiple Buffalo wireless LAN access point devices do not properly perform authentication
2017/07/19 JVN#77412145:
SONY Portable Wireless Server WG-C10 fails to restrict access permissions
2017/07/19 JVN#14151222:
Multiple vulnerabilities SONY Portable Wireless Server WG-C10
2017/07/14 JVNVU#93377948:
Multiple vulnerabilities in "File Transfer Web Service" of AssetView for MacOS
2017/07/14 JVN#61502349:
Self-Extracting Encrypted Files created by AttacheCase may insecurely load Dynamic Link Libraries
2017/07/13 JVN#42031953:
FileCapsule Deluxe Portable and Encrypted Files in Self-Decryption Format created by FileCapsule Deluxe Portable may insecurely load Dynamic Link Libraries
2017/07/12 JVN#02852421:
Installer of Yahoo! Toolbar (for Internet explorer) may insecurely load Dynamic Link Libraries
2017/07/11 JVN#81676004:
Installers of Mozilla Firefox and Thunderbird for Windows may insecurely load Dynamic Link Libraries
2017/07/10 JVN#29939155:
Self-Extracting Archives created by File Compact may insecurely load Dynamic Link Libraries
2017/07/07 JVN#21627267:
Microsoft IME may insecurely load Dynamic Link Libraries
2017/07/07 JVN#21369452:
Installers of Lhaz and Lhaz+, and Self-Extracting Archives created by Lhaz or Lhaz+ may insecurely load Dynamic Link Libraries
2017/07/06 JVN#63249051:
WordPress plugin "Shortcodes Ultimate" vulnerable to directory traversal
2017/07/04 JVN#39819446:
WordPress plugin "Responsive Lightbox" vulnerable to cross-site scripting
2017/07/04 JVN#20409270:
Installer of Douroshisetu Kihon Data Sakusei System may insecurely load Dynamic Link Libraries
2017/07/04 JVN#82120115:
Installer of Douro Kouji Kanseizutou Check Program may insecurely load Dynamic Link Libraries
2017/07/04 JVN#95996423:
MFC-J960DWN vulnerable to cross-site request forgery
2017/07/03 JVN#06337557:
Installer and self-extracting archive containing the installer of MLIT DenshiSeikabutsuSakuseiShienKensa system may insecurely load Dynamic Link Libraries
2017/07/03 JVN#43534286:
Multiple vulnerabilities in Cybozu Garoon
2017/06/30 JVN#45134765:
Installer of PDF Digital Signature Plugin provided by the Ministry of Justice may insecurely load Dynamic Link Libraries
2017/06/30 JVN#23389212:
Installer of Shinseiyou Sougou Soft provided by The Ministry of Justice may insecurely load Dynamic Link Libraries
2017/06/28 JVN#79451345:
Installer of Setup file of advance preparation for e-Tax software (WEB version) may insecurely load Dynamic Link Libraries
2017/06/28 JVN#21174546:
Marp vulnerable to improper access control in JavaScript execution
2017/06/27 JVN#85901441:
Multiple vulnerabilities in Toshiba Lighting & Technology Corporation Home gateway
2017/06/26 JVN#01775119:
Denshi Nyusatsu Check Tool provided by Ministry of Education, Culture, Sports, Science and Technology may insecurely load Dynamic Link Libraries
2017/06/23 JVN#09293613:
Installer of Charamin OMP may insecurely load Dynamic Link Libraries
2017/06/20 JVN#24348065:
Multiple vulnerabilities in HOME SPOT CUBE2
2017/06/20 JVN#73550134:
WordPress plugin "Event Calendar WD" vulnerable to cross-site scripting
2017/06/20 JVN#65411235:
Multiple I-O DATA network camera products vulnerable to cross-site request forgery
2017/06/15 JVN#56787058:
WordPress plugin "WP Job Manager" fails to restrict access permissions
2017/06/13 JVN#94771799:
Installer of QuickTime for Windows may insecurely load Dynamic Link Libraries
2017/06/13 JVN#79738260:
Multiple vulnerabilities in WordPress plugin "WordPress Download Manager"
2017/06/13 JVN#25078144:
Source code security studying tool iCodeChecker vulnerable to cross-site scripting
2017/06/13 JVN#51355647:
WordPress plugin "WP-Members" vulnerable to cross-site scripting
2017/06/12 JVN#27198823:
Installer of electronic tendering and bid opening system provided by Acquisition, Technology & Logistics Agency may insecurely invoke an executable file
2017/06/12 JVN#56588965:
Cybozu KUNAI for Android vulnerable to cross-site scripting
2017/06/09 JVN#65154137:
Installer of Denshinouhin Check System (for Ministry of Agriculture, Forestry and Fisheries Nouson Seibi Jigyou) may insecurely load Dynamic Link Libraries
2017/06/09 JVN#34508179:
Installer of "Setup file of advance preparation" may insecurely load Dinamic Link Libraries
2017/06/09 JVN#67305782:
Installer of CASL II simulator(self-extract format) may insecurely load Dynamic Link Libraries
2017/06/08 JVN#31236539:
[Simeji for Windows(β)] installer may insecurely load Dynamic Link Libraries
2017/06/08 JVN#52691241:
Multiple installers of the software provided by Geospatial Information Authority of Japan (GSI) may insecurely load Dynamic Link Libraries
2017/06/07 JVN#99737748:
AppCheck may insecurely invoke an executable file
2017/06/06 JVN#01404851:
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution
2017/06/06 JVN#20870477:
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution
2017/06/06 JVN#32120290:
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to information disclosure
2017/06/06 JVN#80238098:
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution
2017/06/06 JVN#98617234:
WordPress plugin "Multi Feed Reader" vulnerable to SQL injection
2017/06/05 JVN#24087303:
Installer of Houkokusyo Sakusei Shien Tool provided by Ministry of the Environment may insecurely load Dynamic Link Libraries
2017/06/02 JVN#08020381:
Installer of SaAT Personal may insecurely load Dynamic Link Libraries
2017/06/02 JVN#91170929:
Installer of SaAT Netizen may insecurely load Dynamic Link Libraries
2017/06/01 JVN#06770361:
Installer of Tera Term may insecurely load Dynamic Link Libraries
2017/06/01 JVN#51274854:
Multiple software for Sharp IC Card Reader/Writer Devices may insecurely load Dynamic Link Libraries
2017/06/01 JVN#70951878:
WordPress plugin "WP Live Chat Support" vulnerable to cross-site scripting
2017/05/26 JVN#92422409:
The installer of the Ministry of Justice [The electronic authentication system based on the commercial registration system "The CRCA user's Software"] may insecurely load Dynamic Link Libraries
2017/05/25 JVNTA#91240916:
Insecure DLL Loading and Command Execution Issues on Many Windows Application Programs
2017/05/25 JVN#41185163:
Installers of the screensavers provided by JAPAN AIR SELF DEFENSE FORCE, MINISTRY OF DEFENSE may insecurely load Dynamic Link Libraries
2017/05/25 JVN#75514460:
Installer of electronic tendering and bid opening system provided by Acquisition, Technology & Logistics Agency may insecurely load Dynamic Link Libraries
2017/05/25 JVN#42164352:
GroupSession fails to restrict access permissions
2017/05/24 JVN#91438377:
SSL Visibility Appliance may generate illegal RST packets
2017/05/19 JVN#12493656:
The installer of Empirical Project Monitor - eXtended may insecurely load Dynamic Link Libraries
2017/05/19 JVN#11326581:
Empirical Project Monitor - eXtended vulnerable to cross-site scripting
2017/05/19 JVN#85512750:
Empirical Project Monitor - eXtended vulnerable to cross-site scripting
2017/05/16 JVN#81820501:
FlashAir do not set credential information in PhotoShare
2017/05/16 JVN#46372675:
FlashAir fails to restrict access permissions in PhotoShare
2017/05/16 JVN#96165722:
WordPress plugin "WP Booking System" vulnerable to cross-site scripting
2017/05/16 JVN#24834813:
Multiple BestWebSoft WordPress plugins vulnerable to cross-site scripting
2017/05/16 JVN#70411623:
WordPress plugin "MaxButtons" vulnerable to cross-site scripting
2017/05/12 JVN#16248227:
PrimeDrive Desktop Application Installer may insecurely load executable files
2017/05/11 JVN#51978169:
The installer of SOY CMS vulnerable to cross-site scripting
2017/05/11 JVN#51819749:
SOY CMS vulnerable to directory traversal
2017/05/09 JVN#39605485:
The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries
2017/05/09 JVN#87760109:
Nessus vulnerable to cross-site scripting
2017/04/25 JVN#71572107:
Installer of Vivaldi for Windows may insecurely load executable files
2017/04/21 JVN#48790793:
WNC01WH vulnerable to OS command injection
2017/04/20 JVN#54268888:
Multiple JustSystems products including Hanako may insecurely load Dynamic Link Libraries
2017/04/20 JVN#93931029:
Hoozin Viewer vulnerable to buffer overflow
2017/04/20 JVN#54762089:
WordPress plugin "Booking Calendar" vulnerable to cross-site scripting
2017/04/20 JVN#18739672:
WordPress plugin "Booking Calendar" vulnerable to directory traversal
2017/04/19 JVN#86171513:
SEIL Series routers vulnerable to denial-of-service (DoS)
2017/04/18 JVN#08740778:
NETGEAR ProSAFE Plus Configuration Utility vulnerable to improper access control
2017/04/14 JVN#05340816:
Multiple installers of Toshiba memory card related software may insecurely load Dynamic Link Libraries
2017/04/14 JVN#01537659:
WN-AC1167GR vulnerable to cross-site scripting
2017/04/13 JVN#77253951:
WordPress plugin "WP Statistics" vulnerable to cross-site scripting
2017/04/13 JVN#62392065:
WordPress plugin "WP Statistics" vulnerable to cross-site scripting
2017/04/11 JVN#17535578:
Multiple vulnerabilities in Cybozu Office
2017/04/11 JVN#82019695:
ASSETBASE vulnerable to cross-site scripting
2017/04/10 JVN#87770873:
CS-Cart Japanese Edition vulnerable to cross-site request forgery
2017/04/10 JVN#14396697:
CS-Cart Japanese Edition fails to restrict access permissions
2017/04/10 JVN#25598952:
​CS-Cart Japanese Edition fails to restrict access permissions
2017/04/10 JVN#81024552:
Multiple vulnerabilities in WN-G300R3
2017/04/10 JVN#17633442:
WordPress plugin "WP Statistics" vulnerable to cross-site scripting
2017/04/07 JVN#64451600:
Tablacus Explorer vulnerable to script injection
2017/03/30 JVN#55121369:
CentreCOM AR260S V2 vulnerable to privilege escalation
2017/03/23 JVN#55294532:
WordPress plugin "YOP Poll" vulnerable to cross-site scripting
2017/03/22 JVN#93699304:
Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries
2017/03/16 JVN#11448789:
Security guide for website operators vulnerable to OS command injection
2017/03/13 JVN#88745657:
Cybozu KUNAI for Android information management vulnerability
2017/03/07 JVN#13003724:
OneThird CMS vulnerable to cross-site scripting
2017/03/07 JVN#49408248:
OneThird CMS vulnerable to cross-site scripting
2017/03/02 JVN#46830433:
Multiple I-O DATA network camera products multiple vulnerabilities
2017/03/01 JVN#88713190:
PrimeDrive Desktop Application Installer may insecurely load Dynamic Link Libraries
2017/03/01 JVN#82619692:
Access CX App fails to verify SSL server certificates
2017/02/28 JVN#73083905:
Multiple vulnerabilities in WBCE CMS
2017/02/28 JVN#63474730:
CubeCart vulnerable to directory traversal
2017/02/27 JVNVU#98045645:
Ichitaro series vulnerable to heap-based buffer overflow
2017/02/20 JVN#73182875:
Multiple vulnerabilities in Cybozu Garoon
2017/02/17 JVN#86200862:
Self-Extracting Archives created by 7-ZIP32.DLL may insecurely load Dynamic Link Libraries
2017/02/15 JVN#55489964:
Multiple vulnerabilities in Apache Brooklyn
2017/02/10 JVN#53880182:
TVer App for Android fails to verify SSL server certificates
2017/02/10 JVN#40667528:
Norton Download Manager may insecurely load Dynamic Link Libraries
2017/02/09 JVN#39008927:
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to cross-site request forgery
2017/02/09 JVN#88176589:
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to authentication bypass
2017/02/09 JVN#87662835:
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to DNS rebinding
2017/02/09 JVN#71666779:
Hands-on Vulnerability Learning Tool "AppGoat" vulnerable to remote code execution
2017/02/09 JVN#34207650:
Multiple cross-site scripting vulnerabilities in Webmin
2017/02/03 JVN#21114208:
Business LaLa Call App for Android fails to verify SSL server certificates
2017/02/03 JVN#01014759:
LaLa Call App for Android fails to verify SSL server certificates
2017/01/27 JVN#81618356:
CubeCart vulnerable to directory traversal
2017/01/24 JVN#09460804:
Knowledge vulnerable to cross-site request forgery
2017/01/24 JVN#12796388:
Nessus vulnerable to cross-site scripting
2017/01/24 JVN#50197114:
smalruby-editor vulnerable to OS command injection
2017/01/20 JVN#92395431:
Java (OGNL) code execution in Apache Struts 2 when devMode is enabled
2017/01/19 JVNVU#91417143:
Multiple vulnerabilities in GigaCC OFFICE
2017/01/16 JVN#28331227:
MaruUo Factory's multiple AttacheCase products vulnerable to directory traversal
2017/01/16 JVN#83917769:
AttacheCase vulnerable to directory traversal
2017/01/11 JVN#19241292:
Cybozu Remote Service Manager fails to verify client certificates
2017/01/06 JVN#71538099:
Olive Diary DX vulnerable to cross-site scripting
2017/01/06 JVN#12124922:
WEB SCHEDULE vulnerable to cross-site scripting
2017/01/06 JVN#60879379:
Olive Blog vulnerable to cross-site scripting

