Japan Vulnerability Notes /

2026

                                            2026/09/02
                                        
                                            JVNVU#98062224
                                        
                                            Improper restriction of XML external entity reference in XG VisionTerminal and XG-X VisionTerminal

                                            2026/09/02
                                        
                                            JVN#91715694
                                        
                                            Multiple vulnerabilities in ShizenBox2

                                            2026/09/01
                                        
                                            JVN#84094853
                                        
                                            PALLET CONTROL products vulnerable to improper access control

                                            2026/08/28
                                        
                                            JVN#42348352
                                        
                                            Multiple vulnerabilities in GROWI

                                            2026/08/28
                                        
                                            JVN#04485476
                                        
                                            Multiple vulnerabilities in SOY series

                                            2026/08/28
                                        
                                            JVN#42011956
                                        
                                            Zabbix agent may insecurely load Dynamic Link Libraries

                                            2026/08/27
                                        
                                            JVN#18593874
                                        
                                            Installer for Rakuten Kobo Desktop Application (Windows version) may insecurely load Dynamic Link Libraries

                                            2026/08/26
                                        
                                            JVN#67155805
                                        
                                            Android App "Myna Point" vulnerable to improper access restriction

                                            2026/08/26
                                        
                                            JVN#18496672
                                        
                                            Multiple vulnerabilities in CorvusSKK

                                            2026/08/25
                                        
                                            JVNVU#95422936
                                        
                                            FURUNO ELECTRIC FA-50 CLASS B AIS TRANSPONDER uses hard-coded credentials and misses authentication for additional configuration

                                            2026/08/25
                                        
                                            JVN#08517956
                                        
                                            Apache Struts 2 vulnerable to resource exhaustion

                                            2026/08/24
                                        
                                            JVN#33423625
                                        
                                            Multiple vulnerabilities in SKYSEA Client View and SKYMEC IT Manager

                                            2026/08/24
                                        
                                            JVN#74538868
                                        
                                            Sakura Editor vulnerable to OS command injection

                                            2026/08/21
                                        
                                            JVN#81414813
                                        
                                            UNIVERGE IX-R/IX-V series routers vulnerable to missing authentication for critical function

                                            2026/08/21
                                        
                                            JVN#09266484
                                        
                                            Miraikan Assist App vulnerable to cross-site scripting

                                            2026/08/21
                                        
                                            JVNVU#90210212
                                        
                                            Multiple vulnerabilities in Yamaha VOCALOID6 Editor

                                            2026/08/20
                                        
                                            JVNVU#91609598
                                        
                                            Multiple SEIKO EPSON printers and scanners keep already revoked root certificates

                                            2026/08/19
                                        
                                            JVN#47716829
                                        
                                            Multiple vulnerabilities in acmailer

                                            2026/08/18
                                        
                                            JVN#06609828
                                        
                                            Apache Allura vulnerable to server-side request forgery

                                            2026/08/17
                                        
                                            JVN#58692577
                                        
                                            F-RevoCRM vulnerable to cross-site scripting

                                            2026/08/17
                                        
                                            JVN#40688603
                                        
                                            miChecker improper restriction of XML external entity references

                                            2026/08/17
                                        
                                            JVN#91713656
                                        
                                            Improper file access permission settings in Synology Assistant

                                            2026/08/13
                                        
                                            JVN#00941257
                                        
                                            VoiceTra vulnerable to incorrectly specified destination in a communication channel

                                            2026/08/10
                                        
                                            JVN#40467227
                                        
                                            Installer for LINE for Windows insecurely loads Dynamic Link Libraries

                                            2026/08/05
                                        
                                            JVN#28045338
                                        
                                            Multiple vulnerabilities in NetKids iMark

                                            2026/08/04
                                        
                                            JVN#52865575
                                        
                                            freo2 vulnerable to unrestricted upload of file with dangerous type

                                            2026/08/03
                                        
                                            JVN#72334274
                                        
                                            Cybozu Garoon vulnerable to cross-site scripting

                                            2026/07/31
                                        
                                            JVNVU#92540957
                                        
                                            Sharp Network Scanner Tool insecure initial configuration

                                            2026/07/31
                                        
                                            JVNVU#98759887
                                        
                                            Multiple vulnerabilities in Sharp and Toshiba Tec MFPs

                                            2026/07/31
                                        
                                            JVNVU#92804348
                                        
                                            Multiple vulnerabilities in DEEBOT PRO M1, DEEBOT PRO K1VAC and ECOVACS PRO App

                                            2026/07/31
                                        
                                            JVNVU#94952030
                                        
                                            CSV file injection vulnerability in BaserCMS

                                            2026/07/30
                                        
                                            JVNVU#98815601
                                        
                                            Security Update for Trend Micro Trend Vision One (July 2026)

