JVN iPedia

• JVN iPedia and MyJVN System Maintenance Scheduled
    Due to planned system maintenance, the JVN iPedia and MyJVN service will be unavailable for the following periods.
    We apologize for any inconvenience this may cause.
  
    Friday of Feb 3, 17:00 - Monday of Feb 6, 12:00 (GMT+09:00)
  

1. JVNDB-2023-000007
   WordPress plugin "Welcart e-Commerce" vulnerable to directory traversal
2. JVNDB-2023-001008
   File and Directory Permissions Vulnerability in Hitachi Tuning Manager
3. JVNDB-2023-000004
   pgAdmin 4 vulnerable to open redirect

• Last Updated
  ID
  Title
  CVSSv3
• 2023/01/25 New
  JVNDB-2023-001110
  Improper restriction of XML external entity reference (XXE) vulnerability in OMRON CX-Motion Pro
  5.5(Medium)
• 2023/01/24 New
  JVNDB-2023-000009
  EasyMail vulnerable to cross-site scripting
  6.1(Medium)
• 2023/01/24 New
  JVNDB-2023-000010
  pgAdmin 4 vulnerable to directory traversal
  3.1(Low)
• 2023/01/24 New
  JVNDB-2023-001108
  Contec CONPROSYS HMI System (CHS) vulnerable to multiple SQL injections
  4.3(Medium)
• 2023/01/23 New
  JVNDB-2023-000008
  Pgpool-II vulnerable to information disclosure
  5.3(Medium)
• 2023/01/18  
  JVNDB-2023-001008
  File and Directory Permissions Vulnerability in Hitachi Tuning Manager
  6.6(Medium)
• 2023/01/17  
  JVNDB-2023-000007
  WordPress plugin "Welcart e-Commerce" vulnerable to directory traversal
  7.5(High)
• 2023/01/12  
  JVNDB-2022-002765
  Multiple vulnerabilities in OMRON CX-Programmer
  7.8(High)
• 2023/01/12  
  JVNDB-2023-001005
  Active debug code vulnerability in OMRON CP1L-EL20DR-D
  9.1(Critical)
• 2023/01/12  
  JVNDB-2023-001003
  Access of uninitialized pointer vulnerability in OMRON CX-Motion-MCH
  7.8(High)
• 2023/01/12  
  JVNDB-2023-000006
  Multiple vulnerabilities in PIXELA PIX-RT100
  8.8(High)
• 2023/01/11  
  JVNDB-2023-001002
  OpenAM Web Policy Agent (OpenAM Consortium Edition) vulnerable to path traversal
  7.5(High)
• 2023/01/11  
  JVNDB-2022-002779
  Multiple vulnerabilities in Contec CONPROSYS HMI System (CHS)
  10.0(Critical)
• 2023/01/11  
  JVNDB-2023-000005
  Multiple vulnerabilities in MAHO-PBX NetDevancer series
  9.8(Critical)
• 2023/01/11  
  JVNDB-2023-000003
  TP-Link SG105PE vulnerable to authentication bypass
  4.2(Medium)
• 2023/01/11  
  JVNDB-2023-000004
  pgAdmin 4 vulnerable to open redirect
  4.7(Medium)
• 2023/01/06  
  JVNDB-2023-000002
  Digital Arts m-FILTER vulnerable to improper authentication
  5.3(Medium)
• 2023/01/05  
  JVNDB-2023-000001
  Multiple code injection vulnerabilities in ruby-git
  5.5(Medium)
• 2023/01/04  
  JVNDB-2022-002838
  Multiple vulnerabilities in Fuji Electric V-Server
  7.8(High)
• 2023/01/04  
  JVNDB-2022-002837
  Multiple vulnerabilities in Fuji Electric V-SFT and TELLUS
  7.8(High)
• 2022/12/26  
  JVNDB-2022-002836
  Multiple vulnerabilities in Trend Micro Apex One and Apex One as a Service
  -
• 2022/12/21  
  JVNDB-2022-000102
  Installers generated by Squirrel.Windows may insecurely load Dynamic Link Libraries
  7.8(High)
• 2022/12/21  
  JVNDB-2022-000101
  +Message App improper handling of Unicode control characters
  4.3(Medium)
• 2022/12/20  
  JVNDB-2022-002783
  Use-after-free vulnerability in Omron CX-Drive
  7.8(High)
• 2022/12/20  
  JVNDB-2022-002780
  Command injection vulnerability in SHARP Multifunctional Products (MFP)
  9.1(Critical)

more...