2016

2016/12/26 JVN#96681653:
WinSparkle issue where registry value is not validated
2016/12/26 JVN#90813656:
Wireshark for Windows issue where an arbitrary file may be deleted
2016/12/22 JVN#44566208:
H2O use-after-free vulnerability
2016/12/22 JVN#38755305:
BlueZ userland utilities vulnerable to buffer overflow
2016/12/22 JVN#84995847:[Critical]
SKYSEA Client View vulnerable to arbitrary code execution
2016/12/19 JVN#17980240:
Cybozu Garoon vulnerable to SQL injection
2016/12/19 JVN#16200242:
Cybozu Garoon vulnerable to directory traversal
2016/12/19 JVN#15222211:
Cybozu Garoon vulnerable to cross-site request forgery
2016/12/19 JVN#14631222:
Cybozu Garoon fails to restrict access permissions
2016/12/19 JVN#13218253:
Cybozu Garoon vulnerable to information disclosure
2016/12/19 JVN#12281353:
Cybozu Garoon vulnerable to cross-site scripting
2016/12/16 JVN#42070907:
Mutiple SONY Videoconference Systems do not properly perform authentication
2016/12/13 JVN#78980598:
Apache ActiveMQ vulnerable to cross-site scripting
2016/12/12 JVN#16781735:
Multiple access restriction bypass vulnerabilities in Cybozu Dezie
2016/12/07 JVN#28151745:
Sleipnir for Mac vulnerable to URL spoofing
2016/12/06 JVNVU#92900492:
三菱東京UFJ銀行 for Android vulnerable to SSL/TLS downgrade attack
2016/12/02 JVN#40613060:
Multiple vulnerabilities in WNC01WH
2016/12/01 JVN#08868688:
The installers of multiple Japan Pension Service software may insecurely load Dynamic Link Libraries
2016/11/30 JVN#25059363:
Multiple I-O DATA network camera products multiple vulnerabilities
2016/11/29 JVNVU#96435227:
Multiple SONY network cameras vulnerable to sensitive information disclosure
2016/11/28 JVN#20252219:
kintone mobile for Android fails to verify SSL server certificates
2016/11/25 JVN#05493467:
Simple keitai chat vulnerable to cross-site scripting
2016/11/18 JVNTA#94087669:
Using specially crafted PDF files to steal information
2016/11/15 JVN#75396659:
DERAEMON-CMS vulnerable to cross-site scripting
2016/11/11 JVN#23549283:
CG-WLR300NX fails to restrict access permissions
2016/11/11 JVN#92237169:
CG-WLR300NX vulnerable to cross-site scripting
2016/11/11 JVN#23823838:
CG-WLR300NX vulnerable to cross-site request forgery
2016/11/11 JVN#25060672:
Multiple Corega wireless LAN routers vulnerable to cross-site scripting
2016/11/11 JVN#34103586:
Multiple I-O DATA network camera products vulnerable to information disclosure
2016/11/02 JVN#18228200:
Multiple vulnerabilities in WFS-SR01
2016/11/01 JVN#91002412:
The installer of The Public Certification Service for Individuals "The JPKI user's software" may insecurely load Dynamic Link Libraries
2016/11/01 JVN#27260483:
mobiGate App fails to verify SSL server certificates
2016/10/26 JVN#76780067:
Installer of 7-Zip for Windows may insecurely load Dynamic Link Libraries
2016/10/20 JVN#14567604:
Multiple vulnerabilities in WordPress plugin WP-OliveCart
2016/10/19 JVN#03251132:
Installer of Evernote for Windows may insecurely load Dynamic Link Libraries
2016/10/18 JVN#63012325:
The installer of e-Tax Software may insecurely load Dynamic Link Libraries
2016/10/13 JVN#70380788:
BASP21 vulnerable to mail header injection
2016/10/07 JVN#39619137:
Toshiba FlashAir does not require authentication in "Internet pass-thru Mode"
2016/10/07 JVN#32504719:
Usermin cross-site scripting vulnerabilties
2016/10/07 JVN#80157683:
SetucoCMS multiple vulnerabilities
2016/10/07 JVN#20786316:
Cryptography API: Next Generation (CNG) vulnerable to denial-of-service (DoS)
2016/10/03 JVN#11288252:
Cybozu Office vulnerable to Reflected File Download (RFD)
2016/10/03 JVN#10092452:
Cybozu Office vulnerable to denial-of-service (DoS)
2016/10/03 JVN#09736331:
Cybozu Office vulnerable to information disclosure
2016/10/03 JVN#08736331:
Cybozu Office vulnerable to mail header injection
2016/10/03 JVN#07148816:
Multiple access restriction bypass vulnerabilities in Cybozu Office
2016/10/03 JVN#06726266:
Cybozu Office multiple cross-site scripting vulnerabilities
2016/10/03 JVN#46351856:
Docomo L-04D mobile WiFi router vulnerable to cross-site request forgery
2016/09/29 JVN#92765814:
Multiple vulnerabilities in baserCMS
2016/09/29 JVN#72559412:
ManageEngine ServiceDesk Plus uses an insecure method for cookie generation
2016/09/29 JVN#89726415:
ManageEngine ServiceDesk Plus fails to restrict access permissions
2016/09/29 JVN#50347324:
ManageEngine ServiceDesk Plus vulnerable to cross-site scripting
2016/09/23 JVN#46087986:
Multiple plugins for Geeklog IVYWE edition vulnerable to cross-site scripting
2016/09/20 JVN#49343562:
Money Forward Apps for Android vulnerability that allows unintended operations
2016/09/20 JVN#61297210:
Money Forward Apps for Android vulnerable in the WebView class
2016/09/16 JVN#98126322:
Trend Micro Internet Security vulnerability where files may be excluded as scan targets
2016/09/16 JVN#74244518:
Splunk Enterprise and Splunk Light vulnerable to cross-site scripting
2016/09/16 JVN#64800312:
Splunk Enterprise and Splunk Light vulnerable to open redirect
2016/09/16 JVN#39926655:
Splunk Enterprise and Splunk Light vulnerable to open redirect
2016/09/16 JVN#71462075:
Splunk Enterprise and Splunk Lite vulnerable to cross-site scripting
2016/09/15 JVN#94779084:
H2O use of externally-controlled format string
2016/09/15 JVN#18926672:
Zend Framework vulnerable to SQL injection
2016/09/14 JVN#55389065:
CS-Cart add-on "Twigmo" vulnerable to PHP object injection
2016/09/06 JVN#48237713:
ADOdb vulnerable to cross-site scripting
2016/08/31 JVN#85213412:
Multiple AKABEi SOFT2 LTD. games vulnerable to OS command injection
2016/08/25 JVN#05924524:
LINE for Windows fails to properly verify downloaded files
2016/08/24 JVN#94816361:
YoruFukurou (NightOwl) vulnerable to denial-of-service (DoS)
2016/08/23 JVN#42262137:
simple chat vulnerable to cross-site scripting
2016/08/22 JVN#93411577:
Cybozu Garoon fails to restrict access permissions
2016/08/22 JVN#89211736:
Cybozu Garoon vulnerable to authentication bypass
2016/08/22 JVN#83568336:
Cybozu Garoon vulnerable to SQL injection
2016/08/22 JVN#67595539:
Cybozu Garoon multiple cross-site scripting vulnerabilities
2016/08/22 JVN#67266823:
Cybozu Garoon vulnerable to open redirect
2016/08/19 JVN#09836883:
Geeklog IVYWE edition contains a cross-site scripting vulnerability
2016/08/18 JVN#58455472:
OSSEC Web UI vulnerable to cross-site scripting
2016/08/18 JVN#28386124:
ClipBucket vulnerable to cross-site scripting
2016/08/17 JVN#45583702:
Installer of PhishWall Client Internet Explorer version may insecurely load Dynamic Link Libraries
2016/08/16 JVN#04125292:
Cybozu Mailwise contains issue in preventing clickjacking attacks
2016/08/16 JVN#03052683:
Cybozu Mailwise vulnerable to information disclosure
2016/08/16 JVN#02576342:
Cybozu Mailwise vulnerable to information disclosure
2016/08/16 JVN#01353821:
Cybozu Mailwise vulnerable to mail header injection
2016/08/08 JVN#35062083:
Multiple I-O DATA Recording Hard disk products vulnerable to cross-site request forgery
2016/08/05 JVN#09470233:
Android stock browser vulnerable to denial-of-service (DoS)
2016/08/04 JVN#06920277:
Coordinate Plus App fails to verify SSL server certificates
2016/07/22 JVN#40696431:
EC-CUBE plugin "Coupon Plugin" vulnerable to SQL injection
2016/07/22 JVN#65273415:
Android OS issue where it is affected by the CRIME attack
2016/07/22 JVN#06212291:
Android OS Contacts app fails to restrict access permissions
2016/07/20 JVN#01956993:
Vtiger CRM does not properly restrict access to application data
2016/07/20 JVN#13582657:
WordPress plugin "Nofollow Links" vulnerable to cross-site scripting
2016/07/15 JVN#68364327:
WAONサービスアプリ App for Android fails to verify SSL server certificates
2016/07/08 JVN#51565015:
LINE for Windows may insecurely load Dynamic Link Libraries
2016/07/01 JVNVU#95113461:
ManageEngine Password Manager Pro vulnerable to cross-site request forgery
2016/06/30 JVN#89379547:
Apache Commons FileUpload vulnerable to denial-of-service (DoS)
2016/06/29 JVN#30260727:
Sushiro App fails to verify SSL server certificates
2016/06/27 JVN#39594409:
DMM Movie Player App fails to verify SSL server certificates
2016/06/27 JVN#45034304:
Multiple Hikari Denwa routers vulnerable to cross-site request forgery
2016/06/27 JVN#77403442:
Multiple Hikari Denwa routers vulnerable to OS command injection
2016/06/27 JVN#42930233:
QNAP QTS vulnerable to cross-site scripting
2016/06/24 JVN#61578437:
WordPress plugin "Welcart e-Commerce" vulnerable to session management
2016/06/24 JVN#55826471:
WordPress plugin "Welcart e-Commerce" vulnerable to cross-site scripting
2016/06/24 JVN#95082904:
WordPress plugin "Welcart e-Commerce" vulnerable to cross-site scripting
2016/06/24 JVN#47363774:
WordPress plugin "Welcart e-Commerce" vulnerable to PHP object injection
2016/06/22 JVN#75028871:
CG-WLR300GNV Series does not limit authentication attempts
2016/06/22 JVN#24409899:
CG-WLBARAGM vulnerable to denial-of-service (DoS)
2016/06/22 JVN#76653039:
CG-WLBARGL vulnerable to command injection
2016/06/20 JVN#07710476:
Apache Struts 2 vulnerable to remote code execution
2016/06/20 JVN#12352818:
Apache Struts 2 vulnerable to denial-of-service (DoS)
2016/06/20 JVN#45093481:
Multiple vulnerabilities in Apache Struts 2
2016/06/16 JVN#55428526:
Deep Discovery Inspector vulnerable to remote code execution
2016/06/14 JVN#96052093:
ETX-R vulnerable to denial-of-service (DoS)
2016/06/14 JVN#61317238:
ETX-R vulnerable to cross-site request forgery
2016/06/08 JVN#15205734:
DX Library vulnerable to remote code execution
2016/06/07 JVN#74659077:
TERASOLUNA Server Framework for Java(WEB) access restriction bypass vulnerability in the file extention filter
2016/06/07 JVN#65044642:
Apache Struts 1 vulnerable to input validation bypass
2016/06/07 JVN#03188560:
Apache Struts 1 vulnerability that allows unintended remote operations against components on memory
2016/06/02 JVN#48847535:
Trend Micro enterprise products multiple vulnerabilities
2016/06/02 JVN#48789425:
Trend Micro Internet Security multiple vulnerabilities
2016/05/30 JVN#53542912:
Cybozu Garoon fails to restrict access permissions
2016/05/30 JVN#49285177:
Cybozu Garoon vulnerable to cross-site scripting
2016/05/30 JVN#37121456:
Cybozu Garoon vulnerable to cross-site scripting
2016/05/30 JVN#33879831:
Cybozu Garoon fails to restrict access permissions
2016/05/30 JVN#32218514:
Cybozu Garoon vulnerable to open redirect
2016/05/30 JVN#26298347:
Cybozu Garoon vulnerable to denial-of-service (DoS)
2016/05/30 JVN#25765762:
Cybozu Garoon vulnerable to information disclosure
2016/05/30 JVN#14749391:
Multiple directory traversal vulnerabilities in Cybozu Garoon
2016/05/30 JVN#18975349:
Multiple access restriction bypass vulnerabilities in Cybozu Garoon
2016/05/30 JVN#13794955:
Source code of Old_GSI_Maps prior to January, 2015 vulnerable to directory traversal
2016/05/30 JVN#40898764:
DMM.com Securities FX Apps for Android fail to verify SSL server certificates
2016/05/27 JVN#87859762:
H2O use-after-free vulnerability
2016/05/27 JVN#46888319:
Japan Connected-free Wi-Fi vulnerable to API execution
2016/05/27 JVN#75813272:
Multiple Buffalo wireless LAN routers vulnerable to information disclosure
2016/05/27 JVN#81698369:
Multiple Buffalo wireless LAN routers vulnerable to directory traversal
2016/05/27 JVN#24143619:
WebARENA formmail vulnerable to cross-site scripting
2016/05/26 JVN#00460236:
NetCommons vulnerable to privilege escalation
2016/05/25 JVN#26026353:
WordPress plugin "Markdown on Save Improved" vulnerable to cross-site scripting
2016/05/24 JVN#43529183:
Jetstar App for iOS fails to verify SSL server certificates
2016/05/24 JVN#85112513:
php-contact-form vulnerable to cross-site scripting
2016/05/24 JVN#56167268:
HumHub vulnerable to cross-site scripting
2016/05/20 JVN#42545812:
MP Form Mail CGI Professional Edition vulnerable to directory traversal
2016/05/19 JVNVU#97339542:
SaAT Netizen fails to properly verify downloaded installation and update files
2016/05/19 JVN#43076390:
Web Mailing List vulnerable to cross-site scripting
2016/05/18 JVN#11877654:
百五銀行 (105 BANK) App fails to verify SSL server certificates
2016/05/16 JVNVU#90405898:
ManageEngine Password Manager Pro fails to restrict access permissions
2016/05/16 JVNVU#92116866:[Critical]
Keitai Kit for Movable Type vulnerable to OS command injection
2016/05/16 JVN#11994518:
Cybozu KUNAI App fails to verify SSL server certificates
2016/05/16 JVN#03975805:
a-blog cms vulnerable to session management
2016/05/16 JVN#73166466:
a-blog cms vulnerable to cross-site scripting
2016/05/13 JVN#44657371:
WordPress plugin "Ninja Forms" vulnerable to PHP object injection
2016/05/13 JVN#91638315:
FileMaker server issue where PHP source code may be viewable
2016/05/12 JVN#22978346:
WN-G300R Series vulnerable to cross-site scripting
2016/05/12 JVN#25674893:
WN-GDN/R3 Series does not limit authentication attempts
2016/05/11 JVN#41772178:
Apache Cordova vulnerable to arbitrary plugin execution
2016/05/11 JVN#35341085:
Apache Cordova fails to restrict access permissions
2016/04/26 JVN#73776243:
EC-CUBE vulnerable to cross-site request forgery
2016/04/26 JVN#63384827:
Multiple shiro8 Co., Ltd. freearea_ addition_plugins for EC-CUBE vulnerable to cross-site scripting
2016/04/26 JVN#11458774:
EC-CUBE fails to restrict access permissions
2016/04/26 JVN#47473944:
EC-CUBE fails to restrict access permissions
2016/04/25 JVN#91816422:
kintone mobile for Android fails to verify SSL server certificates
2016/04/25 JVN#89026267:
kintone mobile for Android information management vulnerability
2016/04/22 JVN#00324715:
Electron may insecurely load Node modules
2016/04/19 JVN#11815655:
Photopt App fails to verify SSL server certificates
2016/04/13 JVN#00272277:
Tokyo Star bank App fails to verify SSL server certificates
2016/04/08 JVN#78482127:
EC-CUBE plugin "Social-button Plugin Premium" and "Social-button Plugin" vulnerable to cross-site scripting
2016/04/06 JVN#55801246:
baserCMS plugin "Casebook Plugin" multiple vulnerabilities
2016/04/06 JVN#26627848:
baserCMS plugin "Menubook Plugin" multiple vulnerabilities
2016/04/06 JVN#13288761:
baserCMS plugin "Recruit Plugin" multiple vulnerabilities
2016/04/04 JVN#28480773:
WisePoint contains issue in preventing clickjacking attacks
2016/04/04 JVN#47164236:
AQUOS Photo Player HN-PP150 vulnerable to cross-site request forgery
2016/04/04 JVN#41875357:
ActiveX control for EVA Animator vulnerable to buffer overflow
2016/03/30 JVN#82020528:
Aterm WG300HP vulnerable to cross-site request forgery
2016/03/30 JVN#07818796:
Aterm WF800HP vulnerable to cross-site request forgery
2016/03/24 JVN#86517621:
WordPress plugin "WP Favorite Posts" vulnerable to cross-site scripting
2016/03/02 JVN#59349382:
Multiple Corega wireless LAN routers vulnerable to cross-site request forgery
2016/02/22 JVN#93535632:
Log-Chat vulnerable to cross-site scripting
2016/02/19 JVN#46044093:
LINE for Windows and LINE for Mac OS vulnerable to denial-of-service (DoS)
2016/02/19 JVN#31524757:
EC-CUBE plugin "Help plug-in" vulnerable to SQL injection
2016/02/19 JVN#78383854:
Internet Explorer cross-domain policy bypass
2016/02/19 JVN#69854312:
baserCMS vulnerable to OS command injection
2016/02/15 JVN#69278491:
Cybozu Office vulnerable to cross-site scripting
2016/02/15 JVN#71428831:
Cybozu Office vulnerable to open redirect
2016/02/15 JVN#64209269:
Cybozu Office vulnerable to cross-site request forgery
2016/02/15 JVN#48720230:
Cybozu Office access restriction bypass vulnerability
2016/02/15 JVN#47296923:
Cybozu Office vulnerable to information disclosure
2016/02/15 JVN#28042424:
Cybozu Office vulnerable to information disclosure
2016/02/15 JVN#20246313:
Cybozu Office vulnerable to denial-of-service (DoS)
2016/02/12 JVN#77012922:
Microsoft Producer for Microsoft Office PowerPoint vulnerable to cross-site scripting
2016/02/12 JVN#22578691:
Akerun - Smart Lock Robot App for iOS fails to verify SSL server certificates
2016/01/29 JVN#26921563:
JOB-CUBE vulnerable to cross-site scripting
2016/01/29 JVN#12165579:
Vine MV vulnerable to cross-site scripting
2016/01/29 JVN#03050861:
EXPRESSCLUSTER X vulnerable to directory traversal
2016/01/27 JVN#54686544:
HOME SPOT CUBE multiple vulnerabilities
2016/01/22 JVN#49225722:
Multiple Buffalo network devices vulnerable to cross-site scripting
2016/01/22 JVN#09268287:
Multiple Buffalo network devices vulnerable to cross-site request forgery
2016/01/18 JVN#47951769:
Shoplat App for iOS issue in the verification of SSL certificates
2016/01/15 JVN#45928828:
H2O vulnerable to HTTP header injection
2016/01/15 JVN#50899877:
acmailer vulnerable to OS command injection
2016/01/05 JVN#49476817:
DX Library vulnerable to buffer overflow

