Visit Website →

Recent Items

jvndb-2026-000146

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/94.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/89.html' target='_blank'></a> <ul><li>Code Injection in the Upgrade Script (CWE-94) - CVE-2026-96408</li><li>SQL Injection in the Site Search function (CWE-89) - CVE-2026-103668</li></ul> In …

Published on Wed, 07 Oct 2026 15:45:00 +0900

jvndb-2026-000145

Android application "Ticket Ryutsu Center" provided by Wavedash Co., Ltd. contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/798.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/939.html' target='_blank'></a><ul><li>Use of Hard-coded Credentials (CWE-798) - CVE-2026-92861</li><li>Improper Authorization in Handler for Custom URL Scheme (CW…

Published on Tue, 06 Oct 2026 14:21:00 +0900

jvndb-2026-000142

Universal Library for Linux (uldaq) provided by Measurement Computing Corporation contains the following vulnerability:<a href='https://cwe.mitre.org/data/definitions/121.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2026-19477' target='_blank'></a><ul><li>Stack-based Buffer Overflow (CWE-121) - CVE-2026-19477</li></ul>Tsurumi Junichi of Panasonic Holdings Corporation reported this vulner…

Published on Tue, 06 Oct 2026 14:21:00 +0900

jvndb-2026-000144

GROWI provided by GROWI, Inc. contains the following vulnerability:<a href='https://cwe.mitre.org/data/definitions/552.html' target='_blank'></a><ul><li>Files or Directories Accessible to External Parties (CWE-552) - CVE-2026-100727</li></ul>GROWI, Inc. reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. JPCERT/CC and GROWI, Inc. coordinated under the Information Security Early Warning Partnership.

Published on Mon, 05 Oct 2026 15:38:00 +0900

jvndb-2026-036534

Hitachi Coding Software Suite (hereinafter referred to as "HCSS") contains multiple vulnerabilities. Michael Heinzl reported these vulnerabilities.

Published on Mon, 05 Oct 2026 12:01:00 +0900

jvndb-2026-036180

Multiple MFPs (multifunction printers) provided by FUJIFILM Business Innovation Corp. and Sharp Corporation contain a path traversal vulnerability.<a href='https://cwe.mitre.org/data/definitions/22.html' target='_blank'></a><ul><li>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22) - CVE-2026-78249</li></ul>FUJIFILM Business Innovation Corp. reported this vulnerability to JPCERT/CC to notify users…

Published on Fri, 02 Oct 2026 11:53:00 +0900

jvndb-2026-035987

Image Scanner Driver for Linux provided by PFU Limited contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/59.html' target='_blank'></a><ul><li>OS Command Injection (CWE-78) - CVE-2026-78229</li><li>Link Following (CWE-59) - CVE-2026-81310</li></ul>Nir Yehoshua of Cipher Security Labs…

Published on Wed, 30 Sep 2026 14:12:00 +0900

jvndb-2026-000140

Pgpool-II provided by Pgpool Global Development Group contains multiple vulnerabilities listed below:<a href='https://cwe.mitre.org/data/definitions/787.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/295.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/787.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/121.html' target=&#…

Published on Tue, 29 Sep 2026 15:53:00 +0900

jvndb-2026-035794

The web configuration user interfaces of Wi-Fi products provided by BUFFALO INC. contain multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/121.html' target='_blank'></a><ul><li>OS command injection (CWE-78) - CVE-2026-86530</li><li>Stack-based buffer overflow (CWE-121) - CVE-2026-95104</li></ul…

Published on Tue, 29 Sep 2026 13:35:00 +0900

jvndb-2026-033235

CONPROSYS series provided by Contec Co., Ltd. contains multiple vulnerabilities listed below.<a href='https://cwe.mitre.org/data/definitions/79.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/78.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/548.html' target='_blank'></a><a href='https://cwe.mitre.org/data/definitions/1395.html' target='_blank…

Published on Mon, 14 Sep 2026 16:32:00 +0900