                                            2026/07/29
                                        
                                            JVN#99975039
                                        
                                            Permissive regular expression vulnerability in Tegalog -Fumy Otegaru Memo Logger-

                                            2026/07/28
                                        
                                            JVN#56870912
                                        
                                            Multiple vulnerabilities in ELECOM wireless LAN routers and access points (July 2026)

                                            2026/07/23
                                        
                                            JVN#32082029
                                        
                                            Ricoh printers and Multifunction Printers (MFPs) missing restriction on SSH port forwarding

                                            2026/07/21
                                        
                                            JVN#20592637
                                        
                                            Drupal plugin "AI Agents" vulnerable to incorrect authorization

                                            2026/07/21
                                        
                                            JVN#40509781
                                        
                                            Vulnerability in certain IC chips of contactless IC card "FeliCa"

                                            2026/07/16
                                        
                                            JVN#65294474
                                        
                                            Multiple vulnerabilities in TTSSH2 plugin of Tera Term

                                            2026/07/15
                                        
                                            JVN#59875262
                                        
                                            Installer of HYPER SBI 2 insecurely loads Dynamic Link Libraries

                                            2026/07/13
                                        
                                            JVNVU#94039788
                                        
                                            Denial-of-service (DoS) vulnerability in the in-app browser of LINE client for iOS

                                            2026/07/08
                                        
                                            JVN#62347140
                                        
                                            Multiple vulnerabilities in the installer for Pupsman

                                            2026/07/07
                                        
                                            JVN#87285119
                                        
                                            SEIKO EPSON printers and scanners Web Config vulnerable to cross-site request forgery

                                            2026/07/01
                                        
                                            JVN#20721579
                                        
                                            Seiko Solutions SkyBridge MB-A100/MB-A110 vulnerable to OS command injection

                                            2026/06/30
                                        
                                            JVN#48718197
                                        
                                            Reflected cross-site scripting vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor

                                            2026/06/30
                                        
                                            JVN#69681784
                                        
                                            RPG MAKER MV and MZ vulnerable to OS command injection

                                            2026/06/30
                                        
                                            JVN#28979424
                                        
                                            DGM3103SCT vulnerable to OS command injection

                                            2026/06/29
                                        
                                            JVN#36011274
                                        
                                            Multiple vulnerabilities in Fluentd

                                            2026/06/26
                                        
                                            JVN#35146924
                                        
                                            ExpressUpdate Agent for Windows improper access restriction on its named pipe

                                            2026/06/25
                                        
                                            JVNVU#91051826
                                        
                                            Generic IO & Memory Access driver for TOSHIBA and Dynabook PCs exposes its IOCTL with insufficient access control

                                            2026/06/17
                                        
                                            JVN#20769211
                                        
                                            OS command injection in RadiX AX6600 WiFi 6 Tri-Band Gaming Router

                                            2026/06/16
                                        
                                            JVN#16937365
                                        
                                            ThingsBoard vulnerable to prototype pollution

                                            2026/06/16
                                        
                                            JVN#79926428
                                        
                                            Improper file access permission settings in the installers for Optical Disc Archive Software for Windows

                                            2026/06/16
                                        
                                            JVNVU#98100934
                                        
                                            Multiple vulnerabilities in Canon EOS Network Setting Tool

                                            2026/06/15
                                        
                                            JVN#55319858
                                        
                                            Privilege escalation vulnerability in multiple RICOH and KONICA MINOLTA JAPAN printer drivers

                                            2026/06/09
                                        
                                            JVN#27656135
                                        
                                            CamView installer insecurely loads Dynamic Link Libraries

                                            2026/06/05
                                        
                                            JVN#70631953
                                        
                                            Multiple TP-Link products vulnerable to cleartext transmission of sensitive information

                                            2026/06/03
                                        
                                            JVN#24733221
                                        
                                            WordPress Plugin "Zoho Mail for WordPress" vulnerable to cross-site request forgery