2015

2015/12/25 JVN#51250073:
CG-WLNCM4G may behave as an open resolver
2015/12/25 JVN#50775659:
CG-WLBARAGM may behave as an open proxy
2015/12/25 JVN#51349622:
CG-WLBARGS does not properly perform authentication
2015/12/17 JVN#43344629:
Welcart vulnerable to SQL injection
2015/12/17 JVN#64636058:
WinRAR may insecurely load executable files
2015/12/17 JVN#22533124:
Adobe Flash Player issue where iframe contents may be overwritten
2015/12/11 JVN#71730320:
Zend Framework vulnerable to SQL injection
2015/12/09 JVN#89965717:
WL-330NUL vulnerable to cross-site scripting
2015/12/09 JVN#85359294:
WL-330NUL vulnerable to denial-of-service (DoS)
2015/12/09 JVN#34489380:
WL-330NUL vulnerable to remote command execution
2015/12/09 JVN#69462495:
WL-330NUL information management vulnerability
2015/12/07 JVN#70083512:
Web Analytics Service vulnerable to cross-site scripting
2015/12/07 JVN#44541100:
GANMA! App for iOS fails to verify SSL server certificates
2015/12/03 JVN#55545372:
EC-CUBE plugin BbAdminViewsControl vulnerable to SQL injection
2015/11/30 JVN#72891124:
p++BBS vulnerable to cross-site scripting
2015/11/30 JVN#35845584:
Frame high-speed chat vulnerable to cross-site scripting
2015/11/27 JVN#18889193:
Apache Cordova vulnerable to improper application of whitelist restrictions
2015/11/27 JVN#12991684:
ManageEngine Firewall Analyzer fails to restrict access permissions
2015/11/27 JVN#21968837:
ManageEngine Firewall Analyzer vulnerable to directory traversal
2015/11/20 JVN#51046809:
ArcSight Management Center and ArcSight Logger vulnerable to cross-site scripting
2015/11/20 JVN#20649799:
Void vulnerable to cross-site scripting
2015/11/17 JVN#34780384:
Kirby vulnerable to arbitrary file creation
2015/11/17 JVN#29141986:
Gurunavi App for iOS fails to verify SSL server certificates
2015/11/17 JVN#64625488:
applican vulnerable to script injection
2015/11/17 JVN#71088919:
applican vulnerable to script injection
2015/11/13 JVN#25323093:
pWebManager vulnerable to OS command injection
2015/11/13 JVN#56210048:
Apple OS X authentication issue when recovering from sleep mode
2015/11/06 JVN#90135579:
SonicWall TotalSecure TZ 100 Series vulnerable to denial-of-service (DoS)
2015/11/05 JVN#80144272:
Multiple TYPE-MOON games vulnerable to OS command injection
2015/11/02 JVN#04281281:
ISUCON5 qualifier portal web application (eventapp) vulnerable to OS command injection
2015/10/30 JVN#53973084:
HTML::Scrubber vulnerable to cross-site scripting
2015/10/30 JVN#48135658:
Multiple routers contain issue in preventing clickjacking attacks
2015/10/29 JVN#68289108:
Enisys Gw fails to restrict access permissions
2015/10/29 JVN#13874649:
Enisys Gw vulnerable to cross-site scripting
2015/10/29 JVN#33179297:
Enisys Gw vulnerable to arbitrary file creation
2015/10/29 JVN#58615092:
Enisys Gw vulnerable to SQL injection
2015/10/28 JVN#25086409:
ANA App fails to verify SSL server certificates
2015/10/26 JVN#97278546:
EC-CUBE vulnerable to cross-site request forgery
2015/10/16 JVN#25576608:
Avast vulnerable to directory traversal
2015/10/16 JVN#37825153:
AirDroid for Android vulnerable in handling of implicit intents
2015/10/15 JVN#92520335:
eXtplorer vulnerable to cross-site request forgery
2015/10/14 JVN#48211537:
Party Track SDK for iOS fails to verify server certificates
2015/10/09 JVN#84982142:
Pref Shimane CMS vulnerable to SQL injection
2015/10/09 JVN#02671769:
phpRechnung vulnerable to SQL injection
2015/10/09 JVN#13456571:
Dojo Toolkit vulnerable to cross-site scripting
2015/10/07 JVN#38369032:
Cybozu Garoon vulnerable to LDAP injection
2015/10/07 JVN#21025396:
Multiple PHP code execution vulnerabilitles in Cybozu Garoon
2015/10/02 JVN#27548431:
gollum vulnerable to file exposure
2015/10/02 JVN#65668004:
Dotclear vulnerable to cross-site scripting
2015/10/01 JVN#49503705:
Python for Windows may insecurely load dynamic libraries
2015/10/01 JVN#07676450:
Canary Labs Trend Web Server vulnerable to buffer overflow
2015/10/01 JVN#27462572:
AjaXplorer vulnerable to directory traversal
2015/09/30 JVN#79633796:
baserCMS vulnerable to SQL injection
2015/09/30 JVN#04855224:
baserCMS fails to restrict access permissions
2015/09/30 JVN#85118545:
MATCHA SNS access restriction bypass vulnerability
2015/09/30 JVN#08535069:
MATCHA SNS vulnerable to code injection
2015/09/30 JVN#66984217:
MATCHA INVOICE vulnerable to code injection
2015/09/30 JVN#18232032:
MATCHA INVOICE vulnerable to SQL injection
2015/09/29 JVN#20355129:
niconico App for iOS fails to verify SSL server certificates
2015/09/29 JVN#21612597:
Apache Cordova plugin cordova-plugin-file-transfer vulnerable to HTTP header injection
2015/09/17 JVN#65602714:
H2O vulnerable to directory traversal
2015/09/16 JVN#19948778:
Photon vulnerable to URL whitelist bypass
2015/09/16 JVN#67586379:
Reversi vulnerable to URL whitelist bypass
2015/09/16 JVN#24517322:
Koritore vulnerable to URL whitelist bypass
2015/09/16 JVN#83862346:
MEGAPHONE MUSIC vulnerable to URL whitelist bypass
2015/09/16 JVN#71815309:
Auction Camera vulnerable to URL whitelist bypass
2015/09/16 JVN#73346595:
applican vulnerable to URL whitelist bypass
2015/09/11 JVN#07427376:
PIXMA MG7500 Series vulnerable to cross-site request forgery
2015/09/11 JVN#41048401:
Japan Connected-free Wi-Fi vulnerable to script injection
2015/09/11 JVN#04644117:
Japan Connected-free Wi-Fi vulnerable to allow URL whitelist bypass
2015/09/07 JVN#62078684:
ELPhoneBtnV6 ActiveX control vulnerable to buffer overflow
2015/09/04 JVN#00015036:
OpenDocMan vulnerable to cross-site scripting
2015/09/04 JVN#95989300:
Apache Struts vulnerable to cross-site scripting
2015/09/04 JVN#88408929:
Apache Struts vulnerable to cross-site scripting
2015/09/03 JVN#13684924:[Unreachable]
BBS X102 vulnerable to cross-site scripting
2015/09/03 JVN#24692261:[Unreachable]
hitSuji (rktSNS2) vulnetable to cross-site scripting
2015/09/02 JVN#08494613:
NScripter vulnerable to buffer overflow
2015/09/01 JVN#81207766:
Rakuten card App for iOS fails to verify SSL server certificates
2015/09/01 JVN#09283606:
desknet's NEO vulnerable to directory traversal
2015/09/01 JVN#77193915:
Twit BBS vulnerable to cross-site scripting
2015/08/27 JVN#91474878:
File Encryption Software "ED" where encrypted data may be easier to decipher when files of small size are encrypted
2015/08/20 JVN#17611367:
Apache Tapestry deserializes untrusted data
2015/08/18 JVN#17964918:
Multiple I-O DATA LAN routers vulnerable in UPnP functionality
2015/08/12 JVN#78240242:
Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site request forgery
2015/08/12 JVN#69175956:
Photo Gallery CMS for PC, smartphone and feature phone (Free) vulnerable to cross-site scripting
2015/08/12 JVN#20459920:
Microsoft Office discloses a file path of a local file
2015/08/07 JVN#29053368:
Yodobashi App for Android fails to verify SSL server certificates
2015/08/07 JVN#70465405:
Yodobashi App for Android vulnerable to arbitrary Java method execution
2015/07/29 JVN#17522792:
yoyaku_v41 vulnerable to OS command injection
2015/07/29 JVN#52248864:
yoyaku_v41 vulnerable to authentication bypass
2015/07/29 JVN#46674982:
yoyaku_v41 vulnerable to arbitrary file creation
2015/07/28 JVN#86680970:
Gazou BBS plus vulnerability in file upload processing
2015/07/24 JVN#97971874:
Welcart vulnerable to cross-site scripting
2015/07/24 JVN#92828286:
Welcart vulnerable to SQL injection
2015/07/24 JVN#10559378:
Research Artisan Lite does not properly perform authentication
2015/07/24 JVN#58020495:
Research Artisan Lite vulnerable to cross-site scripting
2015/07/17 JVN#73568461:
PHP for Windows vulnerable to OS command injection
2015/07/15 JVN#19011483:
Thetis vulnerable to SQL injection
2015/07/15 JVN#64051989:
acmailer vulnerable to directory traversal
2015/07/10 JVN#22546110:
LINE@ vulnerable to script injection
2015/07/10 JVN#61935381:
Simple Oekaki BBS vulnerability where arbitary files may be deleted
2015/07/10 JVN#67540183:
Simple Oekaki BBS vulnerable to cross-site scripting
2015/07/09 JVN#55076671:
Cacti vulnerable to cross-site request forgery
2015/07/09 JVN#09758120:
Cacti vulnerable to cross-site scripting
2015/07/09 JVN#78187936:
Cacti vulnerable to cross-site scripting
2015/06/30 JVN#22677713:
OpenEMR vulnerable to authentication bypass
2015/06/30 JVN#77386811:
Explorer+ File Manager vulnerable to directory traversal
2015/06/25 JVN#25336719:
namshi/jose fails to verify token signatures
2015/06/25 JVN#96312698:
osCommerce Japanese version vulnerable to directory traversal
2015/06/23 JVN#19578958:
Symfony vulnerable to code injection
2015/06/18 JVN#83881261:
Ruby on Rails library Paperclip vulnerable to cross-site scripting
2015/06/12 JVN#18146081:
LoadLibrary function in Microsoft Windows fails to validate input properly
2015/06/12 JVN#19732015:
MilkyStep fails to restrict access permissions
2015/06/12 JVN#24336273:
BloBee vulnerable to arbitrary file creation
2015/06/09 JVN#74280258:
MilkyStep fails to restrict access permissions
2015/06/09 JVN#20879350:
MilkyStep vulnerable to cross-site scripting
2015/06/09 JVN#52478686:
MilkyStep vulnerable to SQL injection
2015/06/09 JVN#05559185:
MilkyStep vulnerable to OS command injection
2015/06/09 JVN#12241436:
MilkyStep vulnerable to cross-site request forgery
2015/06/09 JVN#16409640:
MilkyStep fails to restrict access permissions
2015/06/05 JVN#50447904:
Multiple Buffalo wireless LAN routers vulnerable to OS command injection
2015/06/05 JVN#79284156:
NetFlow Analyzer vulnerable to cross-site request forgery
2015/06/05 JVN#25598413:
NetFlow Analyzer fails to restrict access permissions
2015/06/05 JVN#98447310:
NetFlow Analyzer vulnerable to cross-site scripting
2015/06/03 JVN#06120222:
F21 JWT fails to verify token signatures
2015/06/03 JVN#95246510:
"Open Explorer Beta" App for Android vulnerable to directory traversal
2015/05/28 JVN#51176150:
ZenPhoto20 vulnerable to cross-site scripting
2015/05/28 JVN#68452022:
Zenphoto vulnerable to cross-site scripting
2015/05/27 JVN#61328139:
Apache Sling API and Servlets Post components vulnerable to cross-site scripting
2015/05/22 JVN#93976566:
SXF Common Library vulnerable to buffer overflow
2015/05/20 JVN#64459670:
mt-phpincgi vulnerable to PHP object injection
2015/05/19 JVN#78689801:
BGA32.DLL and QBga32.DLL contain multiple vulnerabilities
2015/05/15 JVN#75851252:
"Honda Moto LINC" App for Android fails to verify SSL server certificates
2015/05/14 JVN#18957556:
Cacti vulnerable to SQL injection
2015/05/12 JVN#20133698:
MailDealer vulnerable to cross-site scripting
2015/05/01 JVN#96439865:
EasyCTF vulnerable to session management
2015/05/01 JVN#07538357:
EasyCTF vulnerable to cross-site scripting
2015/05/01 JVN#67520407:
EasyCTF vulnerable to arbitrary file creation
2015/04/23 JVN#41653647:
TransmitMail vulnerable to directory traversal
2015/04/23 JVN#26860747:
TransmitMail vulnerable to cross-site scripting
2015/04/14 JVN#56297719:
JBoss RichFaces vulnerable to remote Java code execution
2015/04/10 JVN#91383083:
Seasar S2Struts vulnerable to input validation bypass
2015/04/09 JVN#12329472:
Lhaplus vulnerable to remote code execution
2015/04/09 JVN#02527990:
Lhaplus vulnerable to directory traversal
2015/04/07 JVN#71903938:
bBlog vulnerable to cross-site request forgery
2015/04/03 JVN#68819526:
"Restaurant Karaoke SHIDAX" App for Android fails to verify SSL server certificates
2015/04/02 JVN#58784309:
Maruo Editor vulnerable to buffer overflow
2015/03/31 JVN#75615300:
All in One SEO Pack information management vulnerability
2015/03/27 JVN#81094176:
Android OS may behave as an open resolver
2015/03/26 JVN#97281747:
WordPress theme flashy vulnerable to cross-site scripting
2015/03/26 JVN#74547976:
Fumy Teacher's Schedule Board vulnerable to cross-site scripting
2015/03/24 JVN#86448949:
The Validator in TERASOLUNA Server Framework for Java(WEB) vulnerable to input validation bypass
2015/03/20 JVN#41281927:
LINE vulnerable to script injection
2015/03/20 JVN#39175666:
MP Form Mail CGI eCommerce edition vulnerable to code injection
2015/03/17 JVN#97099798:
eXtplorer vulnerable to cross-site scripting
2015/03/06 JVN#87204433:
All In One WP Security & Firewall vulnerable to cross-site request forgery
2015/03/06 JVN#30832515:
All In One WP Security & Firewall vulnerable to SQL injection
2015/03/04 JVN#91016415:
Maroyaka Relay Novel vulnerable to cross-site scripting
2015/03/04 JVN#09871547:
Maroyaka Image Album vulnerable to cross-site scripting
2015/03/04 JVN#63687798:
Maroyaka Simple Board vulnerable to cross-site scripting
2015/03/03 JVN#55063777:
Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass
2015/03/03 JVN#93727681:
BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass
2015/02/27 JVN#63949115:
SEIL Series routers vulnerable to denial-of-service (DoS)
2015/02/27 JVN#77718330:
Vulnerability in the jBCrypt key stretching process
2015/02/27 JVN#88862608:
Joyful Note vulnerability in handling files
2015/02/27 JVN#62298871:
KENT-WEB Clip Board vulnerability where arbitary files may be deleted
2015/02/27 JVN#34790526:
checkpw vulnerable to denial-of-service (DoS)
2015/02/25 JVN#30135729:
SYNCK GRAPHICA Mailform Pro CGI vulnerable to remote code execution
2015/02/25 JVN#44544694:
Zen Cart Japanese version vulnerable to cross-site scripting
2015/02/24 JVN#42768331:
Speed Software Root Explorer and Explorer vulnerable to directory traversal
2015/02/20 JVN#93318392:
AL-Mail32 vulnerable to buffer overflow
2015/02/20 JVN#55365709:
AL-Mail32 vulnerable to denial-of-service (DoS)
2015/02/20 JVN#77294617:
AL-Mail32 vulnerable to directory traversal
2015/02/20 JVN#64455813:
Squid input validation vulnerability
2015/02/17 JVN#73261710:
C-BOARD Moyuku vulnerable to arbitrary file creation
2015/02/17 JVN#18387086:
Saurus CMS Community Edition vulnerable to cross-site scripting
2015/02/13 JVN#48659722:
Smartphone Passbook for Android information management vulnerability
2015/02/13 JVN#14522790:
Smartphone Passbook fails to verify SSL server certificates
2015/02/10 JVN#96155055:
PerlTreeBBS vulnerable to cross-site scripting
2015/02/05 JVN#17480391:
shiromuku(u1)GUESTBOOK vulnerable to cross-site scripting
2015/01/30 JVN#13566542:
Cybozu Remote Service Manager vulnerable to denial-of-service (DoS)
2015/01/30 JVN#33735535:
Fumy News Clipper vulnerable to cross-site scripting
2015/01/29 JVN#88252465:
Arbitrary files may be overwritten in multiple VMware products
2015/01/27 JVN#32631078:
Multiple ASUS wireless LAN routers vulnerable to cross-site request forgery
2015/01/27 JVN#77792759:
Multiple ASUS wireless LAN routers vulnerable to OS command injection
2015/01/26 JVN#27142693:
NP-BBRM vulnerable in UPnP functionality
2015/01/23 JVN#94502417:
shiromuku(bu2)BBS vulnerable to arbitrary file creation
2015/01/19 JVN#88559134:
SYNCK GRAPHICA Download Log CGI vulnerable to directory traversal

