JVN iPedia

1. JVNDB-2024-000108
   Apache Tomcat improper handling of TLS handshake process data
2. JVNDB-2024-000064
   WordPress plugin "SiteGuard WP Plugin" may leak the customized path to the login page
3. JVNDB-2024-000058
   WordPress Plugin "Music Store - WordPress eCommerce" vulnerable to SQL injection

• Last Updated
  ID
  Title
  CVSSv3
• 2024/10/11  
  JVNDB-2024-000110
  Multiple vulnerabilities in Exment
  3.8(Low)
• 2024/10/10  
  JVNDB-2024-000109
  baserCMS plugin "BurgerEditor" vulnerable to directory listing
  5.3(Medium)
• 2024/10/10  
  JVNDB-2024-000104
  MF Teacher Performance Management System vulnerable to cross-site scripting
  6.1(Medium)
• 2024/10/03  
  JVNDB-2024-009667
  Multiple vulnerabilities in JTEKT ELECTRONICS Kostac PLC Programming Software
  7.8(High)
• 2024/10/01  
  JVNDB-2024-000108
  Apache Tomcat improper handling of TLS handshake process data
  7.5(High)
• 2024/10/01  
  JVNDB-2024-009498
  Vulnerability in Cosminexus
  -
• 2024/10/01  
  JVNDB-2024-009481
  Insecure initial password configuration issue in SEIKO EPSON Web Config
  8.1(High)
• 2024/09/30  
  JVNDB-2024-000107
  RevoWorks Cloud vulnerable to unintended process execution
  7.8(High)
• 2024/09/30  
  JVNDB-2024-003932
  File Permissions Vulnerability in Hitachi Ops Center Common Services
  5.1(Medium)
• 2024/09/30  
  JVNDB-2024-000105
  Multiple vulnerabilities in Smart-tab
  6.8(Medium)
• 2024/09/30  
  JVNDB-2024-009396
  SNMP service is enabled by default in Sharp NEC Display Solutions projectors
  5.3(Medium)
• 2024/09/25  
  JVNDB-2024-003049
  Multiple vulnerabilities in KEYENCE KV STUDIO, KV REPLAY VIEWER, and VT5-WX15/WX12
  7.8(High)
• 2024/09/24  
  JVNDB-2024-000089
  WindLDR and WindO/I-NV4 store sensitive information in cleartext
  5.9(Medium)
• 2024/09/24  
  JVNDB-2024-000078
  Multiple vulnerabilities in ELECOM wireless LAN routers
  6.8(Medium)
• 2024/09/24  
  JVNDB-2024-000103
  The installer of e-Tax software(common program) vulnerable to privilege escalation
  7.8(High)
• 2024/09/24  
  JVNDB-2024-000102
  Multiple NTT EAST Home GateWay/Hikari Denwa routers fail to restrict access permissions
  5.3(Medium)
• 2024/09/24  
  JVNDB-2024-000101
  Multiple vulnerabilities in PLANEX COMMUNICATIONS network devices
  7.1(High)
• 2024/09/24  
  JVNDB-2024-003068
  Multiple vulnerabilities in Cente middleware
  5.3(Medium)
• 2024/09/19  
  JVNDB-2024-008391
  Multiple vulnerabilities in TAKENAKA ENGINEERING digital video recorders
  8.8(High)
• 2024/09/18  
  JVNDB-2024-000100
  Multiple vulnerabilities in WordPress plugin "Welcart e-Commerce"
  8.8(High)
• 2024/09/18  
  JVNDB-2024-000099
  Assimp vulnerable to heap-based buffer overflow
  8.4(High)
• 2024/09/09  
  JVNDB-2024-000095
  Multiple Alps System Integration products and the OEM products vulnerable to cross-site request forgery
  6.5(Medium)
• 2024/09/09  
  JVNDB-2024-000096
  Pgpool-II vulnerable to information disclosure
  4.3(Medium)
• 2024/09/09  
  JVNDB-2024-000094
  "@cosme" App fails to restrict custom URL schemes properly
  3.3(Low)
• 2024/09/09  
  JVNDB-2024-000097
  WordPress Plugin "Forminator" vulnerable to cross-site scripting
  6.1(Medium)

more...