Cybozu Garoon provided by Cybozu, Inc contains a cross-site scripting vulnerability.

Tegalog -Fumy Otegaru Memo Logger- provided by Nishishi Factory contains a vulnerability due to a permissive regular expression.

Network Scanner Tool and Network Scanner Tool Lite provided by Sharp Corporation, with the initial configuration, require no authentication and accept files unlimitedly.

Sharp and Toshiba Tec MFPs (multifunction printers) contain multiple vulnerabilities.

Robotic cleaners DEEBOT PRO M1 and DEEBOT PRO K1VAC, and mobile app ECOVACS PRO App developed by ECOVACS ROBOTICS contain multiple vulnerabilities. They are provided in Japan by Hellohas Robotics Inc.

BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability.

Trend Micro Incorporated has released a security update for TrendAI Vision One Service Gateway.

Multiple wireless LAN routers and access points provided by ELECOM CO.,LTD. contain multiple vulnerabilities.

Printers and Multifunction Printers (MFPs) provided by Ricoh Company, Ltd. do not implement restrictions on SSH port forwarding, allowing to connect to arbitrary destinations.

AI Agents provided by Drupal contains an incorrect authorization vulnerability.

For certain FeliCa IC chips shipped by Sony Corporation in or before 2017, a certain operation during cryptographic processing may compromise the intended security strength.

TTSSH2 plugin of Tera Term provided by TeraTerm Project contains multiple vulnerabilities.

Installer of HYPER SBI 2 provided by SBI SECURITIES Co.,Ltd. insecurely loads Dynamic Link Libraries.

LINE client for iOS provided by LY Corporation contains a vulnerability in the in-app browser due to insufficient safeguards when handling arbitrary URL schemes, which may lead to denial-of-service (DoS) condition.

Multiple laser printers and MFPs (multifunction printers) which implement Ricoh Web Image Monitor contain a reflected cross-site scripting vulnerability.

The installer for Pupsman provided by Fuji Electric Co.,Ltd. contains multiple vulnerabilities.

Jena Fuseki provided by The Apache Software Foundation contains a path traversal vulnerability.

Web Config embedded in SEIKO EPSON multiple printers and scanners contains a cross-site request forgery vulnerability.

SkyBridge MB-A100/MB-A110 provided by Seiko Solutions Inc. contains an OS command injection vulnerability.

RPG MAKER MV and MZ provided by Gotcha Gotcha Games Inc. contain an OS command injection vulnerability.