2014

2014/12/18 JVN#76515134:
WBS Gantt-Chart for JIRA vulnerable to cross-site scripting
2014/12/18 JVN#09289074:
WBS Gantt-Chart for JIRA vulnerable to cross-site scripting
2014/12/18 JVN#97384696:
TSUTAYA App for Android vulnerable to arbitrary Java method execution
2014/12/18 JVN#22440986:
Multiple Allied Telesis products vulnerable to buffer overflow
2014/12/12 JVN#61181790:
LinPHA vulnerable to cross-site scripting
2014/12/10 JVN#13160869:
Chyrp vulnerable to cross-site scripting
2014/12/09 JVN#87910097:
i-HTTPD vulnerable to cross-site scripting
2014/12/09 JVN#98097877:
"Omake BBS" of i-HTTPD vulnerable to cross-site scripting
2014/12/09 JVN#89613370:
i-HTTPD vulnerable to cross-site scripting
2014/12/09 JVN#16406395:
"File Upload BBS" of i-HTTPD vulnerable to remote command execution
2014/12/04 JVN#24909891:
Kaku-San-Sei Million Arthur for Android information management vulnerability
2014/12/04 JVN#12798709:
KENT-WEB Clip Board vulnerable to cross-site scripting
2014/12/03 JVN#70490316:
DBD::PgPP vulnerable to SQL injection
2014/12/02 JVN#71762315:
LG Electronics mobile access routers lack access restrictions
2014/12/02 JVN#61593104:
ARROWS Me F-11D vulnerability where arbitrary areas may be accessed
2014/12/02 JVN#06302787:
OS command injection vulnerability in multiple FUJITSU Android devices
2014/12/02 JVN#67792023:
Multiple improper data validation vulnerabilities in Syslink driver for Texas Instruments OMAP mobile processors
2014/12/01 JVN#04895240:
SEIL Series routers vulnerable to denial-of-service (DoS)
2014/12/01 JVN#21907573:
SEIL Series routers vulnerable to denial-of-service (DoS)
2014/11/28 JVN#54775800:
FAST/TOOLS vulnerable to improper restriction of XML external entity references
2014/11/21 JVN#07930208:
BSD Operating Systems vulnerable to denial-of-service (DoS)
2014/11/14 JVN#89852154:
iLogScanner vulnerable to cross-site scripting
2014/11/14 JVN#52422792:
Direct Web Remoting (DWR) vulnerable to cross-site scripting
2014/11/14 JVN#91502163:
Direct Web Remoting (DWR) vulnerable to XML external entity injection
2014/11/13 JVN#16318793:[Critical]
Ichitaro series vulnerable to arbitrary code execution
2014/11/11 JVN#14691234:
Multiple Cybozu products vulnerable to buffer overflow
2014/11/10 JVN#65559247:
OpenAM vulnerable to denial-of-service (DoS)
2014/10/28 JVN#55667175:
QNAP QTS vulnerable to OS command injection
2014/10/23 JVN#27388160:
SumaHo for Android fails to verify SSL/TLS server certificates
2014/10/16 JVN#23809730:
GIGAPOD vulnerable to denial-of-service (DoS)
2014/10/16 JVN#66285408:
Aflax vulnerable to cross-site scripting
2014/10/16 JVN#87373393:
BirdBlog vulnerable to cross-site scripting
2014/10/10 JVN#58417930:
Huawei E5332 vulnerable to denial-of-service (DoS)
2014/10/10 JVN#63587560:
Huawei E5332 vulnerable to denial-of-service (DoS)
2014/09/25 JVN#48270605:
Yahoo! Japan Box for Android issue where it fails to verify SSL server certificates
2014/09/25 JVN#80531230:
jigbrowser+ for iOS same origin policy bypass
2014/09/25 JVN#16485017:
SLFileManager for Android vulnerable to directory traversal
2014/09/25 JVN#87863382:
N-Media file uploader vulnerability in handling uploaded files
2014/09/25 JVN#45442753:
Safari issue in handling application cache
2014/09/22 JVN#04560253:
Yuko Yuko App for Android fails to verify SSL server certificates
2014/09/19 JVN#61637002:
Dotclear vulnerable to cross-site scripting
2014/09/19 JVN#08994136:
Bump for Android vulnerable in handling of implicit intents
2014/09/17 JVN#36205251:
365 Links series vulnerable to cross-site scripting
2014/09/12 JVN#84376800:
Help Page in multiple Adobe products vulnerable to cross-site scripting
2014/09/09 JVN#73357573:
Movable Type vulnerable to cross-site scripting
2014/09/04 JVN#49672671:
WisePoint vulnerable to session fixation
2014/09/04 JVN#50367052:
EmFTP may insecurely load executable files
2014/08/29 JVN#17637243:
Kindle App for Android fails to verify SSL server certificates
2014/08/26 JVN#94409737:
MailPoet Newsletters vulnerable to cross-site request forgery
2014/08/19 JVN#20812625:
Advance-Flow vulnerable to SQL injection
2014/08/18 JVN#27531188:
Cakifo vulnerable to cross-site scripting
2014/08/15 JVN#04455183:
Shutter vulnerable to cross-site scripting
2014/08/15 JVN#48039501:
Shutter vulnerable to SQL injection
2014/08/14 JVN#27702217:
Ameba for Android contains an issue where it fails to verify SSL server certificates
2014/08/12 JVN#07957080:
Dominion KX2-101 vulnerable to denial-of-service (DoS)
2014/08/08 JVN#87962145:
Piwigo vulnerable to SQL injection
2014/08/08 JVN#09717399:
Piwigo vulnerable to cross-site scripting
2014/08/08 JVN#80310172:
Piwigo vulnerable to cross-site scripting
2014/08/06 JVN#32726697:
GOM Player vulnerable to denial-of-service (DoS)
2014/08/01 JVN#22534185:
ServerView Operations Manager vulnerable to cross-site scripting
2014/07/30 JVN#72950786:
Outlook.com for Android contains an issue where it fails to verify SSL server certificates
2014/07/29 JVN#94592501:
Multiple I-O DATA IP Cameras vulnerable to authentication bypass
2014/07/29 JVN#42511610:
acmailer contains a cross-site request forgery vulnerability
2014/07/29 JVN#85748534:
PerlMailer vulnerable to cross-site scripting
2014/07/25 JVN#30281958:
Arbitrary program execution vulnerability in TrendLink ActiveX control
2014/07/18 JVN#94791545:
FuelPHP vulnerable to remote code execution
2014/07/18 JVN#84335912:
File Explorer vulnerable to directory traversal
2014/07/18 JVN#36028879:
Meridian vulnerable to cross-site scripting
2014/07/16 JVN#41028866:
Multifunctional MailForm Free vulnerable to cross-site scripting
2014/07/15 JVN#19118282:
Seasar S2Struts vulnerable to ClassLoader manipulation
2014/07/15 JVN#94838679:
Cybozu Garoon vulnerable to cross-site scritping
2014/07/15 JVN#75990997:
Cybozu Garoon vulnerable to access restriction bypass
2014/07/15 JVN#80583739:
Cybozu Garoon vulnerable to cross-site scritping
2014/07/15 JVN#97558950:
Cybozu Garoon vulnerable to cross-site scritping
2014/07/15 JVN#31082531:
Cybozu Garoon 3 API access restriction bypass vulnerability
2014/07/15 JVN#42024228:
Cybozu Garoon CGI vulnerable to remote command execution
2014/07/08 JVN#35376006:
Becky! Internet Mail vulnerable to buffer overflow
2014/07/02 JVN#35998716:
SX-2000WG vulnerable to denial-of-service (DoS)
2014/07/02 JVN#85571806:
SX-2000WG vulnerable to denial-of-service (DoS)
2014/06/25 JVN#36259412:
Web Kyukincho vulnerable to cross-site request forgery
2014/06/25 JVN#80006084:
Web Kyukincho vulnerable to cross-site scripting
2014/06/24 JVN#63940326:
Sophos Disk Encryption vulnerable to authentication bypass
2014/06/24 JVN#05329568:
Login rebuilder vulnerable to cross-site request forgery
2014/06/20 JVN#02213197:
Webmin vulnerable to cross-site scripting
2014/06/20 JVN#49974594:
Webmin vulnerable to cross-site scripting
2014/06/20 JVN#92737498:
Usermin vulnerable to cross-site scripting
2014/06/20 JVN#48805624:
Usermin vulnerable to OS command injection
2014/06/18 JVN#10603428:
JR East Japan App for Android. contains an issue where it fails to verify SSL server certificates
2014/06/17 JVN#30962312:
TERASOLUNA Server Framework for Java(Web) vulnerable to ClassLoader manipulation
2014/06/17 JVN#07677464:
050 plus for Android information management vulnerability
2014/06/13 JVN#10724763:
SEIL Series routers vulnerable to denial-of-service (DoS)
2014/06/13 JVN#49154900:
Spring Framework vulnerable to directory traversal
2014/06/11 JVN#58029817:
C-BOARD Moyuku vulnerable to cross-site scripting
2014/06/11 JVN#50129191:
JustSystems Online Update Program bundled with JustSystems products vulnerable to arbitrary code execution
2014/06/06 JVN#61247051:
OpenSSL improper handling of Change Cipher Spec message
2014/06/04 JVN#54650130:
SOY CMS vulnerable to cross-site scripting
2014/06/04 JVN#78136804:
CN8000 vulnerable to denial-of-service (DoS)
2014/05/08 JVN#68340046:
intra-mart vulnerable to open redirect
2014/04/30 JVN#31230946:
Cybozu Garoon API access restriction bypass vulnerability
2014/04/30 JVN#90519014:
Cybozu Garoon Phone Messages vulnerable to denial-of-service (DoS)
2014/04/25 JVN#19294237:
Apache Struts vulnerable to ClassLoader manipulation
2014/04/18 JVN#13313061:
TOSHIBA TEC e-Studio series vulnerable to cross-site request forgery
2014/04/18 JVN#00058727:
Cybozu Remote Service Manager vulnerable to session fixation
2014/04/18 JVN#10319260:
Cybozu Remote Service Manager vulnerable to denial-of-service (DoS)
2014/04/18 JVN#22670349:
AndExplorer vulnerable to directory traversal
2014/04/16 JVN#93004610:
Redmine vulnerable to open redirect
2014/04/14 JVN#55438786:
Content Provider in CamiApp for Android fails to restrict access permissions
2014/04/11 JVN#47386847:
SD Card Manager vulnerable to directory traversal
2014/03/20 JVN#70029459:
ES File Explorer vulnerable to directory traversal
2014/03/20 JVN#14282890:
Silex vulnerable to cross-site scripting
2014/03/18 JVN#89260331:
sp mode mail vulnerability where Java methods may be executed
2014/03/18 JVN#05951929:
sp mode mail issue where emails in the process of creation may be accessed
2014/03/18 JVN#81739241:
sp mode mail issue when accessing attachments in incoming mail
2014/03/17 JVN#16263849:
Demaecan for Android. contains an issue where it fails to verify SSL server certificates
2014/03/17 JVN#38227002:
Unzipper vulnerable to directory traversal
2014/02/26 JVN#71045461:
Cybozu Garoon vulnerable to SQL injection
2014/02/26 JVN#26393529:
Cybozu Garoon vulnerable to directory traversal
2014/02/26 JVN#24035499:
Cybozu Garoon vulnerable to session management
2014/02/26 JVN#48810179:
Denny's App for Android. contains an issue where it fails to verify SSL server certificates
2014/02/26 JVN#02017463:
Norman Security Suite vulnerable to privilege escalation
2014/02/26 JVN#87797318:
XooNIps vulnerable to cross-site scripting
2014/02/21 JVN#24730765:
Blackboard Vista/CE vulnerable to cross-site scripting
2014/02/21 JVN#43254599:
AutoCAD may insecurely load dynamic libraries
2014/02/21 JVN#33382534:
AutoCAD vulnerable to arbitrary VBScript execution
2014/02/10 JVN#14876762:[Critical]
Apache Commons FileUpload vulnerable to denial-of-service (DoS)
2014/02/07 JVN#50943964:
phpMyFAQ vulnerable to cross-site request forgery
2014/02/07 JVN#30050348:
phpMyFAQ vulnerable to cross-site scripting
2014/02/06 JVN#23256725:
Opera browser for Android issue in handling intent scheme URL's
2014/01/31 JVN#30718178:
Joyful Note vulnerable to cross-site scripting
2014/01/28 JVN#28011378:
Sanshiro Series vulnerable to arbitrary code execution
2014/01/28 JVN#91153528:
Multiple SQL injection vulnerabilities in Cybozu Garoon
2014/01/24 JVN#69986880:
OpenPNE vulnerable to PHP Object Injection
2014/01/24 JVN#49384502:
SimZip (Simple Zip Viewer) vulnerable to directory traversal
2014/01/22 JVN#51770585:
EC-CUBE vulnerable to authorization bypass
2014/01/22 JVN#17849447:
EC-CUBE vulnerable to information alteration
2014/01/22 JVN#81637882:
Information disclosure vulnerability in Sleipnir Mobile for Android
2014/01/10 JVN#85716574:
NeoFiler vulnerable to directory traversal
2014/01/10 JVN#44392991:
Security File Manager vulnerable to directory traversal
2014/01/10 JVN#51285738:
tetra filer vulnerable to directory traversal
2014/01/10 JVN#88313872:
ZIP with Pass vulnerable to directory traversal