                                            2026/06/02
                                        
                                            JVNVU#95687008
                                        
                                            TP-Link Archer BE450 and BE7200 vulnerable to OS command injection

                                            2026/06/01
                                        
                                            JVN#67883085
                                        
                                            Multiple vulnerabilities in ServerView Agents for Windows

                                            2026/05/29
                                        
                                            JVNVU#93879027
                                        
                                            Link following vulnerability in Canon My Image Garden for macOS and CUPS Printer Driver for macOS

                                            2026/05/28
                                        
                                            JVN#01719116
                                        
                                            Jupyter Server vulnerable to open redirect

                                            2026/05/25
                                        
                                            JVN#80890147
                                        
                                            NEC Aterm series vulnerable to OS command injection (NV26-003)

                                            2026/05/25
                                        
                                            JVN#69049186
                                        
                                            NEC Aterm series vulnerable to cross-site scripting (NV26-002)

                                            2026/05/21
                                        
                                            JVNVU#90583059
                                        
                                                Critical
                                            
                                            Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (May 2026)

                                            2026/05/20
                                        
                                            JVN#56484285
                                        
                                            Movable Type vulnerable to missing authorization

                                            2026/05/20
                                        
                                            JVNVU#93461473
                                        
                                            Android App "RoboForm Password Manager" insufficient validation of Android intents

                                            2026/05/15
                                        
                                            JVN#69128376
                                        
                                            Multiple vulnerabilities in "Musetheque V4 Information Disclosure for IPKNOWLEDGE"

                                            2026/05/14
                                        
                                            JVN#14434132
                                        
                                            WPS Office improper access restriction to its named pipe

                                            2026/05/13
                                        
                                            JVN#35567473
                                        
                                                Critical
                                            
                                            GUARDIANWALL MailSuite vulnerable to stack-based buffer overflow

                                            2026/05/13
                                        
                                            JVN#24167657
                                        
                                            Android App "あんしんフィルター for au" vulnerable to cleartext transmission of sensitive information

                                            2026/05/13
                                        
                                            JVN#98871848
                                        
                                            Bytello Share (Windows Edition) installer executable insecurely loads Dynamic Link Libraries

                                            2026/05/12
                                        
                                            JVN#03037325
                                        
                                            Multiple vulnerabilities in ELECOM wireless LAN routers and access points (May 2026)

                                            2026/05/11
                                        
                                            JVN#38788367
                                        
                                            GROWI vulnerable to path traversal

                                            2026/05/11
                                        
                                            JVNVU#90878203
                                        
                                            Canon Production Printers and Office Multifunction Printers vulnerable to information disclosure

                                            2026/05/11
                                        
                                            JVN#38632731
                                        
                                            "Kura Sushi Official App" vulnerable to improper certificate validation

                                            2026/05/11
                                        
                                            JVN#18013369
                                        
                                            libXpm vulnerable to out-of-bounds read

                                            2026/05/11
                                        
                                            JVN#68350834
                                        
                                            Lhaz and Lhaz+ vulnerable to path traversal

                                            2026/04/30
                                        
                                            JVN#65118274
                                        
                                            Open redirect vulnerability in multiple laser printers and MFPs which implement Ricoh Web Image Monitor

                                            2026/04/24
                                        
                                            JVN#20669184
                                        
                                            Apache ActiveMQ series improper validation of MQTT packets [AMQ-9810]

                                            2026/04/23
                                        
                                            JVN#46728373
                                        
                                            GROWI vulnerable to Regular expression Denial-of-Service (ReDoS)

                                            2026/04/23
                                        
                                            JVN#57877356
                                        
                                            Multiple vulnerabilities in LogonTracer

                                            2026/04/23
                                        
                                            JVN#42090270
                                        
                                            IP Setting Software may insecurely load Dynamic Link Libraries

                                            2026/04/23
                                        
                                            JVN#08026319
                                        
                                            CMS ALAYA vulnerable to SQL injection

                                            2026/04/22
                                        
                                            JVN#00575116
                                        
                                            Ziostation2 vulnerable to path traversal

                                            2026/04/22
                                        
                                            JVN#45563482
                                        
                                            Installers of LiveOn Meet Client for Windows and its plugin may insecurely load Dynamic Link Libraries

