jpcert

Reports to jpcert (12)

Latest CVEs (this partner and the CNAs under it) · RSS

• CVE-2026-16438 2026-10-15 · Mitsubishi · CVSS 9.4
  Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior, Hyper Histor
• CVE-2026-16437 2026-10-15 · Mitsubishi · CVSS 7.1
  Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and pr
• CVE-2026-72528 2026-10-15 · CVSS 4.3
  "Handmade Marketplace App - Creema" provided by CREEMA LTD. contains an open redirect vulnerability. When accessing a specially crafted URL, a website set up by
• CVE-2026-16436 2026-10-15 · Mitsubishi · CVSS 9.2
  Weak Password Recovery Mechanism for Forgotten Password vulnerability in Mitsubishi Electric GENESIS versions 11.03 and prior, GENESIS64 versions 10.97.3 and pr
• CVE-2026-75559 2026-10-15 · CVSS 5.3
  The smartphone application "Vehicle Inspection Certificate Viewer" contains a vulnerability in which sensitive information may be included in data transmitted b
• CVE-2026-96614 2026-10-15 · CVSS 5.4
  "ゲオアプリ" provided by GEO CORPORATION is vulnerable to improper authorization in handler for a custom URL scheme. An attacker may be able to cause the application
• CVE-2026-105271 2026-10-15 · CVSS 4.3
  "ゲオアプリ" provided by GEO CORPORATION contains an issue with cleartext storage of sensitive information, which may allow an attacker to obtain the password of a u
• CVE-2026-103671 2026-10-14 · CVSS 4.7
  External control of assumed-Immutable web parameter issue exists in EC-CUBE plugin (for EC-CUBE 4 series) "AmazonPay Plugin". If exploited, the user may be redi
• CVE-2026-107153 2026-10-14 · CVSS 6.6
  Multiple smartphones provided by Rakuten Mobile, Inc. utilize AOSP test keys for their Android Verified Boot (AVB) functionality. With physical access to the af
• CVE-2026-106931 2026-10-14 · CVSS 7.8
  SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS commands with root or SYSTEM privil
• CVE-2026-82715 2026-10-14 · Hitachi · CVSS 7.9
  Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Dis
• CVE-2026-86573 2026-10-14 · Hitachi · CVSS 5.1
  Out-of-bounds write vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O Server. This issue affects Hitachi Disk Ar
• CVE-2026-86607 2026-10-14 · Hitachi · CVSS 4.3
  Internal Application Information Exposure Vulnerability in Hitachi Ops Center Administrator. This issue affects Hitachi Ops Center Administrator: before 11.0.
• CVE-2026-101020 2026-10-13 · CVSS 7.8
  An incorrect permission assignment for critical resource issue exists in AssetView, AssetView CLOUD, and AssetView Cloud +. If this vulnerability is exploited,
• CVE-2026-92862 2026-10-08 · CVSS 3.3
  The Android application "Ticket Ryutsu Center" improperly handles custom URL schemes, allowing a malicious application to cause access to an arbitrary website v
• CVE-2026-92861 2026-10-08 · CVSS 4.0
  The Android application "Ticket Ryutsu Center" contains hard-coded credentials, which may allow an attacker to obtain an API key used by the application.
• CVE-2026-103668 2026-10-07 · CVSS 8.6
  An SQL Injection vulnerability exists in the Site Search function of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary SQL query
• CVE-2026-96408 2026-10-07 · CVSS 9.4
  A code injection vulnerability exists in the upgrade script of Movable Type, which may allow an unauthenticated attacker to execute an arbitrary Perl script or
• CVE-2026-100727 2026-10-05 · CVSS 5.3
  An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected pr
• CVE-2026-78249 2026-10-01 · FB · CVSS 6.8
  A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers, including Apeos C4571 1.1.3 and earlier, A
• CVE-2026-82824 2026-10-01 · Hitachi · CVSS 9.3
  Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete file
• CVE-2026-82825 2026-10-01 · Hitachi · CVSS 9.3
  Hitachi Coding Software Suite contains a vulnerability related to Missing Authentication for Critical Function. This allows an unauthenticated attacker to invok
• CVE-2026-82826 2026-10-01 · Hitachi · CVSS 8.7
  Hitachi Coding Software Suite contains a vulnerability related to the Cleartext Transmission of Sensitive Information which allows an attacker to eavesdrop on w
• CVE-2026-82827 2026-10-01 · Hitachi · CVSS 9.3
  Hitachi Coding Software Suite contains a vulnerability related to Use of Hard-coded Cryptographic Key. The Hardcoding of JWT signing secret key allows an attack
• CVE-2026-82828 2026-10-01 · Hitachi · CVSS 8.7
  Hitachi Coding Software Suite contains an Incorrect Authorization vulnerability that allows an unprivileged user to perform administrator-level operations. Th