2013

2013/12/26 JVN#69700259:
HP Autonomy Ultraseek vulnerable to cross-site scripting
2013/12/25 JVN#81706478:
Cybozu Garoon Keitai vulnerable to authentication bypass
2013/12/25 JVN#60997973:
Cybozu Garoon vulnerable to SQL injection
2013/12/24 JVN#63194482:
IrfanView vulnerable to buffer overflow
2013/12/24 JVN#13154935:
VMware ESX and ESXi may allow access to arbitrary files
2013/12/17 JVN#53768697:
Android OS vulnerable to arbitrary Java method execution
2013/12/13 JVN#28436508:
Juniper ScreenOS vulnerable to denial-of-service (DoS)
2013/12/10 JVN#21336955:
Cybozu Dezie vulnerable to cross-site scripting
2013/12/03 JVN#87729477:
Cybozu Garoon vulnerable to session fixation
2013/12/03 JVN#84221103:
Cybozu Garoon vulnerable to mail header injection
2013/12/03 JVN#94245330:
Cybozu Garoon vulnerable to denial-of-service (DoS)
2013/12/03 JVN#82375148:
Cybozu Garoon vulnerable to SQL injection
2013/12/03 JVN#23981867:
Multiple cross-site scripting vulnerabilities in Cybozu Garoon
2013/11/29 JVN#41703192:
TOWN (modified version) vulnerable to directory traversal
2013/11/22 JVN#97810280:
KDrive Personal for Windows contains an issue where it fails to verify SSL server certificates
2013/11/22 JVN#28812735:
D-Link DES-3800 Series vulnerable to denial-of-service (DoS)
2013/11/22 JVN#65312543:
D-Link DES-3800 Series vulnerable to denial-of-service (DoS)
2013/11/20 JVN#06377589:
EC-CUBE vulnerable to cross-site scripting
2013/11/20 JVN#55630933:
EC-CUBE information disclosure vulnerability
2013/11/20 JVN#06870202:
EC-CUBE information disclosure vulnerability
2013/11/20 JVN#11221613:
EC-CUBE vulnerable to cross-site request forgery
2013/11/20 JVN#38790987:
EC-CUBE vulnerable to cross-site scripting
2013/11/20 JVN#61077110:
EC-CUBE vulnerable to information disclosure
2013/11/15 JVN#71256611:
ASP.NET vulnerable to open redirect
2013/11/12 JVN#44999463:
Ichitaro series vulnerable to arbitrary code execution
2013/11/07 JVN#28467717:
Page Scroller vulnerable to cross-site scripting
2013/11/07 JVN#12513975:
TOWN (modified version) vulnerable to cross-site scripting
2013/11/05 JVN#75720314:
Tiki Wiki CMS Groupware vulnerable to SQL injection
2013/11/05 JVN#81813850:
Tiki Wiki CMS Groupware vulnerable to cross-site scripting
2013/10/30 JVN#85336306:
Use-after-free vulnerability in multiple products that use International Components for Unicode (ICU)
2013/10/30 JVN#70739377:
Multiple products that use International Components for Unicode (ICU) vulnerable to denial-of-service (DoS)
2013/10/29 JVN#74608669:
RockDisk vulnerable to cross-site scripting
2013/10/18 JVN#52509236:
HDL-A and HDL2-A Series vulnerable in session management
2013/10/04 JVN#33788325:
Accela BizSearch vulnerable to cross-site scripting
2013/09/20 JVN#43152129:
SEIL Series routers vulnerable to buffer overflow
2013/09/20 JVN#40079308:
SEIL Series routers vulnerable in RADIUS authentication
2013/09/20 JVN#70245052:
D-Link DES-3810 Series vulnerable to denial-of-service (DoS)
2013/09/20 JVN#03082733:
D-Link DWL-2100AP vulnerable to denial-of-service (DoS)
2013/09/19 JVN#27443259:[Critical]
Internet Explorer vulnerable to arbitrary code execution
2013/09/19 JVN#62507275:
Multiple broadband routers may behave as open resolvers
2013/09/13 JVN#77455005:
ChamaCargo vulnerable to cross-site scripting
2013/09/12 JVN#01094166:
Opera vulnerable to cross-site scripting
2013/09/10 JVN#53014207:
Cybozu Office vulnerable to cross-site scripting
2013/09/06 JVN#19847770:
VMware ESX and ESXi vulnerable to buffer overflow
2013/09/06 JVN#72911629:
VMware ESX and ESXi vulnerable to directory traversal
2013/09/06 JVN#33504150:
Apache Struts vulnerable to remote command execution
2013/08/30 JVN#15973066:
EC-CUBE vulnerable to directory traversal when used in Windows
2013/08/21 JVN#24713981:
PHP OpenID Library vulnerable to XML external entity injection
2013/08/19 JVN#75084836:
Yahoo! Japan Shopping for Android contains an issue where it fails to verify SSL server certificates
2013/08/19 JVN#68156832:
Yafuoku! contains an issue where it fails to verify SSL server certificates
2013/08/13 JVN#21103639:
Cybozu Mailwise vulnerable to information disclosure
2013/08/07 JVN#44035194:
docomo overseas usage application vulnerability in the connection process
2013/07/29 JVN#00065218:
JP1/IT Desktop Management - Manager and Hitachi IT Operations Director vulnerable to privilege escalation
2013/07/26 JVN#25280162:
WordPress vulnerable to cross-site scripting
2013/07/22 JVN#26103805:
Oracle Enterprise Manager vulnerable to cross-site scripting
2013/07/19 JVN#38787103:
JBoss RichFaces vulnerable to remote code execution
2013/07/17 JVN#68663052:
Oracle Outside In vulnerable to denial-of-service (DoS)
2013/07/17 JVN#07497769:
Oracle Outside In vulnerable to buffer overflow
2013/07/16 JVN#19491840:
Cybozu Office session management vulnerability
2013/07/11 JVN#68773685:
AQUOS PhotoPlayer HN-PP150 vulnerable to denial-of-service (DoS)
2013/06/27 JVN#04161229:
EC-CUBE vulnerable to directory traversal
2013/06/27 JVN#98665228:
EC-CUBE vulnerable to cross-site scripting
2013/06/27 JVN#07192063:
EC-CUBE vulnerable to cross-site scripting
2013/06/27 JVN#34900750:
EC-CUBE vulnerable to code injection
2013/06/27 JVN#43886811:
EC-CUBE vulnerable to directory traversal
2013/06/27 JVN#85804149:
CLIP-MAIL vulnerable to cross-site scripting
2013/06/27 JVN#26394323:
POST-MAIL vulnerable to cross-site scripting
2013/06/18 JVN#19740283:
Cybozu Live for Android vulnerable in the WebView class
2013/06/18 JVN#63428218:
Cybozu Live for Android vulnerable to arbitrary Java method execution
2013/06/18 JVN#98712361:
Ichitaro series vulnerable to arbitrary code execution
2013/06/13 JVN#53622030:
Orchard vulnerable to cross-site scripting
2013/06/11 JVN#99813183:
Galapagos Browser vulnerable in the WebView class
2013/06/11 JVN#79301570:
Angel Browser vulnerable in the WebView class
2013/06/07 JVN#39218538:
Pizza Hut Japan Official Order App for Android. contains an issue where it fails to verify SSL server certificates
2013/06/07 JVN#63901692:
Internet Explorer vulnerable to information disclosure
2013/06/03 JVN#48108258:
HP ProCurve 1700 series switches vulnerable to cross-site request forgery
2013/05/31 JVN#24560784:
Adobe Reader X vulnerable to sandbox bypass
2013/05/31 JVN#07354844:
Safari information disclosure vulnerability
2013/05/31 JVN#53579095:
FileMaker Pro vulnerable to cross-site scripting
2013/05/31 JVN#85812843:
FileMaker Pro fails to verify SSL server certificates
2013/05/29 JVN#90289505:
Content Provider in MovatwiTouch fails to restrict access permissions
2013/05/29 JVN#22756333:
Sleipnir Mobile for Android vulnerable to address bar spoofing
2013/05/27 JVN#31817913:
Yahoo! Browser vulnerable to address bar spoofing
2013/05/23 JVN#39699406:
EC-CUBE vulnerable to information disclosure as a result of improper input checking
2013/05/23 JVN#45306814:
EC-CUBE fails to restrict access permissions
2013/05/23 JVN#00985872:
EC-CUBE vulnerable to session fixation
2013/05/23 JVN#52552792:
EC-CUBE vulnerable to cross-site scripting
2013/05/20 JVN#10461119:
Cross-site scripting vulnerability in the web2py social bookmarking widget
2013/05/15 JVN#85371480:
Wi-Fi Spot Configuration Software vulnerability in the connection process
2013/05/13 JVN#18501376:
OpenPNE vulnerable to cross-site scripting
2013/05/08 JVN#61972596:
Online Service Gate vulnerable in Office 365 password management
2013/04/26 JVN#55074201:
Yahoo! Browser vulnerable to address bar spoofing
2013/04/26 JVN#01313594:
jigbrowser+ for Android vulnerable to address bar spoofing
2013/04/15 JVN#06251813:
Multiple Cybozu products vulnerable to cross-site request forgery
2013/04/12 JVN#02895867:
Sleipnir Mobile for Android loads arbitrary Extension API
2013/04/11 JVN#65034198:
Sleipnir for Windows vulnerable to address bar spoofing
2013/04/04 JVN#04288738:
Active! mail vulnerable to information disclosure
2013/03/29 JVN#01167429:
OpenWnn for Android vulnerable to information disclosure
2013/03/28 JVN#51305555:
Lotus Domino vulnerable to denial-of-service (DoS)
2013/03/26 JVN#11434157:
OpenWnn/Flick support vulnerable to information disclosure
2013/03/26 JVN#11249169:
COBIME vulnerable to information disclosure
2013/03/26 JVN#80922020:
ArtIME Japanese Input vulnerable to information disclosure
2013/03/26 JVN#77360971:
Simeji vulnerable to information disclosure
2013/03/19 JVN#59503133:
Multiple NEC mobile routers vulnerable to cross-site request forgery
2013/03/18 JVN#41022517:
VxWorks Web Server vulnerable to denial-of-service (DoS)
2013/03/18 JVN#65923092:
VxWorks WebCLI vulnerable to denial-of-service (DoS)
2013/03/18 JVN#20671901:
VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability
2013/03/18 JVN#52492830:
VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability
2013/03/18 JVN#01611135:
VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability
2013/03/18 JVN#45545972:
VxWorks SSH server (IPSSH) denial-of-service (DoS) vulnerability
2013/03/07 JVN#05132866:
Multiple Cisco products vulnerable to denial-of-service (DoS)
2013/03/01 JVN#55924624:
Kingsoft Writer vulnerable to buffer overflow
2013/02/28 JVN#36339873:
dopvSTAR* vulnerable to cross-site scripting
2013/02/28 JVN#64756004:
dopvCOMET* vulnerable to cross-site scripting
2013/02/26 JVN#16817324:
Multiple JustSystems products vulnerable to arbitrary code execution
2013/02/21 JVN#75585394:
NEC Universal RAID Utility fails to restrict access permissions
2013/02/15 JVN#02596643:
3DM (3ware Disk Manager) vulnerable to directory traversal
2013/02/14 JVN#78601526:
GREE for Android vulnerable to directory traversal
2013/02/14 JVN#09223079:
imgboard vulnerable to cross-site scripting
2013/02/08 JVN#95863326:
Cybozu Garoon vulnerable to cross-site scripting
2013/02/08 JVN#07629635:
Cybozu Garoon vulnerable to SQL injection
2013/02/07 JVN#91387819:
mora Downloader may insecurely load executable files
2013/01/31 JVN#86040029:
Weathernews Touch for Android stores location information in the system log file
2013/01/25 JVN#24343509:
WebSphere Application Server (WAS) vulnerable to cross-site scripting
2013/01/22 JVN#99681273:
myu-s / PHP WeblogSystem by netmania vulnerable to cross-site scripting
2013/01/18 JVN#52197991:
Documents Pro (formerly Files HD) vulnerable to directory traversal
2013/01/18 JVN#91881278:
Documents Pro (formerly Files HD) vulnerable to cross-site scripting

2012

2012/12/21 JVN#33159152:
Loctouch for Android information management vulnerability
2012/12/21 JVN#42625179:
Loctouch for Android vulnerable in handling of implicit intents
2012/12/21 JVN#65458431:
concrete5 vulnerable to cross-site scripting
2012/12/20 JVN#27691264:
Opera Mini / Opera Mobile for Android vulnerable in the WebView class
2012/12/20 JVN#69589791:
Boat Browser / Boat Browser Mini vulnerable in the WebView class
2012/12/17 JVN#66596216:
WikkaWiki vulnerable to cross-site scripting
2012/12/14 JVN#53269985:
Welcart vulnerable to cross-site request forgery
2012/12/14 JVN#18731696:
Welcart vulnerable to cross-site scripting
2012/12/06 JVN#23563149:
KENT-WEB ACCESS REPORT vulnerable to cross-site scripting
2012/12/06 JVN#68830017:
KENT-WEB ACCESS REPORT vulnerable to cross-site scripting
2012/11/30 JVN#83907168:
Multiple KYOCERA mobile devices may reboot during email reception
2012/11/21 JVN#60931933:
BIGACE vulnerable to session fixation
2012/11/16 JVN#56923652:
Monaca Debugger for Android information management vulnerability
2012/11/14 JVN#74829345:
Multiple Android devices vulnerable to denial-of-service (DoS)
2012/11/07 JVN#18223913:
BeZIP vulnerable to directory traversal
2012/11/02 JVN#55398821:
Pebble vulnerable to open redirect
2012/11/02 JVN#39563771:
Pebble vulnerable to HTTP header injection
2012/11/02 JVN#75492883:
Pebble vulnerability where entries may become unviewable
2012/11/02 JVN#52264310:
MosP kintai kanri vulnerable to authentication bypass
2012/11/02 JVN#23465354:
MosP kintai kanri fails to restrict access permissions
2012/10/31 JVN#75345069:
Mac OS X OpenSSH vulnerable to denial-of-service (DoS)
2012/10/26 JVN#00322303:
Tokyo BBS vulnerable to cross-site scripting
2012/10/23 JVN#42676559:
Safari vulnerable to local file content disclosure
2012/10/10 JVN#63650108:
Smarty vulnerable to cross-site scripting
2012/10/05 JVN#58160713:
MyWebSearch vulnerable to cross-site scripting
2012/09/28 JVN#86318665:
jigbrowser+ for Android vulnerable in the WebView class
2012/09/27 JVN#42014489:
Trend Micro Control Manager vulnerable to SQL injection
2012/09/25 JVN#93344001:
ATOK for Android issue in the access permissions for the learning information file
2012/09/20 JVN#56373673:
myLittleAdmin for SQL Server 2000 vulnerable to arbitrary script execution
2012/09/20 JVN#50701493:
Email Anti-virus (formerly WebShield SMTP) vulnerable to denial-of-service
2012/09/13 JVN#03015214:
KUNAI Browser for Remote Service beta vulnerable in the WebView class
2012/09/07 JVN#59652356:
Cybozu KUNAI for Android vulnerable in the WebView class
2012/09/07 JVN#23568423:
Cybozu KUNAI for Android vulnerable to arbitrary Java method execution
2012/08/31 JVN#77393797:
Cybozu Live for Android vulnerable in the WebView class
2012/08/31 JVN#23009798:
Cybozu Live for Android vulnerable to arbitrary Java method execution
2012/08/30 JVN#69880570:
Opera address bar spoofing vulnerability
2012/08/30 JVN#51615542:
Adobe Reader fails to properly handle signatures
2012/08/17 JVN#92038939:
mixi for Android information management vulnerability
2012/08/16 JVN#99192898:
Multiple GREE Android applications vulnerable in the WebView class
2012/08/08 JVN#39519659:
Sleipnir Mobile for Android vulnerable to arbitrary script execution
2012/08/08 JVN#99730704:
Sleipnir Mobile for Android vulnerable to arbitrary Java method execution
2012/08/07 JVN#67435981:
LINE for Android vulnerable in handling of implicit intents
2012/08/02 JVN#01598734:
GoodReader vulnerable to cross-site scripting
2012/07/30 JVN#51769987:
Yahoo! Toolbar (for Chrome, Safari) vulnerable to toolbar alteration
2012/07/30 JVN#90389651:
Multiple web browsers vulnerable in processing Tranfer-Encoding header
2012/07/24 JVN#88643450:
Sleipnir Mobile for Android vulnerable in the WebView class
2012/07/13 JVN#46088915:
Yahoo! Browser vulnerable in the WebView class
2012/07/06 JVN#79111101:
Movable Type plugin MT4i vulnerable to cross-site scripting
2012/07/06 JVN#03582364:
YY-BOARD vulnerable to cross-site scripting
2012/07/06 JVN#80835745:
Movable Type plugin MT4i vulnerable to cross-site scripting
2012/07/06 JVN#90615481:
Ruby hash table implementation vulnerable to denial-of-service
2012/07/03 JVN#59842447:
Zenphoto vulnerable to cross-site scripting
2012/07/03 JVN#05102851:
Yome Collection for Android issue in management of IMEI
2012/06/19 JVN#36993373:
SmallPICT vulnerable to cross-site scripting
2012/06/19 JVN#51176027:
Python SimpleHTTPServer vulnerable to cross-site scripting
2012/06/19 JVN#58102473:
WEB PATIO vulnerable to cross-site scripting
2012/06/19 JVN#33171616:
WEB PATIO vulnerable to cross-site scripting
2012/06/14 JVN#90751882:
Dolphin Browser vulnerable in the WebView class
2012/06/11 JVN#38163638:
Flash Player issue in implementations of the Same Origin Policy
2012/06/07 JVN#18397171:
FeedDemon vulnerable to arbitrary script execution
2012/06/06 JVN#24646833:
SEIL series fail to restrict access permissions
2012/06/06 JVN#15646988:
WordPress plugin WassUp vulnerable to cross-site scripting
2012/06/05 JVN#78305073:
@WEB ShoppingCart vulnerable to cross-site scripting
2012/06/01 JVN#23328321:
Puella Magi Madoka Magica iP for Android vulnerable to information disclosure
2012/06/01 JVN#97995841:
Segue vulnerable to SQL injection
2012/06/01 JVN#29083866:
Segue vulnerable to cross-site scripting
2012/05/25 JVN#85934986:
Logitec LAN-W300N/R series fails to restrict access permissions
2012/05/25 JVN#21422837:
Roundcube Webmail vulnerable to cross-site scripting
2012/05/25 JVN#39707339:
Opera fails to verify SSL server certificates
2012/05/25 JVN#47662377:
Sybase EAServer vulnerable to cross-site scripting
2012/05/25 JVN#77947437:
RSSOwl vulnerable to arbitrary script execution
2012/05/21 JVN#86044443:
iLunascape for Android vulnerable in the WebView class
2012/05/17 JVN#45898075:
Drupal Form API fails to validate the redirect URL
2012/05/15 JVN#53465692:
baserCMS vulnerable to session management
2012/05/15 JVN#63941302:
WEB MART from KENT-WEB vulnerable to cross-site scripting
2012/05/15 JVN#47536971:
WEB MART from KENT-WEB vulnerable to cross-site scripting
2012/04/26 JVN#15503729:
OSQA vulnerable to cross-site scripting
2012/04/26 JVN#82029095:
sp mode mail issue in the verification of SSL certificates
2012/04/24 JVN#09619876:
Multiple JustSystems products vulnerable to buffer overflow
2012/04/24 JVN#95378720:
Multiple JustSystems products may insecurely load dynamic libraries
2012/04/20 JVN#00000601:
TwitRocker2 (Android version) vulnerable in the WebView class
2012/04/13 JVN#90055996:
Dokodemo Rikunabi 2013 vulnerable to cross-site scripting
2012/04/13 JVN#33283707:
ActiveScriptRuby vulnerable to arbitrary Ruby script execution
2012/04/05 JVN#97200417:
SENCHA SNS vulnerable to session fixation
2012/04/05 JVN#44913777:
SENCHA SNS vulnerable to cross-site request forgery
2012/04/05 JVN#92830293:
TOSHIBA TEC e-Studio series vulnerable to authentication bypass
2012/03/19 JVN#83459967:
Janetter vulnerable to cross-site request forgery
2012/03/19 JVN#10745573:
Janetter vulnerable to information disclosure
2012/03/13 JVN#93406632:
Redmine vulnerable to cross-site scripting
2012/03/13 JVN#31860555:
twicca fails to restrict access permissions
2012/03/09 JVN#79950061:
Jenkins vulnerable to cross-site scripting
2012/03/09 JVN#14791558:
Jenkins vulnerable to cross-site scripting
2012/03/09 JVN#56653852:
SquirrelMail plugin Autocomplete vulnerable to cross-site scripting
2012/03/05 JVN#08871006:
ES File Explorer fails to restrict access permissions
2012/03/01 JVN#31517714:
Kingsoft Internet Security 2011 vulnerable to denial-of-service
2012/02/23 JVN#20083397:
Movable Type vulnerable to session hijacking
2012/02/23 JVN#92683325:
Movable Type vulnerable to OS command injection
2012/02/23 JVN#49836527:
Movable Type vulnerable to cross-site scripting
2012/02/23 JVN#70683217:
Movable Type vulnerable to cross-site request forgery
2012/02/22 JVN#25731073:
Multiple COOKPAD applications for Android vulnerable in WebView class
2012/02/15 JVN#35256978:
cforms II vulnerable to cross-site scripting
2012/02/13 JVN#85695061:
ALFTP may insecurely load executable files
2012/02/10 JVN#79099262:
Apache Struts 2 vulnerable to an arbitrary Java method execution
2012/02/01 JVN#33021167:
Pocket WiFi (GP02) vulnerable to cross-site request forgery
2012/01/23 JVN#65869891:
glucose 2 vulnerable to arbitrary script execution
2012/01/20 JVN#38216398:
osCommerce vulnerable to directory traversal
2012/01/20 JVN#64386898:
osCommerce vulnerable to cross-site scripting
2012/01/20 JVN#36559450:
osCommerce Japanese version vulnerable to cross-site scripting
2012/01/20 JVN#54779201:
Oracle WebLogic Server vulnerable to cross-site scripting
2012/01/11 JVN#78901873:
Wibu-Systems CodeMeter Runtime vulnerable to denial-of-service
2012/01/11 JVN#63249231:
Cogent DataHub vulnerable to HTTP header injection
2012/01/11 JVN#12983784:
Cogent DataHub vulnerable to cross-site scripting