                                            2026/04/22
                                        
                                            JVN#37524771
                                        
                                            DeepL Chrome browser extension vulnerable to cross-site scripting

                                            2026/04/20
                                        
                                            JVN#63376363
                                        
                                            SKYSEA Client View and SKYMEC IT Manager improper file access permission settings

                                            2026/04/20
                                        
                                            JVNVU#94271449
                                        
                                            Multiple vulnerabilities in silex technology SD-330AC and AMC Manager

                                            2026/04/17
                                        
                                            JVN#78422311
                                        
                                            Multiple vulnerabilities in CubeCart

                                            2026/04/16
                                        
                                            JVN#88396700
                                        
                                            Arcserve UDP Console vulnerable to redirect to a dummy URL

                                            2026/04/16
                                        
                                            JVNVU#94583735
                                        
                                            OMRON UPS (Uninterruptible Power Supply) management application may insecurely load Dynamic Link Libraries

                                            2026/04/15
                                        
                                            JVN#62079296
                                        
                                            GROWI vulnerable to stored cross-site scripting

                                            2026/04/13
                                        
                                            JVNVU#96334293
                                        
                                            Stack-based buffer overflow vulnerability in Dynabook Bluetooth ACPI Drivers

                                            2026/04/10
                                        
                                            JVN#00263243
                                        
                                            EmoCheck loads Dynamic Link Libraries insecurely

                                            2026/04/08
                                        
                                            JVN#66473735
                                        
                                            Multiple vulnerabilities in Movable Type

                                            2026/04/08
                                        
                                            JVN#33581068
                                        
                                            Multiple vulnerabilities in MATCHA series

                                            2026/04/03
                                        
                                            JVN#89339669
                                        
                                            Multiple vulnerabilities in NEC Aterm series (NV26-001)

                                            2026/04/01
                                        
                                            JVNVU#90448293
                                        
                                            Multiple vulnerabilities in FUJI Electric V-SFT (April 2026)

                                            2026/03/27
                                        
                                            JVN#20837860
                                        
                                            Multiple vulnerabilities in baserCMS

                                            2026/03/27
                                        
                                            JVN#48058823
                                        
                                            WordPress Plugin "OpenStreetMap" vulnerable to cross-site scripting

                                            2026/03/27
                                        
                                            JVN#83788689
                                        
                                            Multiple vulnerabilities in BUFFALO Wi-Fi routers

                                            2026/03/26
                                        
                                            JVN#08057419
                                        
                                            Multiple vulnerabilities in the installer of RATOC RAID Monitoring Manager for Windows

                                            2026/03/26
                                        
                                            JVN#18035227
                                        
                                            Digital Photo Frame GH-WDF10A vulnerable to improper access restriction

                                            2026/03/25
                                        
                                            JVN#49524110
                                        
                                            SHARP routers missing authentication for some web APIs

                                            2026/03/25
                                        
                                            JVN#19505323
                                        
                                            Installer of OM Workspace (Windows Edition) may insecurely load Dynamic Link Libraries

                                            2026/03/25
                                        
                                            JVN#90835713
                                        
                                            SANYO DENKI SANUPS SOFTWARE registers Windows services with unquoted file paths

                                            2026/03/19
                                        
                                            JVNVU#95093977
                                        
                                            Multiple vulnerabilities in Xerox FreeFlow Core (XRX26-005)

                                            2026/03/17
                                        
                                            JVN#96706146
                                        
                                            Installer for IBM Trusteer Rapport may insecurely load Dynamic Link Libraries

                                            2026/03/16
                                        
                                            JVN#46373837
                                        
                                            Missing authorization in the OpenAI thread/message API endpoints of GROWI

                                            2026/03/16
                                        
                                            JVN#22152812
                                        
                                            OpenLiteSpeed and LSWS Enterprise vulnerable to OS command injection

                                            2026/03/11
                                        
                                            JVNVU#98103854
                                        
                                            Multiple vulnerabilities in Micro Research MR-GM5L-S1 and MR-GM5A-L1

                                            2026/03/09
                                        
                                            JVN#17307628
                                        
                                            Improper file access permission settings in multiple Digital Arts products

                                            2026/03/09
                                        
                                            JVN#11676807
                                        
                                            Installer for Qsee Client may insecurely load Dynamic Link Libraries

                                            2026/03/05
                                        
                                            JVN#23669411
                                        
                                            django-allauth vulnerable to open redirect

                                            2026/03/05
                                        
                                            JVN#63765888
                                        
                                            EC-CUBE vulnerable to multi-factor authentication bypass

                                            2026/03/05
                                        
                                            JVNTA#97995322
                                        
                                            Security issues in ESC/POS

                                            2026/03/04
                                        
                                            JVN#56544509
                                        
                                            Multiple vulnerabilities in Dell UPS Multi-UPS Management Console (MUMC)

