LoginMultiple vulnerabilities in Yamaha router NWR100
28 October 2026 at 06:15
Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains multiple vulnerabilities.
Normal view
Received β 28 October 2026
β
JVNRSS Feed - Update Entry
-
JVNRSS Feed - Update Entry
- Installer for Yamaha LAN Monitor for Windows may insecurely load Dynamic Link Libraries
-
Installer for Yamaha LAN Monitor for Windows may insecurely load Dynamic Link Libraries
28 October 2026 at 06:00
The installer for Yamaha LAN Monitor for Windows provided by Yamaha Corporation may insecurely load Dynamic Link Libraries.
-
- Yamaha YMS-VPN8 and YMS-VPN8-CP register Windows services with unquoted file paths
-
Yamaha YMS-VPN8 and YMS-VPN8-CP register Windows services with unquoted file paths
28 October 2026 at 06:00
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths.
Multiple vulnerabilities in GROWI
27 October 2026 at 07:00
GROWI provided by GROWI, Inc. contains multiple vulnerabilities.
-
- Sleipnir Mobile for Android vulnerable to user interface misrepresentation of critical information
-
Sleipnir Mobile for Android vulnerable to user interface misrepresentation of critical information
27 October 2026 at 04:00
Sleipnir Mobile for Android provided by Fenrir Inc. contains a user interface misrepresentation of critical information vulnerability.
Multiple vulnerabilities in FUJI ELECTRIC V-SFT (October 2026)
26 October 2026 at 05:00
V-SFT provided by FUJI ELECTRIC CO., LTD. contains multiple vulnerabilities.
-
- Improper file access permission vulnerability in Electronic delivery item Inspection Support System
-
Improper file access permission vulnerability in Electronic delivery item Inspection Support System
26 October 2026 at 04:00
Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability.
Pleasanter LDAP authentication bypass vulnerability
23 October 2026 at 08:00
LDAP authentication of Pleasanter contains an authentication bypass vulnerability.
Received β 22 October 2026
β
JVNRSS Feed - Update Entry
LIFF SDK vulnerable to cross-site scripting
22 October 2026 at 03:00
LIFF SDK provided by LY Corporation contains a cross-site scripting vulnerability.
Atsumi Electric DVRs contain hidden functionality issues
20 October 2026 at 07:00
Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. contain hidden functionality issues.
-
- Multiple Lenovo Tablets shipped with a known private test key for Android Verified Boot
-
Multiple Lenovo Tablets shipped with a known private test key for Android Verified Boot
20 October 2026 at 05:00
Multiple Tablets provided by Lenovo are shipped with a known private test key for Android Verified Boot.
UnRTF vulnerable to out-of-bounds write
20 October 2026 at 05:00
UnRTF by GNU Project contains an out-of-bounds write vulnerability.
-
- Improper restriction of XML external entity references in Yamaha VOCALOID6 Editor
-
Improper restriction of XML external entity references in Yamaha VOCALOID6 Editor
19 October 2026 at 03:00
VOCALOID6 Editor provided by Yamaha Corporation improperly restricts XML external entity references.
-
- Smartphone application "Vehicle Inspection Certificate Viewer" vulnerable to sensitive information disclosure
-
Smartphone application "Vehicle Inspection Certificate Viewer" vulnerable to sensitive information disclosure
15 October 2026 at 07:00
The smartphone application "Vehicle Inspection Certificate Viewer" provided by the Ministry of Land, Infrastructure, Transport and Tourism contains a vulnerability in which sensitive information may be included in data transmitted by the application.
"Handmade Marketplace App - Creema" vulnerable to open redirect
15 October 2026 at 05:00
"Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability.
Multiple vulnerabilities in "γ²γͺγ’γγͺ"
15 October 2026 at 05:00
"γ²γͺγ’γγͺ" provided by GEO CORPORATION contains multiple vulnerabilities.
-
- EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin" vulnerable to external control of assumed-immutable web parameter
-
EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin" vulnerable to external control of assumed-immutable web parameter
14 October 2026 at 10:00
EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin" vulnerable to external control of assumed-immutable web parameter
SiteGuard Server Edition vulnerable to OS command injection
14 October 2026 at 08:15
SiteGuard Server Edition provided by EG Secure Solutions Inc. contains an OS command injection vulnerability.
-
- Multiple Rakuten Mobile smartphones shipped with a known private test key for Android Verified Boot
-
Multiple Rakuten Mobile smartphones shipped with a known private test key for Android Verified Boot
14 October 2026 at 05:00
Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality.
-
- AssetView vulnerable to incorrect permission assignment for critical resource
-
AssetView vulnerable to incorrect permission assignment for critical resource
13 October 2026 at 05:00
AssetView provided by Hammock Corporation contains an incorrect permission assignment for critical resource vulnerability.