2011

2011/12/26 JVN#44439553:
WordPress Japanese vulnerable to cross-site scripting
2011/12/26 JVN#40498018:
WordPress vulnerable to arbitrary PHP code execution
2011/12/26 JVN#60887968:
Movable Type Plugin MailForm vulnerable to cross-site scripting
2011/12/22 JVN#76515037:
PukiWiki Plus! vulnerable to cross-site scripting
2011/12/22 JVN#25435092:
Apache Struts vulnerable to cross-site scripting
2011/12/15 JVN#15549168:
Safari for iOS vulnerable to denial-of-service
2011/12/15 JVN#05255562:
Multiple vulnerabilities in products that use the Preboot Execution Environment (PXE) SDK
2011/12/09 JVN#94002296:
FFFTP may insecurely load executable files
2011/12/08 JVN#70502960:
phpWebSite vulnerable to cross-site scripting
2011/12/06 JVN#04329324:
Etomite vulnerable to cross-site scripting
2011/12/02 JVN#61695284:
PowerChute Business Edition vulnerable to cross-site scripting
2011/11/21 JVN#48839888:
Nikki vulnerable to OS command injection
2011/11/21 JVN#80081509:
Nikki vulnerable to directory traversal
2011/11/08 JVN#16901583:
ChaSen vulnerable to buffer overflow
2011/11/08 JVN#33861625:
Iwate Portal Bar vulnerable to arbitrary script execution
2011/11/04 JVN#37223351:
WebObjects vulnerable to cross-site scripting
2011/11/04 JVN#71349007:
Opengear console servers vulnerable to authentication bypass
2011/11/01 JVN#98649286:
CSWorks LiveData Service vulnerable to denial-of-service (DoS)
2011/10/31 JVN#56667137:
Multiple SKYARC System Co., Ltd. products vulnerable to cross-site request forgery
2011/10/31 JVN#41032068:
Multiple SKYARC System Co., Ltd. products fail to restrict access permissions
2011/10/28 JVN#50227837:
Touhou Hisouten vulnerable to denial-of-service
2011/10/28 JVN#72640744:
Multiple D-Link products vulnerable to buffer overflow
2011/10/28 JVN#62336482:
FFFTP may insecurely load executable files
2011/10/17 JVN#41657660:
Safari for iOS vulnerable to cross-site scripting
2011/10/14 JVN#44496332:
EC-CUBE vulnerable to SQL injection
2011/10/14 JVN#51216285:
DBD::mysqlPP vulnerable to SQL injection
2011/10/13 JVN#07414354:
DAEMON Tools vulnerable to denial-of-service
2011/10/13 JVN#04013920:
Pligg vulnerable to cross-site scripting
2011/10/13 JVN#08307791:
Plume vulnerable to cross-site scripting
2011/10/11 JVN#80971236:
WEB FORUM vulnerable to cross-site scripting
2011/10/11 JVN#89764731:
WEB FORUM vulnerable to cross-site scripting
2011/10/11 JVN#36684331:
WEB FORUM vulnerable to cross-site scripting
2011/10/07 JVN#84838479:
Cybozu Office vulnerable in restricting access
2011/10/07 JVN#34980730:
A-Form vulnerable in restricting access
2011/10/07 JVN#03869266:
Enkai-kun vulnerable to cross-site scripting
2011/09/30 JVN#16617002:
BaserCMS vulnerable to access restriction
2011/09/30 JVN#09789751:
BaserCMS vulnerable to cross-site scripting
2011/09/16 JVN#28973089:
SemanticScuttle vulnerable to cross-site scripting
2011/09/09 JVN#45458289:
Megalith vulnerable to authentication bypass
2011/09/02 JVN#58019849:
GTK+ may insecurely load dynamic libraries
2011/09/02 JVN#44642341:
Juniper Networks IDP ACM vulnerable to cross-site scripting
2011/09/02 JVN#99203127:
Sage vulnerable to arbitrary script execution
2011/09/02 JVN#30221194:
Sage vulnerable to arbitrary script execution
2011/09/02 JVN#71435255:
Multiple vulnerabilities in Phorum
2011/08/26 JVN#29529126:
Samba Web Administration Tool vulnerable to cross-site request forgery
2011/08/26 JVN#63041502:
Samba Web Administration Tool vulnerable to cross-site scripting
2011/08/26 JVN#02134508:
WebsiteBaker vulnerable to cross-site scripting
2011/08/19 JVN#06924191:
Microsoft Windows XP vulnerable to denial-of-service (DoS)
2011/08/16 JVN#31506102:
Aipo vulnerable to SQL injection
2011/08/16 JVN#72854072:
Aipo vulnerable to cross-site request forgery
2011/08/12 JVN#96E584EB:
Internet Explorer window display vulnerability
2011/08/10 JVN#80404511:
Windows URL Protocol Handler may insecurely load executable files
2011/07/29 JVN#43105011:
Android vulnerability where an incorrect SSL certificate is displayed
2011/07/28 JVN#74649877:
Mozilla Firefox vulnerable to cross-site scripting
2011/07/28 JVN#96950482:
Mozilla Firefox vulnerable to cross-site scripting
2011/07/28 JVN#70984231:
Mozilla Firefox vulnerable to denial-of-service (DoS)
2011/07/28 JVN#36721438:
Mozilla Firefox vulnerability in processing content-length header
2011/07/27 JVN#41222793:
Plone vulnerable to cross-site scripting
2011/07/25 JVN#47124169:
Oracle iPlanet Web Server information disclosure vulnerability
2011/07/15 JVN#87908726:
ASP.NET vulnerable to cross-site scripting
2011/07/15 JVN#86220950:
Google Search Appliance vulnerable to cross-site scripting
2011/07/08 JVN#51325625:
Internet Explorer vulnerable to cross-site scripting
2011/07/05 JVN#17844633:
XnView may insecurely load executable files
2011/07/05 JVN#47757122:
Opera vulnerable to denial-of-service (DoS)
2011/06/29 JVN#01547302:
ALZip vulnerable to buffer overflow
2011/06/24 JVN#55508059:
Cybozu Office vulnerable to cross-site scripting
2011/06/24 JVN#54074460:
Multiple Cybozu products vulnerable to cross-site scripting
2011/06/24 JVN#80877328:
Multiple Cybozu products vulnerable to cross-site scripting
2011/06/24 JVN#59779256:
Cybozu Garoon vulnerable to cross-site scripting
2011/06/20 JVN#43386477:
WeblyGo vulnerable to cross-site scripting
2011/06/16 JVN#87239473:
Ichitaro series vulnerable to arbitrary code execution
2011/06/15 JVN#40382909:
Microsoft Outlook read receipt function vulnerability
2011/06/15 JVN#72586781:
ASP.NET vulnerable to cross-site scripting
2011/06/15 JVN#26408023:
Internet Explorer vulnerable to cross-site scripting
2011/06/15 JVN#73643130:
Microsoft MSXML vulnerability in HTTP request processing
2011/06/15 JVN#63451350:
Clipboard contents alteration vulnerability in Internet Explorer
2011/06/15 JVN#5D1D3E36:
Microsoft Windows VBScript implementation file name disclosure vulnerability
2011/06/10 JVN#18680611:
Java Web Start may insecurely load dynamic libraries
2011/06/10 JVN#09206238:
Java Web Start may insecurely load settings files
2011/06/10 JVN#29212182:
Java Web Start may insecurely load policy files
2011/05/26 JVN#46984044:
WalRack upload file handilng vulnerability
2011/05/25 JVN#45658190:
Movable Type vulnerable to cross-site scripting
2011/05/19 JVN#77697803:
iVIEW Suite vulnerable to SQL injection
2011/05/17 JVN#99175647:
Virus Buster 2009 key input encryption function vulnerability
2011/05/11 JVN#96839637:
La Fonera+ vulnerable to denial-of-service (DoS)
2011/05/11 JVN#63898867:
Applications that use the Windows Help function may be vulnerable to privilege escalation
2011/05/10 JVN#37878530:
EC-CUBE vulnerable to cross-site request forgery
2011/04/19 JVN#50505257:
Multiple Buffalo routers vulnerable to cross-site request forgery
2011/04/11 JVN#55714408:
Multiple Yamaha routers vulnerable to denial-of-service (DoS)
2011/04/08 JVN#11424086:
Password Vault Web Access vulnerable to cross-site scripting
2011/03/25 JVN#99977321:
Picasa may insecurely load executable files
2011/03/14 JVN#01635457:
e107 vulnerable to cross-site scripting
2011/03/10 JVN#81294135:
IBM Tivoli vulnerable to denial-of-service (DoS)
2011/03/07 JVN#73162541:
OTRS vulnerable to OS command injection
2011/03/04 JVN#97334690:
IBM Lotus vulnerable to denial-of-service (DoS)
2011/03/04 JVN#26301278:
IBM WebSphere Application Server vulnerable to denial-of-service (DoS)
2011/03/04 JVN#16308183:
IBM DB2 vulnerable to denial-of-service (DoS)
2011/03/02 JVN#20982938:
Multiple Things CGI products vulnerable to cross-site scripting
2011/02/28 JVN#88991166:
SEIL Series routers vulnerable to buffer overflow
2011/02/23 JVN#38362957:
Lunascape may insecurely load executable files
2011/02/16 JVN#71542734:
F-Secure Internet Gatekeeper for Linux authentication issue
2011/02/02 JVN#33880169:
Opera may insecurely load executable files
2011/02/02 JVN#84393059:
EC-CUBE vulnerable to cross-site scripting
2011/01/26 JVN#95385972:
MODx Evolution vulnerable to directory traversal
2011/01/26 JVN#54092716:
MODx Evolution vulnerable to SQL injection
2011/01/21 JVN#94695018:
Lunascape may insecurely load dynamic libraries
2011/01/21 JVN#26605630:
Cisco Linksys WRT54GC vulnerable to buffer overflow
2011/01/18 JVN#09115481:
Cross-site scripting vulnerability in multiple Rocomotion products
2011/01/18 JVN#30414126:
Ruby Version Manager escape sequence injection vulnerability
2011/01/11 JVN#86347943:
SGX-SP Final and SGX-SP Final NE vulnerable to cross-site scripting
2011/01/11 JVN#53293565:
Contents-Mall vulnerability in password handling
2011/01/11 JVN#50704770:
Aipo vulnerable to SQL injection
2011/01/07 JVN#30881447:
SquirrelMail vulnerable to cross-site request forgery
2011/01/07 JVN#09157962:
SquirrelMail vulnerable to cross-site scripting

2010

2010/12/17 JVN#02175694:
AttacheCase may insecurely load executable files
2010/12/15 JVN#33301529:
Internet Explorer vulnerable to cross-site scripting
2010/12/15 JVN#21120853:
Internet Explorer vulnerable to cross-site scripting
2010/12/15 JVN#30273074:
Internet Explorer vulnerable to cross-site scripting
2010/12/15 JVN#62275332:
Internet Explorer vulnerable to cross-site scripting
2010/12/08 JVN#78536512:[Critical]
Movable Type vulnerable to SQL injection
2010/12/08 JVN#36673836:
Movable Type vulnerable to cross-site scripting
2010/12/08 JVN#62736872:
Vulnerability in Epson printer driver installer where access permissions are changed
2010/12/01 JVN#76662040:
Clipboard contents alteration vulnerability in Grani
2010/12/01 JVN#64764004:
Clipboard contents alteration vulnerability in Sleipnir
2010/11/26 JVN#36765384:
Google Chrome information disclosure vulnerability
2010/11/26 JVN#46026251:
Safari address bar spoofing vulnerability
2010/11/09 JVN#48425028:
Flash Player access restriction bypass vulnerability
2010/11/04 JVN#01948274:
Ichitaro series vulnerable to arbitrary code execution
2010/11/04 JVN#19173793:
Ichitaro series vulnerable to arbitrary code execution
2010/11/01 JVN#27868039:
GVim may insecurely load dynamic libraries
2010/10/29 JVN#72541530:
Active! mail 6 vulnerable to HTTP header injection
2010/10/22 JVN#07497935:
Multiple Yokka provided products may insecurely load executable files
2010/10/22 JVN#89272705:
Sleipnir and Grani may insecurely load executable files
2010/10/22 JVN#50610528:
Sleipnir and Grani may insecurely load dynamic libraries
2010/10/21 JVN#71138390:
Apsaly may insecurely load executable files
2010/10/21 JVN#48097065:
TeraPad may insecurely load dynamic libraries
2010/10/20 JVN#68536660:
Archive Decoder may insecurely load executable files
2010/10/20 JVN#85599999:
Explzh may insecurely load executable files
2010/10/18 JVN#50133036:
Cross-site Request Forgery Vulnerability in Oracle iPlanet Web Server
2010/10/15 JVN#36921800:
K2Editor may insecurely load executable files
2010/10/15 JVN#04665167:
XacRett may insecurely load executable files
2010/10/15 JVN#18774708:
Lhaplus may insecurely load executable files
2010/10/12 JVN#88850043:
Lhasa may insecurely load executable files
2010/10/12 JVN#82752978:
Lhaplus may insecurely load dynamic libraries
2010/10/05 JVN#69191943:
AD-EDIT2 vulnerable to cross-site scripting
2010/09/10 JVN#35605523:
Cross-site scripting vulnerability in Access Analyzer CGI by futomi's CGI Cafe
2010/08/31 JVN#75101998:
moobbs2 vulnerable to cross-site scripting
2010/08/31 JVN#24423311:
moobbs vulnerable to cross-site scripting
2010/08/25 JVN#12683004:
SEIL/X Series and SEIL/B1 IPv6 Unicast RPF vulnerability
2010/08/20 JVN#91740962:[Critical]
Winny vulnerable to buffer overflow
2010/08/20 JVN#21471805:[Critical]
Winny vulnerable to buffer overflow
2010/08/20 JVN#25393522:[Critical]
Winny node information processing vulnerability
2010/08/20 JVN#54336184:[Critical]
Winny BBS information processing vulnerability
2010/08/13 JVN#86832361:
Microsoft Windows denial of service (DoS) vulnerability
2010/06/22 JVN#34729123:
Explzh buffer overflow vulnerability
2010/06/14 JVN#67120749:
Multiple vulnerabilities in ActiveGeckoBrowser
2010/06/02 JVN#36925871:
e-Pares vulnerable to session fixation
2010/06/02 JVN#82465391:
e-Pares vulnerable to cross-site request forgery
2010/06/02 JVN#58439007:
e-Pares vulnerable to cross-site scripting
2010/06/01 JVN#17293765:
Ichitaro series vulnerable to arbitrary code execution
2010/05/17 JVN#82749282:
CapsSuite Small Edition PatchMeister vulnerable to denial of service
2010/05/17 JVN#90872372:
WebSAM DeploymentManager vulnerable to denial of service
2010/05/17 JVN#90248889:
Interstage Application Server vulnerable in request processing
2010/05/12 JVN#92854093:
Movable Type vulnerable to cross-site scripting
2010/04/19 JVN#87730223:
Multiple Cybozu products vulnerable to authentication bypass
2010/04/12 JVN#98467259:
Ichitaro series vulnerable to arbitrary code execution
2010/04/08 JVN#14313132:
Cisco Router and Security Device Manager vulnerable to cross-site scripting
2010/04/08 JVN#46669729:
MODx vulnerable to cross-site scripting
2010/04/08 JVN#19774883:
MODx vulnerable to SQL injection
2010/04/07 JVN#49467403:
Internet Explorer information disclosure vulnerability
2010/04/02 JVN#60969543:
HL-SiteManager vulnerable to SQL injection
2010/04/01 JVN#38687002:
Compiere vulnerable to cross-site scripting
2010/04/01 JVN#57963254:
Compiere vulnerable to cross-site scripting
2010/04/01 JVN#41842181:
PrettyFormMail vulnerable to cross-site scripting
2010/03/05 JVN#06874657:
OpenPNE authentication bypass vulnerability
2010/02/25 JVN#73331060:
tDiary plugin tb-send.rb vulnerable to cross-site scripting
2010/01/14 JVN#50837839:
Oracle Application Server vulnerable to cross-site scripting
2010/01/12 JVN#22247093:
WebCalenderC3 vulnerable to directory traversal
2010/01/12 JVN#33977065:
WebCalenderC3 cross-site scripting vulnerability
2010/01/06 JVN#09872874:
Movable Type access restriction bypass vulnerability