                                            2026/03/03
                                        
                                            JVNVU#92256509
                                        
                                            Multiple vulnerabilities in Trend Micro Endpoint security products for enterprises (February 2026)

                                            2026/03/03
                                        
                                            JVNVU#99676444
                                        
                                            Canon IJ Scan Utility registers Windows services with unquoted file paths

                                            2026/02/27
                                        
                                            JVN#80500630
                                        
                                            IM-LogicDesigner module of intra-mart Accel Platform vulnerable to untrusted data deserialization

                                            2026/02/27
                                        
                                            JVNVU#96854657
                                        
                                            Out-of-bounds write vulnerability in Fujitsu BIOS Driver (fbiosdrv.sys)

                                            2026/02/27
                                        
                                            JVN#41357120
                                        
                                            Improper file access permission settings in the installers for multiple Soliton Systems products

                                            2026/02/26
                                        
                                            JVN#48498976
                                        
                                            Multiple vulnerabilities in the installer of FinalCode Client

                                            2026/02/25
                                        
                                            JVN#79096585
                                        
                                            Lanscope Endpoint Manager (On-Premises) vulnerable to path traversal

                                            2026/02/20
                                        
                                            JVN#69531868
                                        
                                            Installer for ジョブログ集計/分析ソフトウェア RICOHジョブログ集計ツール may insecurely load Dynamic Link Libraries

                                            2026/02/20
                                        
                                            JVN#20049394
                                        
                                            WordPress Plugin "Survey Maker" vulnerable to cross-site scripting

                                            2026/02/17
                                        
                                            JVN#68650996
                                        
                                            Joomla! CMS vulnerable to cross-site scripting

                                            2026/02/13
                                        
                                            JVN#84622767
                                        
                                                Critical
                                            
                                            FileZen vulnerable to OS command injection

                                            2026/02/12
                                        
                                            JVN#88690363
                                        
                                            Installer of M-Audio M-Track Duo HD may insecurely load Dynamic Link Libraries

                                            2026/02/09
                                        
                                            JVN#55395471
                                        
                                            Oki Electric Industry products and OEM products register Windows services with unquoted file paths

                                            2026/02/05
                                        
                                            JVN#46925341
                                        
                                            web2py vulnerable to open redirect

                                            2026/02/04
                                        
                                            JVN#45405689
                                        
                                            Multiple vulnerabilities in Movable Type

                                            2026/02/03
                                        
                                            JVN#94012927
                                        
                                            Multiple vulnerabilities in ELECOM wireless LAN products

                                            2026/02/03
                                        
                                            JVN#64883963
                                        
                                            Improper file access permission settings in Mitsubishi Small-Capacity UPS Shutdown Software FREQSHIP-mini for Windows

                                            2026/02/03
                                        
                                            JVN#89992160
                                        
                                            Installer for Roland Cloud Manager may insecurely load Dynamic Link Libraries

                                            2026/02/02
                                        
                                            JVN#35265756
                                        
                                            Multiple vulnerabilities in Cybozu Garoon

                                            2026/02/02
                                        
                                            JVN#04984838
                                        
                                            Multiple Microsoft Office products vulnerable to untrusted search path

                                            2026/02/02
                                        
                                            JVN#64861120
                                        
                                            Sonatype Nexus Repository vulnerable to server-side request forgery

                                            2026/02/02
                                        
                                            JVN#27202136
                                        
                                            OS command injection in raspap-webgui

                                            2026/01/30
                                        
                                            JVN#46722282
                                        
                                            Undocumented "TelnetEnable" functionality of End of Service NETGEAR products

                                            2026/01/29
                                        
                                            JVNVU#92878805
                                        
                                            Multiple vulnerabilities in BROTHER MFPs (multifunction printers)

