Most recent entries from all

fkie_cve-2026-78238

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.

GHSA-crj8-8cwj-v6mf

SOY Gallery contains a cross-site scripting vulnerability. An arbitrary script may be executed on the web browser of the user who is logging in to the product.

jvndb-2026-000125

SOY series provided by Tsuyoshi Saito contain multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/502.html' target='_blank'></a><ul><li>Cross-site Scripting (CWE-79) - CVE-2026-73827, CVE-2026-77838, CVE-2026-78238</li><li>Deserialization of Untrusted Data (CWE-502) - CVE-2026-78032</li></ul>Shogo Kumamaru of LAC Co., Ltd. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.