2009

2009/12/15 JVN#00152874:
P forum vulnerable to directory traversal
2009/12/09 JVN#49602378:
SEIL/B1 authentication issue
2009/12/08 JVN#36207497:
Active! mail 2003 cookie disclosure vulnerability
2009/12/08 JVN#85821104:
Active! mail 2003 session ID disclosure vulnerability
2009/12/08 JVN#49083120:
Active! mail 2003 cross-site scripting vulnerability
2009/12/07 JVN#79762947:[Critical]
EC-CUBE information disclosure vulnerability
2009/11/19 JVN#87341298:
Redmine vulnerable to cross-site request forgery
2009/11/19 JVN#01245481:
Redmine vulnerable to cross-site scripting
2009/11/04 JVN#75694913:
Roundcube Webmail vulnerable to cross-site request forgery
2009/11/04 JVN#72974205:
Roundcube Webmail vulnerable to cross-site request forgery
2009/10/28 JVN#13011682:
SEIL/X Series and SEIL/B1 denial of service vulnerability
2009/10/28 JVN#06362164:
SEIL/X Series and SEIL/B1 buffer overflow vulnerability
2009/10/26 JVN#75368899:
Implementations of IPv6 may be vulnerable to denial of service (DoS) attacks
2009/10/20 JVN#33822756:
Canon IT Solutions Inc. ACCESSGUARDIAN vulnerable to cross-site scripting
2009/10/15 JVN#23108985:
Multiple Cybozu products vulnerable to cross-site scripting
2009/10/02 JVN#84396512:
SugarCRM vulnerable to cross-site scripting
2009/09/18 JVN#65914253:
Directory traversal vulnerability in multiple phpspot products
2009/09/18 JVN#53591199:
Cross-site scripting vulnerability in multiple phpspot products
2009/09/17 JVN#00425482:
XF-Section vulnerable to cross-site scripting
2009/09/17 JVN#39157969:
Third-party cookie issue in Opera
2009/09/11 JVN#05857667:[Critical]
Webservice-DIC yoyaku_v41 vulnerable to command injection
2009/09/09 JVN#62211338:[Critical]
Buffer overflow vulnerability in Microsoft Windows
2009/09/02 JVN#57040664:
ATOK screen lock bypass vulnerability
2009/08/27 JVN#68640473:
bingo!CMS core and bingo!CMS vulnerable to cross-site request forgery
2009/08/24 JVN#31035930:
SugarCRM vulnerable to SQL injection
2009/08/21 JVN#20478978:
Site Calendar 'mycaljp' vulnerable to cross-site scripting
2009/08/19 JVN#21388501:
ColdFusion vulnerable to cross-site scripting
2009/08/05 JVN#15267895:
Cross-site request forgery vulnerability in FreeNAS
2009/08/05 JVN#89791790:
Cross-site scripting vulnerability in FreeNAS
2009/07/31 JVN#80436657:[Critical]
Webservice-DIC yoyaku_v41 vulnerable to command injection
2009/07/29 JVN#59748723:
MySQL Connector/J vulnerable to SQL injection
2009/07/24 JVN#29852698:
Cross-site scripting vulnerability in RevoCounter CGI (Animation Counter)
2009/07/14 JVN#31110006:
shiromuku(fs6)DIARY cross-site scripting vulnerability
2009/06/25 JVN#32788272:
PHP-I-BOARD from Let's PHP! vulnerable to directory traversal
2009/06/25 JVN#20219071:
PHP-I-BOARD from Let's PHP! vulnerable to cross-site scripting
2009/06/25 JVN#93827000:
Tree BBS from Let's PHP! vulnerable to cross-site scripting
2009/06/24 JVN#08369659:
Movable Type access restriction bypass vulnerability
2009/06/24 JVN#86472161:
Movable Type cross-site scripting vulnerability
2009/06/19 JVN#12244807:
Cross-site scripting vulnerability in PukiWikiMod from XOOPS Maniac
2009/06/18 JVN#87239696:
iPhone OS denial of service (DoS) vulnerability
2009/06/11 JVN#70858401:[Critical]
Buffer overflow vulnerability in Microsoft Works converters
2009/06/10 JVN#55752635:
Cross-site scripting vulnerability in activeCollab
2009/06/09 JVN#87272440:
Apache Tomcat denial of service (DoS) vulnerability
2009/06/09 JVN#63832775:
Apache Tomcat information disclosure vulnerability
2009/06/08 JVN#20689557:
Predictable session ID vulnerability in Serene Bach
2009/05/29 JVN#70836284:
IMG-BBS from MT312 vulnerable to cross-site scripting
2009/05/29 JVN#01115659:
REP-BBS from MT312 vulnerable to cross-site scripting
2009/05/29 JVN#62527913:
Directory traversal vulnerability in multiple Cisco Systems products
2009/05/22 JVN#57036470:
Cross-site scripting vulnerability in leger (free edition)
2009/05/21 JVN#42927215:
a-News from Appleple vulnerable to cross-site scripting
2009/05/20 JVN#02331156:
HP System Management Homepage vulnerable to cross-site scripting
2009/05/18 JVN#28521500:
Trees from CGI RESCUE vulnerable to cross-site scripting
2009/05/13 JVN#73653977:
Sun GlassFish Enterprise Server and Sun Java System Application Server vulnerable to cross-site scripting
2009/05/11 JVN#03114223:
SQL injection vulnerability in SKIP from SKIP User Group
2009/05/11 JVN#43233160:
Cross-site scripting vulnerability in SKIP from SKIP User Group
2009/04/27 JVN#28020230:
Web Mailer from CGI RESCUE vulnerable to HTTP header injection
2009/04/27 JVN#76370393:
FORM2MAIL from CGI RESCUE allows unauthorized email transmission
2009/04/27 JVN#11396739:
Cross-site scripting vulnerability in MiniBBS from CGI RESCUE
2009/04/27 JVN#36982346:
MiniBBS22 from CGI RESCUE allows unauthorized email transmission
2009/04/24 JVN#97248625:
Movable Type cross-site scripting vulnerability
2009/04/16 JVN#82744714:
Cross-site scripting vulnerability in apricot.php from LovPop.net
2009/04/07 JVN#33846134:
Ichitaro series buffer overflow vulnerability
2009/04/02 JVN#74747784:
XOOPS Cube Legacy cross-site scripting vulnerability
2009/03/31 JVN#63511247:
Access Analyzer CGI Professional Version vulnerability allows third party to gain administrative privileges
2009/03/16 JVN#23558374:
Cross-site scripting vulnerability in Access Analyzer CGI Standard Version (Ver. 3.x)
2009/03/10 JVN#84899898:
MP Form Mail CGI vulnerability allows third party to gain administrative privileges
2009/02/26 JVN#66905322:
Apache Tomcat information disclosure vulnerability
2009/02/25 JVN#91591874:
PEAK XOOPS piCal cross-site scripting vulnerability
2009/02/23 JVN#16767117:
Buffer overflow vulnerability in ActiveX Control for Sony SNC series network cameras
2009/02/12 JVN#29641290:[Critical]
Becky! Internet Mail buffer overflow vulnerability
2009/02/10 JVN#45184501:
FAST ESP cross-site scripting vulnerability
2009/01/23 JVN#80771386:
Fulltext search CGI vulnerability allows third party to gain administrative privileges
2009/01/20 JVN#93431860:
Oracle WebLogic Server vulnerable to cross-site scripting
2009/01/15 JVN#28344798:
Cisco IOS cross-site scripting vulnerability
2009/01/09 JVN#72630020:
MODx vulnerable to SQL injection
2009/01/09 JVN#66828183:
MODx cross-site request forgery vulnerability
2009/01/09 JVN#10170564:
MODx cross-site scripting vulnerability
2009/01/08 JVN#71945722:
Movable Type Enterprise cross-site scripting vulnerability
2009/01/07 JVN#36802959:
MyNETS cross-site scripting vulnerability

2008

2008/12/25 JVN#98063934:
BlackJumboDog authentication bypass vulnerability
2008/12/25 JVN#17298485:
Mayaa cross-site scripting vulnerability
2008/12/19 JVN#50327700:
PHP vulnerable to cross-site scripting
2008/12/12 JVN#07468800:
Predictable session ID vulnerability in Access Analyzer CGI by futomi's CGI Cafe
2008/12/03 JVN#02216739:
Movable Type Enterprise cross-site scripting vulnerability
2008/11/26 JVN#70599814:
I-O DATA DEVICE HDL-F series cross-site request forgery vulnerability
2008/11/21 JVN#86833991:
CGI RESCUE MiniBBS2000 directory traversal vulnerability
2008/11/17 JVN#47875752:
GungHo LoadPrgAx vulnerable to arbitrary Java program execution
2008/11/06 JVN#19072922:[Critical]
EC-CUBE vulnerable to SQL injection
2008/11/06 JVN#67060882:
sISAPILocation vulnerability bypasses HTTP header rewrite function
2008/10/28 JVN#20502807:[Critical]
Snoopy command injection vulnerability
2008/10/20 JVN#53267766:
MyNETS cross-site scripting vulnerability
2008/10/20 JVN#55410403:
Internet Explorer vulnerable in handling CDO protocol
2008/10/20 JVN#03300113:
Blosxom vulnerable to cross-site scripting
2008/10/17 JVN#81490697:
Movable Type cross-site scripting vulnerability
2008/10/17 JVN#67334580:
hisa_cart information disclosure vulnerability
2008/10/10 JVN#30732239:
Apache Tomcat allows access from a non-permitted IP address
2008/10/06 JVN#92651529:
Nucleus EUC-JP Japanese Edition vulnerable to cross-site scripting
2008/10/01 JVN#81111541:[Critical]
EC-CUBE vulnerable to SQL injection
2008/10/01 JVN#99916563:
EC-CUBE cross-site scripting vulnerability
2008/10/01 JVN#36085487:
EC-CUBE cross-site scripting vulnerability
2008/10/01 JVN#26621646:
EC-CUBE cross-site scripting vulnerability
2008/09/26 JVN#54824688:
phpMyAdmin cross-site scripting vulnerability
2008/09/17 JVN#94163107:
Kantan WEB Server cross-site scripting vulnerability
2008/09/17 JVN#79026329:
Kantan WEB Server directory traversal vulnerability
2008/09/10 JVN#18616622:
Multiple Tor World CGI scripts vulnerable to arbitrary script execution
2008/09/09 JVN#30385652:
Movable Type vulnerable to cross-site scripting
2008/09/09 JVN#55010230:
Sound Master 2nd from High Norm vulnerable to cross-site scripting
2008/09/03 JVN#79914432:
Webservice-DIC shop_v50 and shop_v52 vulnerable to cross-site scripting
2008/08/29 JVN#03859837:
Blogn vulnerable to cross-site scripting
2008/08/29 JVN#84125369:
Blogn vulnerable to cross-site request forgery
2008/08/26 JVN#27417220:
mysql-lists from AquaGardenSoft Co.,Ltd. vulnerable to cross-site scripting
2008/08/21 JVN#53886050:
Vulnerability in La!cooda WIZ and LacoodaST allowing an arbitrary PHP script execution
2008/08/21 JVN#52557009:
La!cooda WIZ and LacoodaST vulnerable to cross-site scripting
2008/08/21 JVN#31723154:
LacoodaST from SpaceTag, Inc. session fixation vulnerability
2008/08/21 JVN#83428818:
La!cooda WIZ and LacoodaST vulnerable to cross-site request forgery
2008/08/12 JVN#66077895:
Virus Security and Virus Security ZERO denial of service (DoS) vulnerability
2008/07/31 JVN#33706820:
Multiple Panasonic Communications Co., Ltd. network cameras vulnerable to cross-site scripting
2008/07/25 JVN#60419863:
Geeklog Forum Plugin vulnerable to cross-site scripting
2008/07/23 JVN#72065744:
K's CGI Access Log Kaiseki (Jcode.pm) vulnerable to cross-site scripting
2008/07/23 JVN#46869708:
K's CGI Access Log Kaiseki (jcode.pl) vulnerable to cross-site scripting
2008/07/22 JVN#67573833:
Multiple Century Systems routers vulnerable to cross-site request forgery
2008/07/18 JVN#49704543:
WebProxy from LunarNight Laboratory vulnerable to cross-site scripting
2008/07/18 JVN#81667751:
Directory traversal vulnerability in WebLogic Server and WebLogic Express plug-ins
2008/07/14 JVN#88676089:
Safari installed in iPod touch and iPhone vulnerable in handling server certificates
2008/07/07 JVN#00945448:
Redmine vulnerable to cross-site scripting
2008/07/03 JVN#77432756:
FreeStyleWiki cross-site scripting vulnerability
2008/06/27 JVN#52363223:
Cybozu Garoon vulnerable to arbitrary script execution
2008/06/27 JVN#18700809:
Cybozu Garoon session fixation vulnerability
2008/06/27 JVN#18405927:
Multiple Cybozu products vulnerable to cross-site request forgery
2008/06/25 JVN#36635562:
nProtect : Netizen denial of service (DoS) vulnerability
2008/06/19 JVN#45389864:
CGIWrap error page cross-site scripting vulnerability
2008/06/17 JVN#14072646:
BlognPlus SQL injection vulnerability
2008/06/10 JVN#88935101:
X.Org Foundation X server buffer overflow vulnerability
2008/06/04 JVN#25448394:
Sleipnir and Grani vulnerable to arbitrary script execution when Bookmark search results are restored from history
2008/05/30 JVN#43906021:
WEB MART from KENT WEB vulnerable to cross-site scripting
2008/04/28 JVN#74468481:[Critical]
Lhaplus buffer overflow vulnerability
2008/04/28 JVN#31351020:
Cross-site scripting vulnerabilities in multiple Bluemoon Inc. XOOPS modules
2008/04/23 JVN#76788395:
Sony mylo COM-2 does not verify server SSL certificate
2008/04/04 JVN#21563357:
Mozilla Firefox cross-site scripting vulnerability
2008/03/27 JVN#76669770:
PerlMailer cross-site scripting vulnerability
2008/03/27 JVN#58803701:
DesignForm cross-site scripting vulnerability
2008/03/21 JVN#00892830:
Namazu cross-site scripting vulnerability
2008/03/18 JVN#13159997:[Critical]
Multiple I-O DATA DEVICE wireless LAN routers default configuration does not set authentication
2008/03/12 JVN#79114735:
Google Desktop cross-site scripting vulnerability
2008/03/11 JVN#04032535:
Sun Java Runtime Environment (JRE) contains a vulnerability in processing XSLT transformations
2008/03/07 JVN#10606373:
BFup ActiveX Control buffer overflow vulnerability
2008/03/07 JVN#21312708:
MTCMS WYSIWYG Editor cross-site scripting vulnerability
2008/03/07 JVN#95014590:
Zimbra Collaboration Suite script execution vulnerability
2008/03/05 JVN#10056705:
FTP bounce vulnerability in multiple Canon digital multifunction copiers and laser beam printers
2008/02/29 JVN#53757727:
Nagios cross-site scripting vulnerability
2008/02/21 JVN#54593414:
Cross-site scripting vulnerability in multiple Tor World CGI scripts
2008/02/21 JVN#42381549:
Internet Scanner reporting engine vulnerable to cross-site scripting
2008/02/12 JVN#09470767:
Apache Tomcat fails to properly handle cookie value
2008/02/07 JVN#38893575:
PC2M cross-site scripting vulnerability
2008/02/05 JVN#91868305:
RaidenHTTPD cross-site scripting vulnerability
2008/01/28 JVN#01162446:
Cross-site scripting vulnerabilities in multiple Hal Networks shopping cart products
2008/01/28 JVN#88575577:
Multiple Yamaha routers vulnerable to cross-site request forgery
2008/01/07 JVN#08237857:
Multiple JustSystems products vulnerable to buffer overflow

