LoginLIFF SDK vulnerable to cross-site scripting
22 October 2026 at 03:00
LIFF SDK provided by LY Corporation contains a cross-site scripting vulnerability.
Normal view
Received β 22 October 2026
β
JVNRSS Feed - Update Entry
Atsumi Electric DVRs contain hidden functionality issues
20 October 2026 at 07:00
Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. contain hidden functionality issues.
-
JVNRSS Feed - Update Entry
- Multiple Lenovo Tablets shipped with a known private test key for Android Verified Boot
-
Multiple Lenovo Tablets shipped with a known private test key for Android Verified Boot
20 October 2026 at 05:00
Multiple Tablets provided by Lenovo are shipped with a known private test key for Android Verified Boot.
UnRTF vulnerable to out-of-bounds write
20 October 2026 at 05:00
UnRTF by GNU Project contains an out-of-bounds write vulnerability.
-
- Improper restriction of XML external entity references in Yamaha VOCALOID6 Editor
-
Improper restriction of XML external entity references in Yamaha VOCALOID6 Editor
19 October 2026 at 03:00
VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references.
-
- Smartphone application "Vehicle Inspection Certificate Viewer" vulnerable to sensitive information disclosure
-
Smartphone application "Vehicle Inspection Certificate Viewer" vulnerable to sensitive information disclosure
15 October 2026 at 07:00
The smartphone application "Vehicle Inspection Certificate Viewer" provided by the Ministry of Land, Infrastructure, Transport and Tourism contains a vulnerability in which sensitive information may be included in data transmitted by the application.
"Handmade Marketplace App - Creema" vulnerable to open redirect
15 October 2026 at 05:00
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability.
Multiple vulnerabilities in "γ²γͺγ’γγͺ"
15 October 2026 at 05:00
"γ²γͺγ’γγͺ" provided by GEO CORPORATION contains multiple vulnerabilities.
-
- EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin" vulnerable to external control of assumed-immutable web parameter
-
EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin" vulnerable to external control of assumed-immutable web parameter
14 October 2026 at 10:00
EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin" vulnerable to external control of assumed-immutable web parameter
SiteGuard Server Edition vulnerable to OS command injection
14 October 2026 at 08:15
SiteGuard Server Edition provided by EG Secure Solutions Inc. contains an OS command injection vulnerability.
-
- Multiple Rakuten Mobile smartphones shipped with a known private test key for Android Verified Boot
-
Multiple Rakuten Mobile smartphones shipped with a known private test key for Android Verified Boot
14 October 2026 at 05:00
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality.
-
- AssetView vulnerable to incorrect permission assignment for critical resource
-
AssetView vulnerable to incorrect permission assignment for critical resource
13 October 2026 at 05:00
AssetView provided by Hammock Corporation contains an incorrect permission assignment for critical resource vulnerability.
Multiple vulnerabilities in Movable Type
7 October 2026 at 07:00
Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities.
Received β 6 October 2026
β
JVNRSS Feed - Update Entry
MCC Universal Library for Linux (uldaq) vulnerabile to buffer overflow
6 October 2026 at 05:00
Universal Library for Linux (uldaq) provided by Measurement Computing Corporation contains a stack-based buffer overflow vulnerability.
Multiple vulnerabilities in Android application "Ticket Ryutsu Center"
6 October 2026 at 05:00
Android application "Ticket Ryutsu Center" provided by Wavedash Co., Ltd. contains multiple vulnerabilities.
Received β 5 October 2026
β
JVNRSS Feed - Update Entry
GROWI vulnerable to improper access control
5 October 2026 at 08:00
GROWI provided by GROWI, Inc. contains an improper access control vulnerability.
Received β 30 September 2026
β
JVNRSS Feed - Update Entry
-
- Path traversal vulnerability in FUJIFILM Business Innovation and Sharp MFPs (multifunction printers)
-
Path traversal vulnerability in FUJIFILM Business Innovation and Sharp MFPs (multifunction printers)
30 September 2026 at 05:30
FUJIFILM Business Innovation and Sharp MFPs (multifunction printers) contain a path traversal vulnerability.
Received β 29 September 2026
β
JVNRSS Feed - Update Entry
Multiple vulnerabilities in Image Scanner Driver for Linux
29 September 2026 at 08:00
Image Scanner Driver for Linux provided by PFU Limited contains multiple vulnerabilities.
Multiple vulnerabilities in Pgpool-II
29 September 2026 at 07:00
Pgpool-II provided by Pgpool Global Development Group contains multiple vulnerabilities.
Multiple vulnerabilities in BUFFALO Wi-Fi Products
28 September 2026 at 06:30
Wi-Fi products provided by BUFFALO INC. contain multiple vulnerabilities.
