JVN iPedia

• JVN iPedia and MyJVN System Maintenance Scheduled
    Due to planned system maintenance, the JVN iPedia and MyJVN service will be unavailable for the following periods.
    We apologize for any inconvenience this may cause.
  
    Fri of Jan 31, 17:00 - Mon of Feb 3, 15:00 (GMT+09:00)
  

1. JVNDB-2025-000003
   FortiWeb vulnerable to SQL injection
2. JVNDB-2024-014825
   WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting
3. JVNDB-2024-000118
   WordPress Plugin "VK All in One Expansion Unit" vulnerable to cross-site scripting

• Last Updated
  ID
  Title
  CVSSv3
• 2025/01/27 New
  JVNDB-2025-000005
  EXIF Viewer Classic vulnerable to cross-site scripting
  6.1(Medium)
• 2025/01/22  
  JVNDB-2025-000004
  Multiple vulnerabilities in I-O DATA router UD-LT2
  7.5(High)
• 2025/01/21  
  JVNDB-2025-000003
  FortiWeb vulnerable to SQL injection
  2.7(Low)
• 2025/01/16  
  JVNDB-2025-001027
  Linux Ratfor vulnerable to stack-based buffer overflow
  7.0(High)
• 2025/01/08  
  JVNDB-2025-000001
  PLANEX COMMUNICATIONS MZK-DP300N vulnerable to cross-site scripting
  4.8(Medium)
• 2024/12/25  
  JVNDB-2024-015471
  Trend Micro Deep Security 20.0 Agent (for Windows) vulnerable to uncontrolled search path element
  -
• 2024/12/23  
  JVNDB-2024-015393
  Multiple security updates for Trend Micro Apex One and Apex One as a Service (December 2024)
  -
• 2024/12/18  
  JVNDB-2024-000125
  Multiple vulnerabilities in I-O DATA routers UD-LT1 and UD-LT1/EX
  7.5(High)
• 2024/12/17  
  JVNDB-2024-014918
  Authentication Bypass Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
  9.4(Critical)
• 2024/12/17  
  JVNDB-2024-000128
  Multiple vulnerabilities in SHARP routers
  9.8(Critical)
• 2024/12/16  
  JVNDB-2024-000127
  "Shonen Jump+" App for Android fails to restrict custom URL schemes properly
  3.3(Low)
• 2024/12/16  
  JVNDB-2024-014825
  WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting
  4.8(Medium)
• 2024/12/16  
  JVNDB-2024-014793
  Multiple vulnerabilities in FXC AE1021 and AE1021PE
  7.5(High)
• 2024/12/06  
  JVNDB-2024-014079
  Trend Micro Deep Security Agent for Windows and Deep Security Notifier on DSVA vulnerable to OS command injection
  -
• 2024/12/03  
  JVNDB-2023-000085
  "Skylark" App fails to restrict custom URL schemes properly
  3.6(Low)
• 2024/12/02  
  JVNDB-2024-000124
  Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers
  7.2(High)
• 2024/11/29  
  JVNDB-2024-000123
  Multiple FCNT Android devices vulnerable to authentication bypass
  3.1(Low)
• 2024/11/29  
  JVNDB-2024-013702
  Multiple vulnerabilities in FUJI ELECTRIC products
  7.8(High)
• 2024/11/27  
  JVNDB-2024-002831
  ELECOM wireless LAN routers vulnerable to OS command injection
  6.8(Medium)
• 2024/11/27  
  JVNDB-2024-000122
  HAProxy vulnerable to HTTP request/response smuggling
  5.3(Medium)
• 2024/11/27  
  JVNDB-2024-003025
  Multiple vulnerabilities in ELECOM wireless LAN routers
  8.8(High)
• 2024/11/26  
  JVNDB-2024-012461
  Multiple vulnerabilities in SoftBank Mesh Wi-Fi router RP562B
  8.0(High)
• 2024/11/26  
  JVNDB-2024-000020
  Multiple vulnerabilities in ELECOM wireless LAN routers and wireless LAN repeater
  4.8(Medium)
• 2024/11/26  
  JVNDB-2024-000088
  Multiple vulnerabilities in ELECOM wireless LAN routers and access points
  8.8(High)
• 2024/11/26  
  JVNDB-2024-000078
  Multiple vulnerabilities in ELECOM wireless LAN routers
  6.8(Medium)

more...