2007

2007/12/26 JVN#33044255:
GreaseKit and Creammonkey allows execution of userscript functions
2007/12/25 JVN#44736880:
WinAce buffer overflow vulnerability
2007/12/21 JVN#89292430:
Cross-site scripting in Sun Java System Web Server and Sun Java System Web Proxy Server
2007/12/20 JVN#50876069:
Flash Player allows to send arbitrary HTTP headers
2007/12/20 JVN#45675516:
Flash Player vulnerable in handling cross-domain policy files
2007/12/18 JVN#75130343:
Google Web Toolkit vulnerable to cross-site scripting
2007/12/13 JVN#80057925:
Cross-site scripting vulnerability in Apache HTTP Server "mod_imap" and "mod_imagemap"
2007/12/13 JVN#52846259:
JP1/Cm2/Network Node Manager vulnerable to cross-site scripting
2007/12/12 JVN#23120863:
Rainboard cross-site scripting vulnerability
2007/12/11 JVN#90712589:
Multiple Cybozu products vulnerable to cross-site scripting
2007/12/11 JVN#77730435:
Multiple Cybozu products vulnerable to HTTP header injection
2007/12/11 JVN#50342989:
Multiple Cybozu products vulnerable to cross-site scripting
2007/12/11 JVN#77414947:
Cybozu Office denial of service (DoS) vulnerability
2007/12/07 JVN#02854109:
HttpLogger vulnerable to cross-site scripting
2007/12/04 JVN#66291445:
SonicStage CP buffer overflow vulnerability
2007/11/22 JVN#82610488:[Critical]
Lhaplus buffer overflow vulnerability
2007/11/21 JVN#55833292:
FileMaker cross-site scripting vulnerability
2007/11/20 JVN#33218020:
Feed2JS cross-site scripting vulnerability
2007/11/19 JVN#33820033:
RoundCube Webmail cross-site request forgery vulnerability
2007/11/13 JVN#65427327:
Sleipnir and Grani Bookmark Search vulnerable to arbitrary script execution
2007/11/09 JVN#99453765:
Cross-site scripting vulnerability in updir.php in UPDIR.NET
2007/11/07 JVN#84565055:
Lotus Domino cross-site scripting vulnerability
2007/11/05 JVN#79295963:
NetCommons cross-site scripting vulnerability
2007/10/25 JVN#29211062:
Ichitaro series buffer overflow vulnerability
2007/10/25 JVN#32981509:
Ichitaro series buffer overflow vulnerability
2007/10/25 JVN#50495547:
Ichitaro series buffer overflow vulnerability
2007/10/12 JVN#63304072:
MouseoverDictionary vulnerable to arbitrary script execution
2007/10/12 JVN#71872818:
AirStation series and BroadStation series vulnerable to cross-site request forgery
2007/10/05 JVN#61323184:
PowerArchiver buffer overflow vulnerability
2007/10/03 JVN#61208749:
Webmin OS command injection vulnerability
2007/10/01 JVN#79013771:
Safari allows access from HTTP to HTTPS
2007/09/28 JVN#70075625:
Aipo session fixation vulnerability
2007/09/21 JVN#70734805:
Lhaplus buffer overflow vulnerability
2007/09/07 JVN#35677737:
Fingerprint Authentication Software for Sony Pocket Bit installs hidden folders and files
2007/09/06 JVN#75899905:
Fuktommy.com httpd.pl included in its HTML preprocessor vulnerable in allowing an attacker to view arbitrary CGI source code
2007/09/06 JVN#01913089:
Fuktommy.com httpd.pl including HTML preprocessor vulnerable to directory traversal
2007/09/05 JVN#62868899:
7-ZIP32.DLL buffer overflow vulnerability
2007/09/03 JVN#43091983:
Fulltext search CGI from futomi's CGI Cafe vulnerable to cross-site scripting
2007/08/31 JVN#20452446:
Shopping Basket Pro directory traversal vulnerability
2007/08/27 JVN#38199598:
Mayaa cross-site scripting vulnerability
2007/08/27 JVN#82276964:
Tuigwaa cross-site scripting vulnerability
2007/08/15 JVN#59851336:
Apache Tomcat Host Manager cross-site scripting vulnerability
2007/08/10 JVN#66303599:
WebCart cross-site scripting vulnerability
2007/08/02 JVN#16018033:
Safari URL spoofing vulnerability
2007/07/31 JVN#43615794:
Yayoi Kaikei improper handling of credential information
2007/07/25 JVN#25471539:
Aruba Mobility Controller Series cross-site scripting vulnerability
2007/07/20 JVN#34058672:
Nessus report function vulnerable to arbitrary script execution
2007/07/11 JVN#72595280:
Flash Player allows to send arbitrary Referer headers
2007/07/09 JVN#33593387:
KDDI sample CGI download program directory traversal vulnerability
2007/06/27 JVN#44532794:
rktSNS cross-site scripting vulnerability
2007/06/27 JVN#74063879:
sHTTPd cross-site scripting vulnerability
2007/06/25 JVN#05187780:
Hiki arbitrary file deletion vulnerability
2007/06/21 JVN#90438169:
RaidenHTTPD cross-site scripting vulnerability
2007/06/19 JVN#16535199:
Apache Tomcat Accept-Language Header Cross-Site Scripting Vulnerability
2007/06/18 JVN#27203006:
Internet Explorer vulnerable in MHTML handling
2007/06/18 JVN#95019167:
Internet Explorer vulnerable in handling MHTML protocol
2007/06/15 JVN#64851600:
Apache Tomcat sample web application cross-site scripting vulnerability
2007/06/15 JVN#07100457:
Apache Tomcat cross-site scripting vulnerability
2007/06/14 JVN#63602912:
dotProject cross-site scripting vulnerability
2007/06/07 JVN#23891849:
ADPLAN cross-site scripting vulnerability
2007/06/04 JVN#89497739:
Meneame cross-site scripting vulnerability
2007/06/01 JVN#38605899:
Mozilla Firefox cross-site scripting vulnerability
2007/06/01 JVN#19240523:
HP System Management Homepage cross-site scripting vulnerability
2007/05/18 JVN#92832583:
Advance-Flow cross-site scripting vulnerability
2007/05/16 JVN#81294906:[Critical]
Homepage Builder sample CGI programs vulnerable to OS command injection
2007/05/09 JVN#36628264:
Lunascape RSS reader arbitrary script execution vulnerability
2007/05/08 JVN#44724673:[Critical]
Java Web Start vulnerable to execution of unauthorized system classes
2007/04/19 JVN#06735665:
Canon Network Camera Server VB100 Series vulnerable to cross-site scripting
2007/04/19 JVN#19445002:
APOP password recovery vulnerability
2007/04/17 JVN#91305178:
InfoBarrier4 self-decrypted file vulnerability
2007/04/16 JVN#62334841:
Shihonkanri Plus Ver2 GOOUT directory traversal vulnerability
2007/04/16 JVN#84646028:
open-gorotto cross-site scripting vulnerability
2007/03/30 JVN#40511721:
MailDwarf cross-site scripting vulnerability
2007/03/30 JVN#08951968:
MailDwarf vulnerability allows unauthorized sending of emails
2007/03/30 JVN#62399483:
Overlay Weaver cross-site scripting vulnerability
2007/03/29 JVN#73258608:
CruiseWorks and Minna De Office vulnerable in access restrictions
2007/03/26 JVN#86092776:
BASP21 vulnerable in handling CRLF sequences
2007/03/22 JVN#64227086:
NewsGlue and Ikinari Jijyoutsuu arbitrary script execution vulnerability
2007/03/19 JVN#83832818:
Interstage Application Server cross-site scripting vulnerability
2007/03/16 JVN#19795972:
FENCE-Pro and Systemwalker Desktop Encryption self-decoding file vulnerability
2007/03/13 JVN#91706484:
Trac cross-site scripting vulnerability
2007/03/12 JVN#80126589:
CCC Cleaner division-by-zero vulnerability when scanning UPX-packed executables
2007/02/16 JVN#84746611:
Ariel AirOne series cross-site scripting vulnerability
2007/02/14 JVN#48566866:
ColdFusion error page cross-site scripting vulnerability
2007/02/14 JVN#14243645:
Adobe JRun cross-site scripting vulnerability
2007/02/14 JVN#28356427:
ColdFusion cross-site scripting vulnerability
2007/02/10 JVN#77366274:
CCC Cleaner buffer overflow vulnerability
2007/02/09 JVN#84430861:
Sage vulnerable to arbitrary script execution
2007/01/29 JVN#80271113:
MODx cross-site scripting vulnerability
2007/01/26 JVN#93700808:
Sleipnir RSS bar vulnerable in handling RSS data in an inappropriate security zone
2007/01/26 JVN#64354801:
b2evolution cross-site scripting vulnerability
2007/01/25 JVN#82258242:[Critical]
Shopping Basket Professional vulnerable to OS command injection
2007/01/25 JVN#24879092:
CGI RESCUE WebFORM missing mail content vulnerability
2007/01/25 JVN#05123538:
CGI RESCUE WebFORM vulnerable to cross-site scripting
2007/01/25 JVN#05088443:
CGI RESCUE WebFORM vulnerable to HTTP header injection
2007/01/23 JVN#32985115:
Movable Type cross-site scripting vulnerability
2007/01/22 JVN#07274813:
phpAdsNew cross-site scripting vulnerability
2007/01/18 JVN#95249468:
Fresh Reader RSS feed cross-site scripting vulnerability
2007/01/17 JVN#13939411:
Drupal cross-site scripting vulnerability
2007/01/05 JVN#65500885:
Serene Bach cross-site scripting vulnerability

2006

2006/12/28 JVN#45006961:
Joomla! cross-site scripting vulnerability
2006/12/28 JVN#31185550:
tDiary arbitrary Ruby script execution vulnerability
2006/12/25 JVN#02729869:
pnamazu cross-site scripting vulnerability
2006/12/22 JVN#78520316:
a-blog cross-site scripting vulnerability
2006/12/21 JVN#74079537:
SugarCRM cross-site scripting vulnerability
2006/12/08 JVN#34830904:
Shobo Shobo Nikki System (sns) cross-site scripting vulnerability
2006/12/05 JVN#47272891:
Hanako buffer overflow vulnerability
2006/12/04 JVN#84798830:
Denial of service vulnerability in Ruby CGI library (cgi.rb)
2006/12/04 JVN#38746816:
TikiWiki cross-site scripting vulnerability
2006/11/30 JVN#08494205:
Chama Cargo cross-site scripting vulnerability
2006/11/29 JVN#21125043:
Blogn cross-site scripting vulnerability
2006/11/27 JVN#47223461:
tDiary cross-site scripting vulnerability
2006/11/24 JVN#57280612:
phpComasy cross-site scripting vulnerability
2006/11/20 JVN#46244305:
eyeOS cross-site scripting vulnerability
2006/11/17 JVN#61543834:
EC-CUBE cross-site scripting vulnerability
2006/11/14 JVN#84656399:
Nucleus cross-site scripting vulnerability
2006/11/10 JVN#34522909:
Kahua vulnerable in allowing to share login sessions
2006/11/06 JVN#30994815:
MyODBC Japanese Conversion Edition denial of service vulnerability
2006/11/06 JVN#88325166:
Hyper NIKKI System cross-site scripting vulnerability
2006/10/24 JVN#07235355:
desknet's buffer overflow vulnerability
2006/10/20 JVN#85996645:
NEC MultiWriter 1700C/7500C FTP server vulnerability
2006/10/20 JVN#63999575:
NEC MultiWriter 1700C web server authentication bypass vulnerability
2006/10/18 JVN#90815371:
Ichitaro buffer overflow vulnerability
2006/10/12 JVN#41241092:
Kmail CGI authentication bypass vulnerability
2006/10/02 JVN#93484133:
TeraStation HD-HTGL series cross-site request forgery vulnerability
2006/09/28 JVN#79484135:
Joomla! cross-site scripting vulnerability
2006/09/28 JVN#82240092:
Drupal cross-site scripting vulnerability
2006/09/26 JVN#68295640:
Movable Type vulnerabile to cross-site scripting
2006/09/26 JVN#30144870:
SugarCRM cross-site scripting vulnerability
2006/09/22 JVN#46630603:
MDPro cross-site scripting vulnerability
2006/09/13 JVN#52201480:
Microsoft Windows Indexing Service cross-site scripting vulnerability
2006/08/31 JVN#99776858:
Multiple vulnerabilities in Webmin and Usermin
2006/08/28 JVN#31125599:
Cybozu Office 6 information disclosure vulnerability
2006/08/28 JVN#90420168:
Cybozu products vulnerable to directory traversal
2006/08/23 JVN#11048526:
mail f/w system vulnerable to allow unauthorized email transmissionk
2006/08/16 JVN#39103264:
Owl SQL injection vulnerability
2006/08/16 JVN#01137722:
Owl cross-site scripting vulnerability
2006/08/14 JVN#02091617:
04WebServer cross-site scripting vulnerability
2006/08/14 JVN#27428836:
04WebServer directory traversal vulnerability
2006/08/14 JVN#51301450:
NetCommons cross-site scripting vulnerability
2006/08/10 JVN#62171179:
Kiri directory traversal vulnerability
2006/07/31 JVN#65677118:
Pixelpost cross-site scripting vulnerability
2006/07/28 JVN#27794427:
Dokeos cross-site scripting vulnerability
2006/07/18 JVN#92975133:
Loudblog cross-site scripting vulnerability
2006/07/18 JVN#62307185:
QwikiWiki cross-site scripting vulnerability
2006/07/18 JVN#81108784:
Geeklog cross-site scripting vulnerability
2006/07/12 JVN#76686161:
ServerView cross-site scripting vulnerability
2006/07/12 JVN#73368472:
ServerView directory traversal vulnerability
2006/07/11 JVN#83768862:
Ruby vulnerability caused by a problem with the alias funtion so that safe level 4 does not function as a sandbox
2006/07/11 JVN#13947696:
Ruby contains a vulnerability that prevents safe level 4 from functioning as a sandbox.
2006/07/06 JVN#44846612:
ATutor cross-site scripting vulnerability
2006/07/06 JVN#73705637:
ACollab SQL injection vulnerability
2006/07/03 JVN#98836916:
Wiki clone products vulnerable to denial of service attacks
2006/06/26 JVN#39188922:
dotProject cross-site scripting vulnerability
2006/06/26 JVN#76207423:
Phorum cross-site scripting vulnerability
2006/06/23 JVN#67974490:
Webmin directory traversal vulnerability
2006/06/14 JVN#74969119:
Microsoft Internet Explorer address bar spoofing vulnerability
2006/06/09 JVN#39570254:
CGI RESCUE WebFORM allows unauthorized email transmission
2006/06/05 JVN#97636431:
dotProject cross-site scripting vulnerability
2006/06/02 JVN#28513736:
Mozilla Firefox HTTP 1.0 response smuggling vulnerability
2006/06/02 JVN#62734622:
Mozilla Firefox vulnerable to HTTP response splitting
2006/05/24 JVN#16558862:
RWiki cross-site scripting vulnerability
2006/05/24 JVN#46691257:
RWiki arbitrary Ruby script execution vulnerability
2006/05/22 JVN#55425662:
MyWeb SQL injection vulnerability
2006/05/17 JVN#03D5EAA8:
Sun Java System Web Server cross-site scripting vulnerability
2006/05/09 JVN#84775942:
Multiple email clients vulnerable to directory traversal due to inappropriate unicode handling
2006/04/27 JVN#7F8621DE:
DonutP and UnDonut confirmation dialog display vulnerability
2006/04/26 JVN#72225922:
Apache Struts Validator allows to bypass input data validation
2006/04/21 JVN#74294680:
Winny buffer overflow vulnerability
2006/04/21 JVN#83263796:
SquirrelMail cross-site scripting vulnerability
2006/04/19 JVN#84091359:
Trac cross-site scripting vulnerability
2006/04/17 JVN#35274905:
FreeStyleWiki cross-site scripting vulnerability
2006/04/13 JVN#68630618:
QUICK CART cross-site scripting vulnerability
2006/04/13 JVN#10222000:
QUICK CART OS command injection vulnerability
2006/04/10 JVN#78363061:
CAFEMILK Shopping Cart CGI cross-site scripting vulnerability
2006/03/01 JVN#27365476:
Minnu's filer2 vulnerable in allowing arbitrary Ruby script execution
2006/02/28 JVN#65542239:
Hyper NIKKI System allows unauthorized email submission
2006/02/03 JVN#41550845:
Nagasaki Electronic Prefectural Office System SQL injection vulnerability
2006/02/01 JVN#77886599:
Hatena Toolbar sends URL information unecnrypted
2006/01/31 JVN#89344424:
Multiple email clients vulnerable in handling an attachement inapropriately
2006/01/17 JVN#73133641:
Eudora Japanese version stops working after the application crashes
2006/01/12 JVN#836B21C0:
Nagasaki Electronic Prefectural Office System vulnerable to bypass authentication
2006/01/12 JVN#6CA72ADB:
Nagasaki Electronic Prefectural Office System authentication information vulnerability

2005

2005/12/27 JVN#93004125:
BBSNote cross-site scripting vulnerability
2005/12/20 JVN#87830692:
WebNote Clip vulnerable to OS command injection
2005/12/15 JVN#06045169:
mod_imap cross-site scripting vulnerability
2005/12/14 JVN#28011334:
Opera bookmark function vulnerability
2005/12/13 JVN#15972537:
Fujitsu Java Runtime Environment reflection API vulnerability
2005/12/09 JVN#15243167:
Problem with referer header handling on mobile phone web browsers
2005/12/05 JVN#76357668:
MitakeSearch cross-site scripting vulnerability
2005/12/05 JVN#67001206:
Multiple vulnerabilities in FreeStyleWiki including cross-site scripting
2005/11/16 JVN#30451602:
HTTPD-User-Manage cross-site scripting vulnerability
2005/11/11 JVN#25106961:
Kent Web PostMail vulnerable to third party mail relay
2005/10/28 JVN#18282718:
Hyper Estraier directory traversal/denial of service vulnerability
2005/10/24 JVN#77105349:
XOOPS cross-site scripting vulnerability
2005/10/21 JVN#59130192:
eBASEweb SQL injection vulnerability
2005/10/11 JVN#23632449:
OpenSSL version rollback vulnerability
2005/09/30 JVN#76659792:
WirelessIP5000 has multiple vulnerabilities
2005/09/30 JVN#79314822:
Tomcat vulnerable in request processing
2005/09/29 JVN#31226748:
Vulnerability in multiple web browsers allowing request spoofing attacks
2005/09/22 JVN#79925E6F:
Cross-site scripting vulnerability in the Unicode version of msearch
2005/09/21 JVN#62914675:
Ruby vulnerability allowing to bypass safe level 4 as a sandbox
2005/09/20 JVN#40940493:
Webmin and Usermin authentication bypass vulnerability
2005/09/01 JVN#97422426:
Hyper NIKKI System cross-site request forgery vulnerability
2005/08/29 JVN#42435855:
FreeStyleWiki command injection vulnerability
2005/08/25 JVN#23727054:
Pochy denial-of-service (DoS) vulnerability
2005/08/24 JVN#8778A308:
Common Management Agent 3.x vulnerable to information leakage
2005/08/04 JVN#38138980:
Hiki cross-site scripting vulnerability
2005/07/28 JVN#29273468:
QRcode Perl CGI & PHP script vulnerable to denial of service attack
2005/07/20 JVN#60776919:
tDiary cross-site request forgery vulnerability
2005/07/13 JVN#93926203:
Java Cryptography Extension 1.2.1 (JCE 1.2.1) will no longer function properly after July 28, 2005 due to the expiration of its digital certificate
2005/07/12 JVN#257C6F28:
Vulnerability involving security zone handling in applications using Internet Explorer components
2005/06/10 JVN#7B700088:
SFS cross-site scripting vulnerability
2005/06/06 JVN#0DC004F6:
desknet's cross-site scripting vulnerability
2005/05/26 JVN#FCAD9BD8:
Inappropriate interpretation of mailto URL scheme by mail client software
2005/05/19 JVN#465742E4:
Wiki clone cross-site scripting vulnerability
2005/05/12 JVN#8EDB8A96:
Virus Security heap overflow vulnerability
2005/05/12 JVN#A45697B1:
Virus Security memory leak vulnerability
2005/05/12 JVN#74012178:
Movable Type session management vulnerability
2005/04/25 JVN#AF02FB4B:
nProtect Netizen has multiple vulnerabilities
2005/04/22 JVN#A7DA6818:
WebUD arbitrary program execution vulnerability
2005/04/19 JVN#97757029:
w3ml cross-site scripting vulnerability
2005/04/15 JVN#55023557:
Buffalo router configuration management interface vulnerable to remote access and password leakage
2005/04/14 JVN#9ADCBB12:
Website connection problem when a mobile phone terminal uses specific QR code
2005/04/11 JVN#55F159B6:
ppBlog cross-site scripting vulnerability
2005/03/29 JVN#C45D8EAD:
Norton AntiVirus causes abnormal OS termination when scanning illegal files
2005/03/29 JVN#23D7E89F:
Norton AntiVirus causes abnormal OS termination when a user edits a shared network file
2005/03/18 JVN#1F649902:
McAfee VirusScan Engine buffer overflow vulnerability
2005/03/14 JVN#DD18AD07:
Apache Tomcat denial of service vulnerability
2005/03/08 JVN#8BAAAB4E:
msearch directory traversal vulnerability
2005/02/07 JVN#8F8B1C85:
Cybozu Office browser script execution vulnerability
2005/01/11 JVN#1BF8D7AA:
LDAP server update function vulnerable to buffer overflow