                                            2026/01/27
                                        
                                            JVN#03776126
                                        
                                            beat-access for Windows may insecurely load Dynamic Link Libraries

                                            2026/01/27
                                        
                                            JVNVU#94651499
                                        
                                            Archer MR600 vulnerable to OS command injection

                                            2026/01/23
                                        
                                            JVN#67560152
                                        
                                            Command injection vulnerability in ASUS routers

                                            2026/01/23
                                        
                                            JVNVU#93474119
                                        
                                            Multiple Brother software installers may insecurely load Dynamic Link Libraries

                                            2026/01/22
                                        
                                            JVNVU#95177764
                                        
                                            "iRMC S5/S6" implemented in PRIMERGY vulnerable to incorrect authorization

                                            2026/01/22
                                        
                                            JVNVU#97797356
                                        
                                            Multiple vulnerabilities in Trend Micro Apex Central (January 2026)

                                            2026/01/21
                                        
                                            JVN#65211823
                                        
                                            Installer of Fujitsu ServerView Agents for Windows may insecurely load Dynamic Link Libraries

                                            2026/01/21
                                        
                                            JVN#86850670
                                        
                                            Ruijie Networks AP180 series vulnerable to OS command injection

                                            2026/01/19
                                        
                                            JVNVU#94305241
                                        
                                            ETERNUS SF vulnerable to insertion of sensitive information into maintenance data

                                            2026/01/16
                                        
                                            JVNVU#99107852
                                        
                                            Multiple vulnerabilities in Canon Small Office Multifunction Printers and Laser Printers

                                            2026/01/16
                                        
                                            JVN#08087148
                                        
                                            Multiple Vulnerabilities in TOA Network Cameras TRIFORA 3 series

                                            2026/01/14
                                        
                                            JVN#34964581
                                        
                                            Chainlit vulnerable to improper access restriction

                                            2026/01/13
                                        
                                            JVN#48187396
                                        
                                            Multiple vulnerabilities in EATON UPS Companion

                                            2026/01/09
                                        
                                            JVN#12770174
                                        
                                            RICOH Streamline NX vulnerable to improper authorization

                                            2026/01/08
                                        
                                            JVN#17956874
                                        
                                            The installers for multiple PIONEER products may insecurely load Dynamic Link Libraries

                                            2026/01/07
                                        
                                            JVN#45776251
                                        
                                            Multiple vulnerabilities in multiple NEC branded projectors manufactured by Sharp Display Solutions, Ltd.

                                            2026/01/07
                                        
                                            JVN#24626628
                                        
                                            Origin validation error vulnerability in Fujitsu Security Solution AuthConductor Client Basic V2

                                            2026/01/06
                                        
                                            JVNVU#97172240
                                        
                                            Authentication bypass vulnerability in OpenBlocks series

2025

                                            2025/12/23
                                        
                                            JVNVU#96231218
                                        
                                            Media Player MP-01 vulnerable to Missing Authentication for Critical Function

                                            2025/12/18
                                        
                                            JVNVU#94068946
                                        
                                            Ruijie Networks AP180 Series vulnerable to OS command injection

                                            2025/12/17
                                        
                                            JVN#55745775
                                        
                                            GROWI vulnerable to cross-site request forgery

                                            2025/12/16
                                        
                                            JVN#51846148
                                        
                                            SEIKO EPSON printer Web Config vulnerable to stack-based buffer overflow

                                            2025/12/16
                                        
                                            JVNVU#92827367
                                        
                                            Multiple vulnerabilities in CHOCO TEI WATCHER mini

                                            2025/12/11
                                        
                                            JVN#40102375
                                        
                                            QND vulnerable to privilege escalation

                                            2025/12/11
                                        
                                            JVNVU#99295063
                                        
                                            Brother iPrint＆Scan contains vulnerable .NET 8.0 components

                                            2025/12/09
                                        
                                            JVN#33172708
                                        
                                            ELECOM Clone for Windows registers a Windows service with an unquoted file path

                                            2025/12/08
                                        
                                            JVNVU#99973778
                                        
                                            Android App "Brother iPrint&Scan" improper use of an external cache directory

                                            2025/12/08
                                        
                                            JVN#19940619
                                        
                                            Multiple vulnerabilities in GroupSession

                                            2025/12/08
                                        
                                            JVN#59242986
                                        
                                            GS Yuasa FULLBACK Manager Pro registers Windows services with unquoted file paths

