JVN iPedia

• JVN iPedia and MyJVN System Maintenance Scheduled
    Due to planned system maintenance, the JVN iPedia and MyJVN service will be unavailable for the following periods.
    We apologize for any inconvenience this may cause.
  
    Fri of Jan 31, 17:00 - Mon of Feb 3, 15:00 (GMT+09:00)
  

1. JVNDB-2024-014825
   WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting
2. JVNDB-2024-000121
   WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting
3. JVNDB-2024-015471
   Trend Micro Deep Security 20.0 Agent (for Windows) vulnerable to uncontrolled search path element

• Last Updated
  ID
  Title
  CVSSv3
• 2025/01/16 New
  JVNDB-2025-001027
  Linux Ratfor vulnerable to stack-based buffer overflow
  7.0(High)
• 2025/01/08  
  JVNDB-2025-000001
  PLANEX COMMUNICATIONS MZK-DP300N vulnerable to cross-site scripting
  4.8(Medium)
• 2024/12/25  
  JVNDB-2024-015471
  Trend Micro Deep Security 20.0 Agent (for Windows) vulnerable to uncontrolled search path element
  -
• 2024/12/23  
  JVNDB-2024-015393
  Multiple security updates for Trend Micro Apex One and Apex One as a Service (December 2024)
  -
• 2024/12/18  
  JVNDB-2024-000125
  Multiple vulnerabilities in I-O DATA routers UD-LT1 and UD-LT1/EX
  7.5(High)
• 2024/12/17  
  JVNDB-2024-014918
  Authentication Bypass Vulnerability in Hitachi Infrastructure Analytics Advisor and Hitachi Ops Center Analyzer
  9.4(Critical)
• 2024/12/17  
  JVNDB-2024-000128
  Multiple vulnerabilities in SHARP routers
  9.8(Critical)
• 2024/12/16  
  JVNDB-2024-000127
  "Shonen Jump+" App for Android fails to restrict custom URL schemes properly
  3.3(Low)
• 2024/12/16  
  JVNDB-2024-014825
  WordPress Plugin "My WP Customize Admin/Frontend" vulnerable to cross-site scripting
  4.8(Medium)
• 2024/12/16  
  JVNDB-2024-014793
  Multiple vulnerabilities in FXC AE1021 and AE1021PE
  7.5(High)
• 2024/12/06  
  JVNDB-2024-014079
  Trend Micro Deep Security Agent for Windows and Deep Security Notifier on DSVA vulnerable to OS command injection
  -
• 2024/12/03  
  JVNDB-2023-000085
  "Skylark" App fails to restrict custom URL schemes properly
  3.6(Low)
• 2024/12/02  
  JVNDB-2024-000124
  Multiple vulnerabilities in UNIVERGE IX/IX-R/IX-V series routers
  7.2(High)
• 2024/11/29  
  JVNDB-2024-000123
  Multiple FCNT Android devices vulnerable to authentication bypass
  3.1(Low)
• 2024/11/29  
  JVNDB-2024-013702
  Multiple vulnerabilities in FUJI ELECTRIC products
  7.8(High)
• 2024/11/27  
  JVNDB-2024-002831
  ELECOM wireless LAN routers vulnerable to OS command injection
  6.8(Medium)
• 2024/11/27  
  JVNDB-2024-000122
  HAProxy vulnerable to HTTP request/response smuggling
  5.3(Medium)
• 2024/11/27  
  JVNDB-2024-003025
  Multiple vulnerabilities in ELECOM wireless LAN routers
  8.8(High)
• 2024/11/26  
  JVNDB-2024-012461
  Multiple vulnerabilities in SoftBank Mesh Wi-Fi router RP562B
  8.0(High)
• 2024/11/26  
  JVNDB-2024-000020
  Multiple vulnerabilities in ELECOM wireless LAN routers and wireless LAN repeater
  4.8(Medium)
• 2024/11/26  
  JVNDB-2024-000088
  Multiple vulnerabilities in ELECOM wireless LAN routers and access points
  8.8(High)
• 2024/11/26  
  JVNDB-2024-000078
  Multiple vulnerabilities in ELECOM wireless LAN routers
  6.8(Medium)
• 2024/11/26  
  JVNDB-2024-000121
  WordPress Plugin "WP Admin UI Customize" vulnerable to cross-site scripting
  4.8(Medium)
• 2024/11/22  
  JVNDB-2024-013260
  Multiple vulnerabilities in Edgecross Basic Software for Windows
  -
• 2024/11/21  
  JVNDB-2024-000106
  Multiple vulnerabilities in AIPHONE IX SYSTEM, IXG SYSTEM, and System Support Software
  8.0(High)

more...