GROWI provided by GROWI, Inc. contains a Regular expression Denial-of-Service (DoS) vulnerability.

LogonTracer provided by Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) contains multiple vulnerabilities.

IP Setting Software provided by i-PRO Co., Ltd. may insecurely load Dynamic Link Libraries.

CMS ALAYA provided by KANATA Limited contains an SQL injection vulnerability.

Ziostation2 provided by Ziosoft, Inc. contains a path traversal vulnerability.

The installer of LiveOn Meet Client for Windows and the installer of Canon Network Camera Plugin provided by Japan Media Systems Corporation may insecurely load Dynamic Link Libraries.

DeepL Chrome browser extension contains a cross-site scripting vulnerability.

SD-330AC and AMC Manager provided by silex technology, Inc. contain multiple vulnerabilities.

SKYSEA Client View and SKYMEC IT Manager provided by Sky Co.,LTD. configures the installation folder with improper file access permission settings.

CubeCart provided by CubeCart Limited contains multiple vulnerabilities.

Offline activation traffic of UDP Console provided by Arcserve may be redirected to a dummy URL.

The UPS (Uninterruptible Power Supply) management application provided by OMRON Corporation may insecurely load Dynamic Link Libraries.

GROWI provided by GROWI, Inc. contains a stored cross-site scripting vulnerability.

Bluetooth ACPI Drivers provided by Dynabook Inc. contain a stack-based buffer overflow vulnerability.

EmoCheck provided by Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) loads Dynamic Link Libraries insecurely.

Movable Type provided by Six Apart Ltd. contains multiple vulnerabilities.

Xerox FreeFlow Core contains multiple vulnerabilities.

Xerox Freeflow Core provided by FUJIFILM Business Innovation Corp. contains multiple vulnerabilities.

MATCHA series provided by ICZ Corporation contains multiple vulnerabilities.

Aterm series products provided by NEC Corporation contain multiple vulnerabilities.