                                            2025/12/05
                                        
                                            JVN#84024274
                                        
                                            Multiple vulnerabilities in ABB Terra AC Wallbox

                                            2025/11/28
                                        
                                            JVN#28247549
                                        
                                            Installer of INZONE Hub may insecurely load Dynamic Link Libraries

                                            2025/11/26
                                        
                                            JVN#67185535
                                        
                                            SwitchBot Smart Video Doorbell vulnerable to active debug code

                                            2025/11/25
                                        
                                            JVN#76298784
                                        
                                            Multiple vulnerabilities in Security Point (Windows) of MaLion

                                            2025/11/25
                                        
                                            JVN#75140384
                                        
                                            Multiple vulnerabilities in SNC-CX600W

                                            2025/11/25
                                        
                                            JVN#63368617
                                        
                                            "FOD" App uses hard-coded cryptographic keys

                                            2025/11/21
                                        
                                            JVN#77560819
                                        
                                            Multiple vulnerabilities in LogStare Collector

                                            2025/11/20
                                        
                                            JVNVU#95021911
                                        
                                            EPSON WebConfig / Epson Web Control for SEIKO EPSON Projector Products do not restrict excessive authentication attempts

                                            2025/11/19
                                        
                                            JVN#50288352
                                        
                                            Installer of RakurakuMusen Start EX for Windows may insecurely load Dynamic Link Libraries

                                            2025/11/17
                                        
                                            JVN#54005037
                                        
                                            "デジラアプリ" App for iOS vulnerable to improper server certificate verification

                                            2025/11/14
                                        
                                            JVN#49899607
                                        
                                            NCP-HG100 vulnerable to OS command injection

                                            2025/11/10
                                        
                                            JVN#76719218
                                        
                                            Multiple vulnerabilities in GNU Libmicrohttpd

                                            2025/11/07
                                        
                                            JVN#13754005
                                        
                                            Use of password hash with insufficient computational effort vulnerability in BUFFALO Wi-Fi router "WSR-1800AX4 series"

                                            2025/11/07
                                        
                                            JVN#59387134
                                        
                                            CLUSTERPRO X and EXPRESSCLUSTER X vulnerable to OS command injection

                                            2025/11/06
                                        
                                            JVN#95942191
                                        
                                            GROWI vulnerable to stored cross-site scripting

                                            2025/11/04
                                        
                                            JVN#92563420
                                        
                                            Multiple Roboticsware products register Windows services with unquoted file paths

                                            2025/11/04
                                        
                                            JVN#81917433
                                        
                                            Optical Disc Archive Software (for Windows) registers a Windows service with an unquoted file path

                                            2025/11/04
                                        
                                            JVN#11276793
                                        
                                            Progress Flowmon vulnerable to authenticated OS command injection

                                            2025/10/31
                                        
                                            JVNVU#98191201
                                        
                                            Multiple vulnerabilities in Century Systems FutureNet MA and IP-K series

                                            2025/10/29
                                        
                                            JVN#23394606
                                        
                                            Installer of WTW EAGLE (for Windows) may insecurely load Dynamic Link Libraries

                                            2025/10/28
                                        
                                            JVNVU#90150763
                                        
                                            Multiple OS command injection vulnerabilities in TP-Link Omada gateways

                                            2025/10/28
                                        
                                            JVN#00021602
                                        
                                            MZK-DP300N uses hard-coded credentials

                                            2025/10/24
                                        
                                            JVN#20611740
                                        
                                            Multiple stored cross-site scripting vulnerabilities in Pleasanter

                                            2025/10/22
                                        
                                            JVN#46526244
                                        
                                            GROWI vulnerable to cross-site scripting

                                            2025/10/22
                                        
                                            JVN#03295012
                                        
                                            Multiple I-O DATA NAS management applications register Windows services with unquoted file paths

                                            2025/10/22
                                        
                                            JVN#24333679
                                        
                                            Multiple stored cross-site scripting vulnerabilities in Movable Type

                                            2025/10/20
                                        
                                            JVN#86318557
                                        
                                                Critical
                                            
                                            Lanscope Endpoint Manager (On-Premises) vulnerable to improper verification of source of a communication channel

                                            2025/10/20
                                        
                                            JVN#44266462
                                        
                                            ETERNUS SF vulnerable to incorrect default permissions

                                            2025/10/17
                                        
                                            JVN#61182380
                                        
                                            Installer of AutoDownloader may insecurely load Dynamic Link Libraries

                                            2025/10/16
                                        
                                            JVN#13030751
                                        
                                            Multiple vulnerabilities in ChatLuck

                                            2025/10/16
                                        
                                            JVN#90757550
                                        
                                            Multiple vulnerabilities in desknet's NEO

                                            2025/10/16
                                        
                                            JVN#72648885
                                        
                                            Ruijie Networks RG-EST300 undocumented SSH functionality

                                            2025/10/15
                                        
                                            JVN#42282226
                                        
                                            Phoenix Contact CHARX SEC-3xxx vulnerable to code injection

                                            2025/10/15
                                        
                                            JVN#22713803
                                        
                                            Multiple RSUPPORT products may insecurely load Dynamic Link Libraries

                                            2025/10/15
                                        
                                            JVNVU#96471278
                                        
                                            Buffalo Wi-Fi router WXR9300BE6P series vulnerable to path traversal

                                            2025/10/10
                                        
                                            JVN#69099112
                                        
                                            BUFFALO NAS Navigator2 registers a Windows service with an unquoted file path

                                            2025/10/08
                                        
                                            JVNVU#90008453
                                        
                                            Multiple vulnerabilities in FUJI Electric V-SFT

                                            2025/10/06
                                        
                                            JVN#95806263
                                        
                                            The installers of DENSO TEN drive recorder viewer may insecurely load Dynamic Link Libraries

                                            2025/10/03
                                        
                                            JVNVU#95625951
                                        
                                            Trend Micro Antivirus for Mac vulnerable to Local Privilege Escalation

                                            2025/10/02
                                        
                                            JVNVU#97069449
                                        
                                            Multiple vulnerabilities in multiple Keyence products

                                            2025/09/30
                                        
                                            JVNVU#96989989
                                        
                                            NIHON KOHDEN Central Monitor CNS-6201 vulnerable to NULL pointer dereference

                                            2025/09/29
                                        
                                            JVNVU#93104961
                                        
                                            Multiple vulnerabilities in Canon Printer Drivers for Production Printers, Office/Small Office Multifunction Printers and Laser Printers

                                            2025/09/29
                                        
                                            JVN#23423519
                                        
                                            DataSpider Servista improper restriction of XML external entity references

                                            2025/09/18
                                        
                                            JVNVU#93403671
                                        
                                            OMRON SOCIAL SOLUTIONS Uninterruptible Power Supply (UPS) management application registers a Windows service with an unquoted file path

                                            2025/09/18
                                        
                                            JVN#95938761
                                        
                                            UNIVERGE IX/IX-R/IX-V series routers provided by NEC Corporation vulnerable to cross-site scripting

                                            2025/09/17
                                        
                                            JVN#84697061
                                        
                                            Century HW RAID Manager registers a Windows service with an unquoted file path

                                            2025/09/17
                                        
                                            JVNVU#97490987
                                        
                                            Multiple vulnerabilities in I-O DATA wireless LAN routers

                                            2025/09/17
                                        
                                            JVNVU#90253343
                                        
                                            Multiple vulnerabilities in Xerox Freeflow Core

                                            2025/09/17
                                        
                                            JVNVU#93294882
                                        
                                            Multiple Brother and its OEM products with weak initial administrator passwords

                                            2025/09/12
                                        
                                            JVN#89109713
                                        
                                            WTW-EAGLE App vulnerable to improper server certificate validation

                                            2025/09/08
                                        
                                            JVN#75307484
                                        
                                            RICOH Streamline NX vulnerable to tampering with operation history

                                            2025/09/05
                                        
                                            JVN#98737186
                                        
                                            RATOC RAID Monitoring Manager for Windows registers a Windows service with an unquoted file path

                                            2025/09/05
                                        
                                            JVN#41633999
                                        
                                            Obsidian GitHub Copilot Plugin stores sensitive information in cleartext

                                            2025/09/05
                                        
                                            JVN#35290164
                                        
                                            "Yahoo! Shopping" App for Android fails to restrict custom URL schemes properly

                                            2025/09/05
                                        
                                            JVN#48739895
                                        
                                            Multiple vulnerabilities in TkEasyGUI

                                            2025/09/03
                                        
                                            JVN#65839588
                                        
                                            Web Caster V130 vulnerable to cross-site request forgery